Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mnF-0dxIgETl4qsAdUM1WM_ejIU.cer
File: mnF-0dxIgETl4qsAdUM1WM_ejIU.cer (raw, json)
Hash identifier: CzfSEW74KXOqXNIEDQ4oAqC3+5//0RiD5Pk+7LnU+YA=
Subject key identifier: 9A:71:7E:D1:DC:48:80:44:E5:E2:AB:00:75:43:35:58:CF:DE:8C:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018ECBFF8793E1E186C6C112102CDE2C3823
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 11 Apr 2024 07:11:45 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 5407
AS: 15425
AS: 28904
AS: 30764
IP: 5.53.8.0/21
IP: 31.28.128.0/19
IP: 46.47.128.0/18
IP: 62.129.32.0/19
IP: 78.157.128.0/19
IP: 82.209.0.0/18
IP: 84.16.96.0/19
IP: 84.21.96.0/19
IP: 85.135.0.0/17
IP: 86.61.128.0/17
IP: 89.29.0.0/17
IP: 91.106.240.0/20
IP: 93.181.64.0/18
IP: 94.242.64.0/18
IP: 128.0.176.0/20
IP: 164.215.112.0/20
IP: 176.227.248.0/21
IP: 185.5.68.0/22
IP: 188.134.128.0/17
IP: 193.165.0.0/16
IP: 212.109.176.0/20
IP: 213.216.32.0/19
IP: 2a00:ca8::/32
IP: 2a02:c38::/32
IP: 2a03:6e80::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:cb:ff:87:93:e1:e1:86:c6:c1:12:10:2c:de:2c:38:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 11 07:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a717ed1dc488044e5e2ab0075433558cfde8c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:67:53:93:18:b7:14:5a:73:21:a6:1f:39:68:
0f:c4:52:50:45:d0:70:25:1c:53:b1:f4:55:65:c8:
97:d4:7b:be:22:58:44:9d:66:4e:75:57:3f:93:7e:
f9:ec:02:16:48:11:2e:a4:01:7e:e1:f0:ff:ba:b4:
34:96:e4:1a:eb:25:8e:86:f9:96:ca:8f:36:5d:de:
59:17:35:c4:91:a7:f1:80:84:f8:ed:23:ea:20:21:
31:04:5e:89:c3:86:f0:6e:82:ca:bb:f4:2d:9b:18:
4e:7e:3b:5a:e4:96:5b:53:e3:2e:cf:cc:3d:18:36:
32:1a:02:57:71:80:92:17:6d:b0:a7:72:42:2e:6e:
91:be:f5:93:52:5a:fb:0f:4d:96:25:4b:66:03:e9:
da:5a:98:c6:61:cc:7d:30:d7:a7:14:22:f9:ba:75:
a0:63:bc:61:0e:26:c1:ff:0b:8b:78:d2:bd:2d:79:
92:ca:53:37:1c:2a:ad:8b:61:48:e8:63:c7:42:5f:
6d:94:dc:d8:fd:69:ef:89:4e:c0:96:58:14:a6:ac:
42:97:9f:b1:c5:34:53:fe:d5:67:2e:a3:bc:11:c0:
3b:63:a2:33:40:00:5b:e4:51:23:27:98:79:f3:76:
d4:01:e4:ee:5c:4e:c6:1e:cf:59:3e:1c:e0:fa:21:
9d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:71:7E:D1:DC:48:80:44:E5:E2:AB:00:75:43:35:58:CF:DE:8C:85
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.53.8.0/21
31.28.128.0/19
46.47.128.0/18
62.129.32.0/19
78.157.128.0/19
82.209.0.0/18
84.16.96.0/19
84.21.96.0/19
85.135.0.0/17
86.61.128.0/17
89.29.0.0/17
91.106.240.0/20
93.181.64.0/18
94.242.64.0/18
128.0.176.0/20
164.215.112.0/20
176.227.248.0/21
185.5.68.0/22
188.134.128.0/17
193.165.0.0/16
212.109.176.0/20
213.216.32.0/19
IPv6:
2a00:ca8::/32
2a02:c38::/32
2a03:6e80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
5407
15425
28904
30764
Signature Algorithm: sha256WithRSAEncryption
6f:b9:41:90:82:39:13:93:df:17:39:0a:e8:74:c1:c2:96:f4:
8d:71:b5:2e:c8:3f:e8:b3:33:06:dd:7a:5d:64:a1:c6:2b:f7:
8c:81:56:8f:56:a1:97:9a:f6:8c:e9:43:4e:d0:76:ca:12:ac:
30:91:e8:37:d3:1a:8b:6d:d1:9b:ff:c0:a1:d1:5c:8f:87:64:
bf:20:72:90:03:2a:ce:1e:22:23:1b:f3:73:95:37:06:e5:3c:
fd:c0:e5:ec:b6:a4:26:1c:23:13:40:dc:b9:88:bb:37:62:05:
28:27:82:6b:5b:75:4f:9c:69:29:c8:e2:f6:ab:1a:f6:32:0b:
01:2e:10:9d:ad:84:67:8d:f8:d3:f1:36:ef:75:ef:87:f1:67:
05:08:2f:35:c1:4d:49:95:96:b9:9b:72:f6:e4:c3:63:68:a9:
43:08:78:86:b5:a5:96:43:a5:c7:9e:d2:7b:2e:d5:b2:b5:7c:
0e:de:f2:a0:c1:a0:97:d9:f0:b0:a2:af:d2:d4:34:67:e6:0a:
45:ef:fc:1d:85:16:31:8e:50:3d:8b:a5:6c:5a:bc:3c:0b:69:
44:53:39:ac:b7:e9:b1:d5:d9:5b:f7:20:4d:79:7e:50:1d:ac:
96:a7:57:1a:42:7c:28:95:85:51:f1:f3:99:12:85:f5:fe:0d:
30:10:e5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:13:05 2024 by rpki-client on console-ams.rpki-client.org