Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
File: SeFL929C2k8qwAOmxp1hwjIOLNg.cer (raw, json)
Hash identifier: Eo0jp6tGzs6IcTx8xtMiVk8LiH0jg+25hdolc7aRi9k=
Subject key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D5ED71E7B13701179C0284AAF3277501B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 31 Jan 2024 09:26:12 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 5.172.180.0/24
IP: 37.72.135.0/24
IP: 46.226.125.0/24
IP: 62.68.92.0/24
IP: 62.233.36.0/24
IP: 91.246.59.0/24
IP: 94.154.116.0/24
IP: 130.255.168.0/24
IP: 146.19.67.0/24
IP: 146.19.189.0/24
IP: 176.118.34.0/24
IP: 178.211.150.0/24
IP: 185.21.131.0/24
IP: 185.25.104.0/24
IP: 185.83.231.0/24
IP: 185.149.148.0/24
IP: 185.235.227.0/24
IP: 185.248.135.0/24
IP: 193.3.169.0/24
IP: 193.108.131.0/24
IP: 194.62.104.0/24
IP: 194.104.135.0/24
IP: 195.225.98.0/24
IP: 212.23.195.0/24
IP: 212.52.29.0/24
IP: 217.114.39.0/24
IP: 2a04:ca80::/29
IP: 2a07:dd80::/29
IP: 2a09:8140::/29
IP: 2a0a:ca40::/29
IP: 2a0c:b140::/29
IP: 2a0c:b500::/29
IP: 2a11:2dc0::/29
IP: 2a11:4840::/29
IP: 2a11:4d00::/29
IP: 2a11:5a00::/29
IP: 2a11:5c00::/29
IP: 2a11:5e40::/29
IP: 2a11:76c0::/29
IP: 2a11:9f80::/29
IP: 2a11:a4c0::/29
IP: 2a11:a900::/29
IP: 2a11:bf40::/29
IP: 2a11:cf80::/29
IP: 2a11:fa00::/29
IP: 2a12:200::/29
IP: 2a12:3000::/29
IP: 2a12:4480::/29
IP: 2a12:7500::/29
IP: 2a12:a680::/29
IP: 2a12:e600::/29
IP: 2a12:f700::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5e:d7:1e:7b:13:70:11:79:c0:28:4a:af:32:77:50:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 31 09:26:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:57:ad:f7:1f:9d:50:7a:98:d3:25:ae:5e:17:
fc:67:b1:c3:85:e0:2e:04:99:74:17:07:c6:11:28:
3c:1c:7a:48:c4:f6:88:10:0a:24:6e:7c:d8:e4:d8:
cd:9e:95:13:97:86:56:7c:8f:c8:65:89:8c:da:77:
ea:76:4f:52:7d:0f:a1:b0:b7:c8:1e:bb:5b:0c:72:
66:fc:51:cc:d2:14:77:1b:74:98:d6:26:71:1f:25:
4d:03:12:83:22:cd:81:cb:4e:ca:b0:89:e5:79:6e:
b9:d0:8f:d2:53:9c:35:10:a6:5d:df:f6:35:31:9b:
ab:91:df:cb:7d:6d:73:e7:5b:3a:e4:10:87:ea:9d:
00:7e:08:d6:64:a4:7c:ca:64:ad:16:df:71:de:7f:
64:da:7c:c2:84:b0:c2:9f:6a:45:32:f3:88:0c:d9:
9e:ab:00:d1:b7:06:d5:99:6f:1d:f1:7b:8f:63:90:
72:87:98:17:2e:9a:7a:aa:e3:24:6d:be:dd:1d:b7:
18:95:e1:a3:3d:e1:f7:22:f9:d6:07:e6:94:87:fc:
d9:47:7d:90:a9:14:5d:9c:b3:6f:1c:fe:d4:13:c5:
22:65:61:9f:c3:b0:1b:3b:41:37:a7:28:1b:65:6b:
84:1e:e3:39:4f:9f:ec:ce:c5:a8:03:42:12:28:f6:
3c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.180.0/24
37.72.135.0/24
46.226.125.0/24
62.68.92.0/24
62.233.36.0/24
91.246.59.0/24
94.154.116.0/24
130.255.168.0/24
146.19.67.0/24
146.19.189.0/24
176.118.34.0/24
178.211.150.0/24
185.21.131.0/24
185.25.104.0/24
185.83.231.0/24
185.149.148.0/24
185.235.227.0/24
185.248.135.0/24
193.3.169.0/24
193.108.131.0/24
194.62.104.0/24
194.104.135.0/24
195.225.98.0/24
212.23.195.0/24
212.52.29.0/24
217.114.39.0/24
IPv6:
2a04:ca80::/29
2a07:dd80::/29
2a09:8140::/29
2a0a:ca40::/29
2a0c:b140::/29
2a0c:b500::/29
2a11:2dc0::/29
2a11:4840::/29
2a11:4d00::/29
2a11:5a00::/29
2a11:5c00::/29
2a11:5e40::/29
