Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer
File: T5nk6uSKAceB-q0R9tgakeozvf8.cer (raw, json)
Hash identifier: V3ehVQ9hOPE86qazCaLwirMhiej2gvqMAuYFLA4TTyc=
Subject key identifier: 4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC50006F2F17B6B3065D09623B4C22CAC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:29:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 34704
AS: 57752
IP: 37.208.48.0/21
IP: 45.10.44.0/22
IP: 45.88.68.0/22
IP: 45.89.152.0/22
IP: 45.91.144.0/22
IP: 45.130.236.0/22
IP: 62.182.36.0/22
IP: 83.136.148.0/22
IP: 91.206.10.0/24
IP: 93.174.32.0/21
IP: 109.205.64.0/21
IP: 176.118.172.0/22
IP: 185.17.56.0/22
IP: 185.54.36.0/22
IP: 185.153.28.0/22
IP: 185.167.220.0/22
IP: 185.234.48.0/22
IP: 195.12.37.0/24
IP: 213.232.80.0/22
IP: 2a03:dc00::/32
IP: 2a06:a80::/29
IP: 2a07:5e40::/29
IP: 2a12:9240::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:06:f2:f1:7b:6b:30:65:d0:96:23:b4:c2:2c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:13:84:9a:1d:76:d0:ad:95:09:7b:3d:e3:28:
c6:09:6f:8d:75:d2:4d:f7:84:fe:ad:3a:be:1c:2e:
91:c4:0f:34:02:8f:56:2a:75:04:e3:96:9b:8f:ab:
b9:55:1e:ba:06:e9:43:2c:e1:16:c7:78:90:c9:8c:
be:8a:08:88:41:54:90:f9:d7:8d:7d:be:97:2b:15:
a6:a7:84:04:0a:29:c9:4d:fa:2b:18:ba:79:23:ae:
8c:46:84:c3:1c:83:c8:71:21:e4:21:a4:72:2a:21:
ca:62:c5:5d:b3:e7:99:14:9e:c7:a9:31:09:e0:3d:
85:55:a6:1c:8b:a9:6a:71:3b:06:eb:99:24:70:9c:
f3:61:8e:c0:c4:eb:35:61:bc:22:81:9a:65:8f:fa:
13:04:52:9f:ca:43:85:96:19:a4:95:4b:22:9f:b4:
98:88:46:64:4b:bf:67:3e:d5:50:f9:6d:db:fa:8c:
61:51:7e:f9:3b:34:d2:fe:4e:dc:8e:8e:0d:30:91:
dd:05:28:ce:d9:64:6e:2d:62:22:ce:98:92:fe:5e:
93:f9:4c:fc:6d:47:06:0d:43:1f:92:1e:7d:3c:8e:
5c:bc:4c:21:0b:62:97:d2:f7:56:8a:57:8b:a9:4f:
bd:37:fc:fe:da:26:7f:b4:f4:23:58:2d:fc:95:4d:
f7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.208.48.0/21
45.10.44.0/22
45.88.68.0/22
45.89.152.0/22
45.91.144.0/22
45.130.236.0/22
62.182.36.0/22
83.136.148.0/22
91.206.10.0/24
93.174.32.0/21
109.205.64.0/21
176.118.172.0/22
185.17.56.0/22
185.54.36.0/22
185.153.28.0/22
185.167.220.0/22
185.234.48.0/22
195.12.37.0/24
213.232.80.0/22
IPv6:
2a03:dc00::/32
2a06:a80::/29
2a07:5e40::/29
2a12:9240::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34704
57752
Signature Algorithm: sha256WithRSAEncryption
4d:87:fc:cd:cf:03:d3:6c:ec:f5:94:16:1a:c5:f0:53:5f:71:
db:62:bf:7d:41:d5:9c:44:35:45:2c:85:ca:5d:a6:d5:d0:2e:
8d:8f:2b:ba:85:4d:6d:1c:7a:a0:f7:2c:08:02:ba:db:83:78:
27:ba:b1:a4:46:ff:5a:14:cf:77:e1:05:cf:65:c8:6d:c2:b3:
5b:64:8e:06:f0:12:05:bc:b3:ea:a6:c4:c0:10:6b:17:f8:2b:
44:06:f1:28:94:ef:6b:b2:dd:ea:54:04:36:e7:7e:85:9a:50:
7e:00:28:c9:29:3c:ce:01:5a:45:d2:1b:ed:9a:fa:37:11:11:
a2:3c:af:cf:11:3a:80:b1:5e:99:02:58:38:9b:d2:2a:09:b6:
6a:6e:b0:7e:51:ef:4a:d4:ec:82:33:a3:8f:c6:26:fc:e7:06:
71:98:50:b1:d2:2b:b0:c8:27:98:97:40:3c:ad:10:23:9c:22:
f6:90:1e:59:3f:f4:41:86:88:7e:c5:81:72:2f:80:5a:82:66:
bc:4f:b2:be:a7:8e:50:11:3d:27:e7:1f:d3:45:a2:a7:44:81:
f5:a7:6b:50:5a:5f:75:da:cd:fa:86:90:ca:e9:39:ec:be:89:
69:6b:08:dd:eb:27:48:cc:31:d1:09:25:9a:97:6c:1d:0f:5e:
89:c2:77:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:00:26 2024 by rpki-client on console-fra.rpki-client.org