Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer
File: TXaD1upTn-8ba22910ox0F5fCiM.cer (raw, json)
Hash identifier: ARLb+fxYff3ChXeUF/jKcY3biwVfQkvcnUgEXo81Yv8=
Subject key identifier: 4D:76:83:D6:EA:53:9F:EF:1B:6B:6D:BD:D7:4A:31:D0:5E:5F:0A:23
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01932AE8736876B31DA83961A03215EC3A60
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 14 Nov 2024 13:41:37 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 39605
AS: 200271
AS: 200356
IP: 5.42.197.0/24
IP: 62.182.100.0/23
IP: 78.40.120.0/21
IP: 158.58.176.0/21
IP: 185.60.92.0/22
IP: 185.255.84.0/22
IP: 193.84.18.0/24
IP: 195.244.30.0/23
IP: 2a02:4b8::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2a:e8:73:68:76:b3:1d:a8:39:61:a0:32:15:ec:3a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 14 13:41:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d7683d6ea539fef1b6b6dbdd74a31d05e5f0a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ae:a3:b2:6d:6c:f5:df:7f:28:43:54:18:82:
33:1e:3c:9d:8c:91:b8:cc:da:bb:41:c6:74:76:d6:
63:9a:5b:25:42:1c:a7:4f:90:fe:fa:6d:8f:81:32:
be:e1:dc:5e:32:c6:df:82:30:ad:c6:36:77:ab:75:
55:aa:10:ab:1e:97:18:a9:8c:7b:f5:15:a0:66:ea:
3b:0e:79:2b:ea:bd:df:0b:28:5a:b4:ad:9e:87:3f:
79:62:2c:ca:a2:b0:f9:b8:b0:b9:ae:4b:51:e7:b1:
9f:3d:23:ad:a2:9a:6c:54:b0:e0:ee:e5:08:a2:73:
d6:af:a8:65:2a:bb:11:b8:81:0b:d7:a8:18:f6:7e:
f8:3d:10:c0:79:ce:7e:33:92:8d:7c:81:a5:c6:1f:
cb:8a:eb:f6:7c:cc:be:c7:bc:63:72:81:0f:c5:fb:
ce:0e:b1:25:f3:0c:13:db:d6:1d:9b:8d:7c:73:77:
3b:66:54:50:b3:b8:04:d4:61:3c:b3:ba:82:da:c3:
93:ff:00:9b:2d:75:84:d7:f1:f6:9e:92:d7:0a:51:
0d:92:fa:4d:1f:b6:dc:4b:15:9c:fc:62:9e:88:41:
ea:e4:5d:e7:07:84:c4:db:f3:62:1a:18:98:a9:61:
2e:47:52:ce:19:3f:65:1b:41:de:0d:8f:7f:b1:43:
a6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:76:83:D6:EA:53:9F:EF:1B:6B:6D:BD:D7:4A:31:D0:5E:5F:0A:23
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.197.0/24
62.182.100.0/23
78.40.120.0/21
158.58.176.0/21
185.60.92.0/22
185.255.84.0/22
193.84.18.0/24
195.244.30.0/23
IPv6:
2a02:4b8::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39605
200271
200356
Signature Algorithm: sha256WithRSAEncryption
88:97:f2:51:45:5a:4b:e5:cb:7b:00:55:23:85:62:a6:05:7a:
9e:d1:da:69:91:6b:25:05:d5:0f:c7:91:e0:7d:9b:1b:14:30:
