Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer
File: E5Mngu53WJkEBPocz7CewjqGEj8.cer (raw, json)
Hash identifier: yc8Mf/jiPo33cub6IerpzkCG7q86nkHk5utHKSYcTAo=
Subject key identifier: 13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4936D8072066F998431E8D23A034F63
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:45 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 3344
AS: 9153
IP: 46.248.96.0/19
IP: 82.136.0.0/18
IP: 85.116.0.0/19
IP: 194.1.148.0/24
IP: 195.22.128.0/23
IP: 195.22.134.0/23
IP: 195.68.206.0/23
IP: 195.68.220.0/23
IP: 195.177.244.0/23
IP: 2001:4088::/32
IP: 2001:4bd0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 13:25:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:6d:80:72:06:6f:99:84:31:e8:d2:3a:03:4f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13932782ee7758990404fa1ccfb09ec23a86123f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fa:dd:48:2c:ed:a3:b5:d7:2f:5e:bc:df:9a:
1d:c4:f9:67:94:59:1f:fb:de:dd:dd:be:cb:ab:ad:
6d:58:c1:06:d7:75:ea:1b:e5:37:ed:e7:72:f9:28:
cb:75:7e:fa:8f:72:8d:6c:37:62:ed:88:5d:ac:52:
07:47:10:26:51:e7:20:50:0f:be:7f:7e:63:a0:ea:
6a:6b:e1:37:e9:a4:6e:a6:51:d8:7a:c4:6b:90:d5:
6c:dd:47:10:45:a7:59:33:14:8b:86:c2:d4:e1:82:
5e:08:8f:ac:12:4a:e3:45:30:f4:d0:fc:54:d5:bf:
47:60:5c:82:d5:72:30:00:09:ee:6c:f1:c7:76:2f:
69:9b:24:96:29:00:15:6f:c2:5b:25:8e:31:64:ba:
c5:84:39:59:de:1e:50:15:93:71:a9:0e:43:5c:ff:
7b:bc:f7:e7:84:be:08:05:c7:61:75:25:c7:69:2b:
32:39:12:6b:b9:dc:bb:1f:53:3f:ff:c3:0b:8b:3c:
b8:0d:04:53:89:c6:6a:19:8b:62:06:37:68:16:b4:
fe:1d:6e:ea:41:e1:b3:d1:86:ad:f7:c7:ff:97:f2:
cd:d5:4d:5c:8c:1a:a9:b3:da:0b:bd:d3:20:8e:ef:
a9:d4:4c:61:86:e5:9a:36:b3:28:00:45:0c:55:6c:
99:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.248.96.0/19
82.136.0.0/18
85.116.0.0/19
194.1.148.0/24
195.22.128.0/23
195.22.134.0/23
195.68.206.0/23
195.68.220.0/23
195.177.244.0/23
IPv6:
2001:4088::/32
2001:4bd0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
3344
9153
Signature Algorithm: sha256WithRSAEncryption
79:d0:61:ac:ba:be:03:35:a2:c8:1f:61:42:19:72:aa:1a:99:
80:de:0e:96:e7:b0:e5:fb:0b:87:fd:3a:16:5d:18:86:38:e6:
c3:5f:7b:ce:f0:98:1a:6b:9d:8f:54:60:97:4e:ad:36:c6:ef:
2d:f5:de:da:9d:d3:b4:da:0e:de:22:16:7f:63:f8:60:de:36:
e7:88:9c:ea:c4:a7:fc:bc:cc:51:51:3a:0b:c1:57:ed:98:08:
38:d2:5c:8f:8d:df:61:d5:13:96:6d:b7:ee:15:57:77:33:fa:
6e:9a:b1:3c:7c:17:c6:fe:8a:fe:8b:4b:94:61:23:00:42:7d:
3e:2b:06:04:74:a7:d2:b8:ab:59:ea:0c:13:cb:5f:ff:66:b1:
05:c6:b2:63:5c:d1:3d:ef:15:31:ec:16:40:f9:5f:2e:79:ac:
8e:0d:7a:07:59:c5:9e:f1:7f:f5:02:9e:41:b2:67:dc:06:de:
05:f4:95:19:d0:10:74:ca:24:f0:15:19:bc:fb:11:dd:69:bf:
8b:4e:c8:61:e9:8a:c3:19:1a:75:15:26:c8:3f:59:44:b1:cc:
cd:8a:fc:d5:ca:fe:3d:7f:2f:40:17:cb:59:36:fe:5f:71:53:
c3:3f:7f:e5:9e:78:5f:7b:cc:02:84:bc:0c:bd:cc:21:27:24:
fb:01:21:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 14:51:06 2024 by rpki-client on console-ams.rpki-client.org