2a11:76c0::/29
2a11:9f80::/29
2a11:a4c0::/29
2a11:a900::/29
2a11:bf40::/29
2a11:cf80::/29
2a11:fa00::/29
2a12:200::/29
2a12:3000::/29
2a12:4480::/29
2a12:7500::/29
2a12:a680::/29
2a12:e600::/29
2a12:f700::/29
Signature Algorithm: sha256WithRSAEncryption
30:4d:61:c2:5b:80:80:8e:06:4e:d1:20:37:79:44:d2:3e:37:
be:e7:f4:e0:70:28:22:90:eb:3d:81:1c:54:94:69:9d:df:06:
75:2e:2c:20:e2:2c:fc:73:f2:86:87:0b:e0:80:fa:f2:d1:07:
1e:05:d8:b0:a2:f1:cd:f5:c3:98:89:b2:17:76:1e:0d:51:b6:
7b:54:aa:8d:08:9d:3d:0f:52:6f:4e:95:24:d8:5c:04:14:ee:
95:39:13:8f:4c:98:04:09:ae:fe:2c:1c:5d:81:54:e6:65:bd:
59:89:e2:a6:68:31:c4:ac:28:7e:dd:60:0d:7a:a4:d2:41:a4:
49:56:c3:82:0d:9c:f3:84:90:82:c5:01:69:ae:06:e3:75:bd:
b8:9a:ab:d6:e1:aa:7a:c7:1d:0b:35:88:56:a0:73:15:11:a7:
42:b7:5d:cb:8d:8f:f7:49:1c:32:9e:19:90:84:d2:00:b4:3f:
ce:50:96:11:99:e5:56:e1:b7:f2:2e:04:fb:a8:5c:1e:76:33:
cd:da:00:4c:b2:03:0a:a9:f8:6a:29:1f:8c:3d:e4:6b:0d:f9:
f0:b7:ec:5a:cd:94:29:f4:70:6a:53:aa:b6:8b:fe:3c:10:3c:
01:a6:ae:4d:44:9e:7a:06:88:64:43:fb:20:e1:50:a6:f3:ab:
50:e5:8f:29
-----BEGIN CERTIFICATE-----
MIIG1jCCBb6gAwIBAgISAY1e1x57E3ARecAoSq8yd1AbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTMxMDkyNjEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OWUxNGJmNzZmNDJkYTRmMmFjMDAzYTZjNjlkNjFjMjMyMGUyY2Q4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplet9x+dUHqY0yWuXhf8Z7HDheAu
BJl0FwfGESg8HHpIxPaIEAokbnzY5NjNnpUTl4ZWfI/IZYmM2nfqdk9SfQ+hsLfI
HrtbDHJm/FHM0hR3G3SY1iZxHyVNAxKDIs2By07KsInleW650I/SU5w1EKZd3/Y1
MZurkd/LfW1z51s65BCH6p0AfgjWZKR8ymStFt9x3n9k2nzChLDCn2pFMvOIDNme
qwDRtwbVmW8d8XuPY5Byh5gXLpp6quMkbb7dHbcYleGjPeH3IvnWB+aUh/zZR32Q
qRRdnLNvHP7UE8UiZWGfw7AbO0E3pygbZWuEHuM5T5/szsWoA0ISKPY8JQIDAQAB
o4ID4jCCA94wHQYDVR0OBBYEFEnhS/dvQtpPKsADpsadYcIyDizYMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlkLzU2MTY3
Zi01MzI3LTRjODgtYjRlYS0zYmVjY2FhZTMzNmQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWQvNTYxNjdm
LTUzMjctNGM4OC1iNGVhLTNiZWNjYWFlMzM2ZC8xL1NlRkw5MjlDMms4cXdBT214
cDFod2pJT0xOZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBewYIKwYB
BQUHAQcBAf8EggFqMIIBZjCBowQCAAEwgZwDBAAFrLQDBAAlSIcDBAAu4n0DBAA+
RFwDBAA+6SQDBABb9jsDBABemnQDBACC/6gDBACSE0MDBACSE70DBACwdiIDBACy
05YDBAC5FYMDBAC5GWgDBAC5U+cDBAC5lZQDBAC56+MDBAC5+IcDBADBA6kDBADB
bIMDBADCPmgDBADCaIcDBADD4WIDBADUF8MDBADUNB0DBADZcicwgb0EAgACMIG2
AwUDKgTKgAMFAyoH3YADBQMqCYFAAwUDKgrKQAMFAyoMsUADBQMqDLUAAwUDKhEt
wAMFAyoRSEADBQMqEU0AAwUDKhFaAAMFAyoRXAADBQMqEV5AAwUDKhF2wAMFAyoR
n4ADBQMqEaTAAwUDKhGpAAMFAyoRv0ADBQMqEc+AAwUDKhH6AAMFAyoSAgADBQMq
EjAAAwUDKhJEgAMFAyoSdQADBQMqEqaAAwUDKhLmAAMFAyoS9wAwDQYJKoZIhvcN
AQELBQADggEBADBNYcJbgICOBk7RIDd5RNI+N77n9OBwKCKQ6z2BHFSUaZ3fBnUu
LCDiLPxz8oaHC+CA+vLRBx4F2LCi8c31w5iJshd2Hg1RtntUqo0InT0PUm9OlSTY
XAQU7pU5E49MmAQJrv4sHF2BVOZlvVmJ4qZoMcSsKH7dYA16pNJBpElWw4INnPOE
kILFAWmuBuN1vbiaq9bhqnrHHQs1iFagcxURp0K3XcuNj/dJHDKeGZCE0gC0P85Q
lhGZ5Vbht/IuBPuoXB52M83aAEyyAwqp+GopH4w95GsN+fC37FrNlCn0cGpTqraL
/jwQPAGmrk1EnnoGiGRD+yDhUKbzq1Dljyk=
-----END CERTIFICATE-----
Generated at Thu May 2 19:11:07 2024 by rpki-client on console-fra.rpki-client.org