60:34:68:a2:75:d4:6f:32:d6:95:de:3b:e7:01:4a:ac:69:62:
51:a6:e0:33:70:2d:65:e0:f6:29:3a:6d:01:5f:ac:a9:84:67:
af:5d:c9:51:25:9a:99:3a:3c:62:30:81:9e:c0:74:cf:58:41:
b6:99:8f:4f:e6:96:f7:eb:8d:49:02:2d:2e:18:43:9b:e0:20:
02:2c:bd:1c:8a:d6:23:ef:37:b4:6b:fd:6f:ca:af:31:b9:72:
e4:4e:21:1e:26:56:a2:ab:6e:ec:69:b3:b3:85:29:32:91:07:
1c:b7:21:a2:5c:92:e8:55:62:38:29:1b:0b:b9:17:82:94:c1:
a9:e8:87:d4:ed:2e:79:6d:2d:17:17:34:4a:62:36:15:3e:9f:
cd:6c:ef:c3:a5:37:d4:9f:be:20:f7:94:0c:8f:4c:15:61:c6:
7f:3b:6a:9f:4b:dc:e5:38:4a:33:06:5d:ad:24:b1:44:be:08:
f2:44:55:20:26:44:26:56:46:22:e0:fd:9f:ce:92:89:45:f4:
cd:2a:27:c7:db:3b:b3:4b:0f:a9:ac:47:dc:95:be:96:1d:e5:
66:a7:31:a1
-----BEGIN CERTIFICATE-----
MIIF1zCCBL+gAwIBAgISAZMq6HNodrMdqDlhoDIV7DpgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQxMTE0MTM0MTM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDc2ODNkNmVhNTM5ZmVmMWI2YjZkYmRkNzRhMzFkMDVlNWYwYTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4q6jsm1s9d9/KENUGIIzHjydjJG4
zNq7QcZ0dtZjmlslQhynT5D++m2PgTK+4dxeMsbfgjCtxjZ3q3VVqhCrHpcYqYx7
9RWgZuo7Dnkr6r3fCyhatK2ehz95YizKorD5uLC5rktR57GfPSOtoppsVLDg7uUI
onPWr6hlKrsRuIEL16gY9n74PRDAec5+M5KNfIGlxh/Liuv2fMy+x7xjcoEPxfvO
DrEl8wwT29Ydm418c3c7ZlRQs7gE1GE8s7qC2sOT/wCbLXWE1/H2npLXClENkvpN
H7bcSxWc/GKeiEHq5F3nB4TE2/NiGhiYqWEuR1LOGT9lG0HeDY9/sUOmxwIDAQAB
o4IC4zCCAt8wHQYDVR0OBBYEFE12g9bqU5/vG2ttvddKMdBeXwojMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA5L2U1MTk1
ZC02Njk4LTQ2MDQtOTExNC02OGIzNzY4ZjUwZGMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkvZTUxOTVk
LTY2OTgtNDYwNC05MTE0LTY4YjM3NjhmNTBkYy8xL1RYYUQxdXBUbi04YmEyMjkx
MG94MEY1ZkNpTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFgGCCsGAQUF
BwEHAQH/BEkwRzA2BAIAATAwAwQABSrFAwQBPrZkAwQDTih4AwQDnjqwAwQCuTxc
AwQCuf9UAwQAwVQSAwQBw/QeMA0EAgACMAcDBQMqAgS4MCQGCCsGAQUFBwEIAQH/
BBUwE6ARMA8CAwCatQIDAw5PAgMDDqQwDQYJKoZIhvcNAQELBQADggEBAIiX8lFF
Wkvly3sAVSOFYqYFep7R2mmRayUF1Q/HkeB9mxsUMGA0aKJ11G8y1pXeO+cBSqxp
YlGm4DNwLWXg9ik6bQFfrKmEZ69dyVElmpk6PGIwgZ7AdM9YQbaZj0/mlvfrjUkC
LS4YQ5vgIAIsvRyK1iPvN7Rr/W/KrzG5cuROIR4mVqKrbuxps7OFKTKRBxy3IaJc
kuhVYjgpGwu5F4KUwanoh9TtLnltLRcXNEpiNhU+n81s78OlN9SfviD3lAyPTBVh
xn87ap9L3OU4SjMGXa0ksUS+CPJEVSAmRCZWRiLg/Z/OkolF9M0qJ8fbO7NLD6ms
R9yVvpYd5WanMaE=
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:09:26 2024 by rpki-client on console-fra.rpki-client.org