Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
File: F7UEL8INm6sWduCa9_8bpb-trnU.cer (raw, json)
Hash identifier: 1Sc+lYHtA4RDR4I1zumTTMKbAsKXZnBEpyzjLHsJ0Ho=
Subject key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D5F5EB480BF30E7C35D7B6F2D743F1B1B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 31 Jan 2024 11:54:18 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 5.180.179.0/24
IP: 31.217.248.0/24
IP: 46.254.108.0/24
IP: 62.68.66.0/24
IP: 84.54.35.0/24
IP: 87.236.148.0/24
IP: 91.198.200.0/24
IP: 91.205.223.0/24
IP: 91.242.242.0/24
IP: 94.247.138.0/24
IP: 146.19.7.0/24
IP: 146.19.155.0/24
IP: 178.212.142.0/24
IP: 178.212.224.0/24
IP: 185.65.70.0/24
IP: 185.137.164.0/24
IP: 185.184.219.0/24
IP: 185.249.53.0/24
IP: 193.3.175.0/24
IP: 193.35.228.0/24
IP: 193.163.200.0/24
IP: 194.9.181.0/24
IP: 194.62.162.0/24
IP: 212.23.198.0/24
IP: 217.119.143.0/24
IP: 2a03:cc40::/29
IP: 2a0c:e500::/29
IP: 2a10:1d80::/29
IP: 2a11:1300::/29
IP: 2a11:1ac0::/29
IP: 2a11:3140::/29
IP: 2a11:3c80::/29
IP: 2a11:5340::/29
IP: 2a11:53c0::/29
IP: 2a11:5440::/29
IP: 2a11:5500::/29
IP: 2a11:7a00::/29
IP: 2a11:7dc0::/29
IP: 2a11:8380::/29
IP: 2a11:ac00::/29
IP: 2a11:b040::/29
IP: 2a11:b300::/29
IP: 2a11:c000::/29
IP: 2a11:ec80::/29
IP: 2a12:600::/29
IP: 2a12:2580::/29
IP: 2a12:2900::/29
IP: 2a12:5000::/29
IP: 2a12:b880::/29
IP: 2a12:d300::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5f:5e:b4:80:bf:30:e7:c3:5d:7b:6f:2d:74:3f:1b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 31 11:54:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:82:b6:a7:95:3b:8d:2b:70:6d:30:bc:b3:c7:
93:c2:ef:be:ad:8b:da:63:eb:f8:fe:d7:bd:fe:a0:
ca:97:e0:61:bd:cd:04:a9:f8:6b:0a:85:e6:ff:2d:
4b:4b:9f:5d:ce:47:37:38:91:88:b3:d0:7a:1e:17:
70:a8:eb:54:41:34:7c:73:40:6c:b7:f6:1d:64:fd:
27:06:1e:7a:18:eb:1f:e6:67:fb:73:51:28:ea:23:
e2:6d:c5:2f:4f:c1:fb:74:d9:2f:ea:80:46:dc:c0:
33:42:f4:54:e9:4a:ed:71:a2:43:5b:4c:95:46:30:
4d:0f:64:ae:a8:a8:02:04:aa:b1:74:9e:9a:f9:86:
ad:39:08:e3:8c:4c:53:e7:e0:b2:69:1b:b0:1e:bf:
4b:35:1e:a1:f1:fc:db:13:2a:16:c2:a1:1d:94:cd:
5a:e5:0a:ee:de:9a:3f:d7:7f:40:5c:3c:59:3a:86:
9d:5b:c0:dd:0f:c8:27:a8:61:6d:53:8a:f6:67:bd:
c8:7a:7c:e3:82:f4:d9:a2:b1:a5:7b:cf:f3:09:9e:
72:bc:00:f5:cf:20:eb:71:9f:cc:77:a5:0c:2a:42:
7d:06:27:63:c0:fc:a3:f8:5c:32:b4:12:a6:52:51:
87:7a:25:b1:b4:34:8d:73:ef:cd:c3:eb:39:f3:2e:
0b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.179.0/24
31.217.248.0/24
46.254.108.0/24
62.68.66.0/24
84.54.35.0/24
87.236.148.0/24
91.198.200.0/24
91.205.223.0/24
91.242.242.0/24
94.247.138.0/24
146.19.7.0/24
146.19.155.0/24
178.212.142.0/24
178.212.224.0/24
185.65.70.0/24
185.137.164.0/24
185.184.219.0/24
185.249.53.0/24
193.3.175.0/24
193.35.228.0/24
193.163.200.0/24
194.9.181.0/24
194.62.162.0/24
212.23.198.0/24
217.119.143.0/24
IPv6:
2a03:cc40::/29
2a0c:e500::/29
2a10:1d80::/29
2a11:1300::/29
2a11:1ac0::/29
2a11:3140::/29
2a11:3c80::/29
2a11:5340::/29
2a11:53c0::/29
2a11:5440::/29
2a11:5500::/29
2a11:7a00::/29
2a11:7dc0::/29
2a11:8380::/29
2a11:ac00::/29
2a11:b040::/29
2a11:b300::/29
2a11:c000::/29
2a11:ec80::/29
2a12:600::/29
2a12:2580::/29
2a12:2900::/29
2a12:5000::/29
2a12:b880::/29
2a12:d300::/29
Signature Algorithm: sha256WithRSAEncryption
6f:a3:de:11:8e:87:e0:6e:ae:53:98:2c:4a:cf:89:0a:c9:a9:
86:07:29:2d:a4:f0:fe:45:24:ce:ed:78:29:a2:5d:e4:4e:b9:
b9:47:b0:0c:38:70:75:c1:67:4f:0d:18:94:20:42:8b:57:2c:
a9:05:a1:03:21:58:01:00:e5:8b:5d:17:82:79:ee:79:59:0c:
a4:cf:d9:7e:cc:34:7c:b8:c8:8c:28:6f:2c:9a:c3:c8:4e:f9:
e5:72:b3:c9:0d:5d:97:23:47:c7:05:e8:5f:c2:6e:6d:c8:7c:
9b:56:8e:da:a2:f9:c4:34:66:96:c6:78:cb:2c:9b:4f:7b:0b:
c4:1d:56:b9:af:c3:2f:e7:96:62:fe:cd:4f:de:f5:81:3a:f0:
16:50:1e:da:17:3c:17:5a:ef:e0:33:6f:85:68:94:41:c1:9f:
22:83:7d:4f:96:fd:76:9a:69:5b:ff:f1:6c:db:60:a1:72:ff:
1d:b1:ff:7a:68:7f:5e:42:8a:07:73:d3:ed:94:ca:73:e2:63:
ec:ca:7b:0d:bf:92:d0:2c:fa:44:a8:61:6e:52:06:e2:07:f8:
0d:55:98:18:4b:57:8b:49:62:b1:5f:f6:29:4d:6f:cb:47:23:
01:b7:eb:20:f0:0f:8e:3c:37:22:e8:95:81:46:89:2b:f0:e2:
68:0a:a1:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 23:18:06 2024 by rpki-client on console-ams.rpki-client.org