Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer
File: U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer (raw, json)
Hash identifier: LD365zkQXoljGmIqh1oGrXdutk03R+zxR1wcxjL7Z9g=
Subject key identifier: 53:B6:2A:CE:61:5B:90:6B:42:AB:27:F4:FB:1D:20:3D:F3:6D:54:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01917A37EA69DC318A301D2AA16DA5D3A5B3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 22 Aug 2024 13:12:50 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 31708
IP: 31.193.168.0/21
IP: 62.197.40.0/23
IP: 62.197.44.0/24
IP: 62.197.50.0/23
IP: 83.142.24.0/22
IP: 83.142.29.0/24
IP: 85.13.192.0/18
IP: 89.187.64.0/22
IP: 89.187.70.0 -- 89.187.72.255
IP: 89.187.74.0 -- 89.187.76.255
IP: 89.187.78.0 -- 89.187.92.255
IP: 89.187.94.0/23
IP: 109.70.136.0/21
IP: 193.26.222.0/24
IP: 2a01:c0::/32
IP: 2a06:1bc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:7a:37:ea:69:dc:31:8a:30:1d:2a:a1:6d:a5:d3:a5:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 22 13:12:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53b62ace615b906b42ab27f4fb1d203df36d5436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a3:ab:f6:a9:b0:d1:e0:65:05:e9:95:a6:2e:
4b:59:d4:40:a8:69:7e:ec:bc:e9:57:f0:6a:02:8d:
e1:34:3e:da:4e:5f:e6:9b:71:e8:b6:94:6b:fb:e9:
ad:e3:c1:a7:cd:47:a6:cc:b1:32:a5:8f:c5:86:3b:
80:36:0b:81:4c:5a:d1:a3:5f:c0:c2:84:d6:44:3c:
31:75:93:e7:44:c7:0b:05:93:a1:f2:9d:a6:ae:cd:
67:46:d9:f3:26:03:24:0a:b5:26:2e:a5:71:9a:f8:
21:b3:f7:ba:51:6d:3b:35:02:a2:1d:b6:38:7f:91:
ba:d9:d5:15:d2:9c:8f:0e:a4:57:d3:c9:b7:64:8b:
ae:7b:8e:4d:2a:24:66:61:ab:f4:38:89:fb:ae:9e:
28:4c:c5:df:76:fb:cb:91:a1:61:b4:16:7b:52:ae:
7f:0a:ff:c7:44:87:9c:1f:75:12:74:b6:ce:ad:5a:
ea:69:99:b7:c5:46:93:d8:bb:21:08:1f:e6:a8:61:
ab:66:6e:5e:a7:94:a2:e5:80:15:e5:cd:74:0c:18:
60:4d:b8:d3:1d:29:6c:97:f4:e5:e4:b4:fd:3e:45:
6f:c0:f4:a1:17:7d:1a:b9:7a:db:e7:17:53:1c:c0:
4b:b5:79:6c:48:f1:61:87:df:e9:5d:34:00:28:82:
3d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B6:2A:CE:61:5B:90:6B:42:AB:27:F4:FB:1D:20:3D:F3:6D:54:36
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.168.0/21
62.197.40.0/23
62.197.44.0/24
62.197.50.0/23
83.142.24.0/22
83.142.29.0/24
85.13.192.0/18
89.187.64.0/22
89.187.70.0-89.187.72.255
89.187.74.0-89.187.76.255
89.187.78.0-89.187.92.255
89.187.94.0/23
109.70.136.0/21
193.26.222.0/24
IPv6:
2a01:c0::/32
2a06:1bc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31708
Signature Algorithm: sha256WithRSAEncryption
24:3a:b5:2d:bd:08:7b:5e:2b:2b:fb:31:bd:f6:72:74:3a:cf:
d5:67:6d:df:34:0a:0e:60:2a:9b:c6:be:3a:be:36:96:ab:f8:
31:57:8f:dc:fc:b8:67:93:97:af:e6:3a:c2:22:df:e5:d6:2f:
0b:db:40:f5:35:30:68:07:e6:0f:74:7e:02:75:09:03:08:e9:
bc:b4:a5:d6:48:55:21:91:a9:d3:55:0c:c4:5a:9b:72:c2:4e:
6a:02:f9:44:31:8d:af:5f:ff:41:c2:3b:54:20:95:42:63:0b:
14:3f:36:b5:d7:b7:59:eb:30:f9:16:b1:c1:46:2d:0c:91:00:
c3:29:bb:8c:74:00:ba:e6:bd:c7:3e:46:e2:94:46:70:8c:b0:
fe:08:cc:98:f9:14:0c:2f:43:39:ab:f1:33:c0:a3:fd:8e:ab:
a4:b3:95:7e:18:26:14:b3:71:21:dd:b5:de:8d:c8:2b:50:fc:
dd:8f:7e:a8:63:2b:30:1f:c6:02:34:d8:96:22:42:05:f9:f5:
45:d6:6b:0d:17:c0:e4:d7:83:d6:50:69:1f:fd:5f:19:54:8c:
10:3c:af:54:cc:1c:96:4b:ae:d1:47:7b:4f:41:3b:70:e9:0b:
01:d1:38:df:9a:a0:60:fe:00:a3:d5:dd:4a:44:0a:49:0f:7f:
66:8b:0a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:19:47 2024 by rpki-client on console-fra.rpki-client.org