Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
File: XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer (raw, json)
Hash identifier: qADDjlvajy8CRIAhbK/oTI787qheZDR6K6G4MtDutWk=
Subject key identifier: 5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01931B0785ECF025E4C3845875572DB17BC1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 11 Nov 2024 11:41:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 13037
IP: 51.148.0.0/16
IP: 51.155.0.0/16
IP: 62.3.64.0/18
IP: 77.104.128.0/18
IP: 82.68.0.0/15
IP: 82.71.0.0/16
IP: 88.97.0.0 -- 88.98.18.255
IP: 88.98.21.0 -- 88.98.95.255
IP: 88.98.128.0 -- 88.98.167.255
IP: 88.98.170.0 -- 88.98.191.255
IP: 146.66.64.0/18
IP: 212.23.0.0/19
IP: 217.155.0.0/16
IP: 2a02:8010::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1b:07:85:ec:f0:25:e4:c3:84:58:75:57:2d:b1:7b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 11 11:41:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:03:12:6b:b6:b4:73:15:e1:e2:e2:c4:2e:4b:
b9:39:82:d4:42:20:aa:53:e3:52:05:76:ff:3a:1b:
0a:c0:1d:a4:00:61:ff:bc:c9:df:82:61:57:50:62:
29:30:60:ba:db:84:13:30:eb:50:18:e1:d9:1e:be:
31:c5:28:a9:5a:d7:4c:d2:6e:8e:bb:6c:34:f5:9b:
64:2c:37:07:bd:4e:dd:0f:ba:4c:22:31:f1:07:ed:
6a:d9:79:66:5c:bb:57:2f:1e:20:c1:e3:5f:3c:c5:
c3:18:8b:51:a9:cf:73:30:04:e2:66:41:40:0a:b8:
78:61:b6:d9:08:68:77:f7:93:27:76:30:32:67:42:
e6:25:ac:5e:e4:82:59:50:f4:d2:f1:43:10:1e:bb:
40:57:6e:0b:20:48:da:0c:b3:03:43:8c:5c:29:f8:
20:0b:fb:20:7b:64:19:ed:20:e2:05:ff:48:c6:99:
88:fd:63:2d:6e:87:46:44:c3:2d:cd:8b:fe:d9:5e:
db:d7:9d:da:2b:c3:09:39:55:38:0a:e8:ed:15:29:
d3:4a:d3:1b:f2:7b:2d:bf:2f:59:4c:26:3a:ca:15:
59:7e:85:85:db:8e:5b:23:2e:e2:8a:e8:6c:2e:ba:
bd:f5:3c:ed:80:02:20:fa:eb:21:83:45:1a:4b:e2:
1f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.148.0.0/16
51.155.0.0/16
62.3.64.0/18
77.104.128.0/18
82.68.0.0/15
82.71.0.0/16
88.97.0.0-88.98.18.255
88.98.21.0-88.98.95.255
88.98.128.0-88.98.167.255
88.98.170.0-88.98.191.255
146.66.64.0/18
212.23.0.0/19
217.155.0.0/16
IPv6:
2a02:8010::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13037
Signature Algorithm: sha256WithRSAEncryption
a1:64:69:0c:32:aa:2c:a2:ac:03:b2:32:45:6d:f4:da:a4:ca:
05:96:02:e9:48:74:1a:3d:e2:8a:26:07:f9:e4:28:5d:5f:9f:
8e:4f:1e:b0:05:c2:3c:94:5b:c0:2c:b7:e2:c4:4f:67:eb:25:
94:30:34:d7:d1:82:01:e0:f7:e5:45:fb:a8:96:22:67:eb:da:
ad:c3:a9:47:44:c2:ab:5e:1f:26:96:fe:4d:61:25:3b:3b:c7:
67:03:76:01:ef:6f:25:ef:9f:84:d9:81:1f:84:07:c1:03:25:
f0:c1:76:25:59:c5:5e:09:58:58:42:fe:41:be:e8:8a:f5:12:
9d:e0:de:c7:1e:fc:96:fb:27:68:23:d5:2f:84:49:12:80:b8:
ee:1e:f8:64:d4:74:b2:1d:28:2c:65:7d:db:4c:72:c5:de:12:
62:a7:b8:a7:a5:f1:94:07:dd:e6:68:37:44:23:7d:8a:1e:8b:
2c:74:fc:c4:67:29:99:86:cf:53:a1:e7:15:8f:ae:a3:57:84:
ec:ad:86:5b:de:f8:1e:23:58:06:99:9d:5d:bb:76:64:1c:fa:
a1:6b:c9:af:1a:a8:a7:15:8f:2a:e9:d7:c2:50:93:8b:03:77:
9e:8d:94:a0:74:43:04:c3:24:a0:88:b0:99:c8:29:c1:5b:bc:
78:62:1e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:52:47 2024 by rpki-client on console-fra.rpki-client.org