Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/n5auJ3AmWvMufUvoa6sHoHwtM1M.cer
File: n5auJ3AmWvMufUvoa6sHoHwtM1M.cer (raw, json)
Hash identifier: jdPHRhGTjj/azF9gVPvQmPdsE/zbw6+clTB6phq2nOQ=
Subject key identifier: 9F:96:AE:27:70:26:5A:F3:2E:7D:4B:E8:6B:AB:07:A0:7C:2D:33:53
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4936B4F6276DF4517BF7F750E519B61
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/n5auJ3AmWvMufUvoa6sHoHwtM1M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:44 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 21413
IP: 31.187.67.0/24
IP: 31.187.77.0/24
IP: 31.187.79.0/24
IP: 37.247.64.0/19
IP: 46.227.216.0/21
IP: 77.235.160.0/19
IP: 80.243.32.0/19
IP: 83.221.224.0/19
IP: 85.190.176.0/21
IP: 87.121.192.0/20
IP: 87.121.224.0/20
IP: 89.187.200.0/21
IP: 93.159.96.0/19
IP: 94.100.64.0/20
IP: 176.126.88.0/22
IP: 185.90.128.0/22
IP: 185.175.209.0/24
IP: 193.98.112.0/21
IP: 212.99.192.0/19
IP: 2a00:1ca0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:6b:4f:62:76:df:45:17:bf:7f:75:0e:51:9b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f96ae2770265af32e7d4be86bab07a07c2d3353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:20:b7:c3:b7:52:5d:10:9d:16:f0:0e:ad:33:
c2:dd:6a:4d:39:63:8c:40:e3:d0:9d:1d:a1:0d:7a:
c9:c6:1e:28:a5:3b:74:a6:b9:6e:99:59:cb:af:bf:
73:77:c5:21:c5:04:a6:a9:b0:be:3c:f6:ec:d9:db:
b5:f4:81:43:31:15:53:ae:5b:3f:3a:b8:22:59:ab:
d4:f9:72:81:fb:4d:55:a1:41:fa:06:5b:f0:9a:90:
ee:4c:e1:ff:3a:92:e7:2e:c2:30:eb:cc:48:52:5e:
db:97:d4:15:82:e2:24:e2:5f:22:b8:8a:a2:48:45:
12:ad:2c:90:1c:f3:aa:90:19:95:2b:74:a6:4f:d6:
28:1f:ac:84:9f:64:d1:76:4a:b5:18:c4:e2:0c:5f:
e2:ed:07:07:7a:cf:2d:d1:8d:14:9e:f0:d7:80:ca:
3b:f9:74:83:60:c5:b4:aa:a4:05:89:1e:9a:a0:3e:
55:87:91:b4:c4:0b:97:13:44:df:04:0c:a8:3d:14:
18:a9:78:52:fc:0d:b7:32:f1:e3:30:76:e4:d4:1e:
68:ce:66:c2:69:c6:29:62:db:71:09:40:8f:b9:11:
67:94:2b:35:ac:a6:45:d6:c1:13:b3:b5:99:33:22:
fd:61:7b:33:5c:4e:ca:3d:3c:46:59:01:66:c3:d2:
54:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:96:AE:27:70:26:5A:F3:2E:7D:4B:E8:6B:AB:07:A0:7C:2D:33:53
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/n5auJ3AmWvMufUvoa6sHoHwtM1M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.187.67.0/24
31.187.77.0/24
31.187.79.0/24
37.247.64.0/19
46.227.216.0/21
77.235.160.0/19
80.243.32.0/19
83.221.224.0/19
85.190.176.0/21
87.121.192.0/20
87.121.224.0/20
89.187.200.0/21
93.159.96.0/19
94.100.64.0/20
176.126.88.0/22
185.90.128.0/22
185.175.209.0/24
193.98.112.0/21
212.99.192.0/19
IPv6:
2a00:1ca0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21413
Signature Algorithm: sha256WithRSAEncryption
a5:1d:f7:d0:78:eb:b9:9c:d3:84:c0:b8:76:79:2a:33:96:25:
f6:04:01:e3:e9:fe:60:e0:e9:66:37:8f:12:e7:ab:eb:23:44:
45:f2:58:8c:81:8d:c6:3e:3a:be:95:f4:7b:85:70:c4:b4:16:
a4:90:9a:16:85:61:01:89:90:dd:eb:19:90:8b:db:a5:4d:23:
c0:90:52:00:3b:ea:ba:77:54:f7:f8:2d:89:ae:e8:f4:4b:17:
e6:96:76:2b:78:80:b1:c4:b7:d2:4c:7f:9d:56:32:3f:97:31:
e9:c7:ee:9d:62:5d:96:6d:c1:a6:1e:be:b6:f3:f4:38:ac:49:
4f:50:62:aa:03:48:bc:1b:ee:c9:a3:c9:8b:a0:e5:7f:f4:05:
01:19:95:1a:f0:cd:b7:ce:2b:40:70:28:03:38:d9:32:18:6a:
f8:a5:ba:85:05:30:53:0a:c8:57:11:e7:93:45:47:d3:19:73:
b7:1d:9d:e5:cb:76:08:6f:1f:ef:47:7c:82:f6:1c:3a:e8:d3:
e2:48:90:ef:94:6b:33:61:29:1a:d1:99:f0:a9:fa:e3:9c:4b:
54:f5:e8:02:4e:41:89:b0:82:4c:4c:b2:78:b7:ca:ae:03:b9:
c0:91:68:51:3e:bc:5e:b4:39:8e:b8:cd:ce:d9:ea:54:66:04:
d5:3e:38:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:57:15 2024 by rpki-client on console-fra.rpki-client.org