Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
File: saew2N6CUdNtfIP69rx-_sc7UDQ.cer (raw, json)
Hash identifier: 2nbAcx3uTU3i3l/uSAX3aFScKLjuRQMNchgY9K51CsM=
Subject key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0193205713C4477FAA314761099B3A6B6261
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 12 Nov 2024 12:26:37 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2.56.164.0/22
IP: 5.182.48.0/22
IP: 45.81.20.0/22
IP: 45.90.144.0/22
IP: 45.140.220.0/22
IP: 45.154.196.0/22
IP: 77.83.240.0/22
IP: 78.108.216.0/22
IP: 83.143.116.0/22
IP: 85.202.160.0/22
IP: 89.190.156.0/22
IP: 178.218.144.0/22
IP: 185.185.40.0/22
IP: 185.186.64.0/22
IP: 185.227.68.0/22
IP: 185.234.72.0/22
IP: 185.242.224.0/22
IP: 193.31.28.0/22
IP: 193.34.76.0/22
IP: 193.105.165.0/24
IP: 193.105.177.0/24
IP: 193.221.192.0/22
IP: 194.31.140.0/22
IP: 194.50.16.0/22
IP: 194.56.224.0/22
IP: 212.107.12.0/22
IP: 2a0b:b80::/29
IP: 2a0b:7080::/29
IP: 2a0d:77c0::/29
IP: 2a0e:c7c0::/29
IP: 2a0e:e800::/29
IP: 2a0f:8ac0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:20:57:13:c4:47:7f:aa:31:47:61:09:9b:3a:6b:62:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 12 12:26:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d1:41:50:47:07:28:b3:34:60:89:30:38:b2:
8f:f3:76:94:f2:f7:97:4f:e5:0a:a0:2c:d6:63:53:
8d:34:e0:b1:70:e3:ad:15:47:29:ac:24:7c:67:57:
2b:34:b8:74:e8:65:04:4e:b8:dc:6b:27:f0:a6:5d:
8c:b6:e5:e2:8e:97:84:5c:78:ea:ff:48:f6:ec:96:
04:3e:d0:8a:2d:8d:5b:53:2b:18:1b:47:18:ca:94:
dd:94:cb:a5:31:97:42:17:e3:8d:f3:70:e8:38:80:
8d:bd:08:db:36:63:44:29:20:e5:fe:48:27:1c:14:
f7:71:23:3a:bd:56:bf:05:97:85:fe:37:ec:19:24:
ab:39:9d:43:00:89:05:74:fa:38:b4:7a:c5:f6:d8:
bb:e8:79:33:b3:bd:2c:d9:59:52:d9:7d:09:32:59:
ca:33:38:27:fa:23:04:f5:96:30:81:01:2b:14:9f:
1d:c8:08:bf:ab:eb:1f:f3:28:34:ad:c1:3c:f4:fc:
90:ab:44:83:e3:81:f5:6e:d3:cd:fd:72:20:f0:ac:
78:5d:52:41:39:7c:4e:48:d4:7f:b1:78:a5:f1:fd:
ed:2c:d6:b9:2f:e8:6d:d3:11:8b:bd:f2:62:56:fb:
eb:90:a5:0a:1c:54:04:af:34:09:e6:13:a8:c1:0d:
15:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.164.0/22
5.182.48.0/22
45.81.20.0/22
45.90.144.0/22
45.140.220.0/22
45.154.196.0/22
77.83.240.0/22
78.108.216.0/22
83.143.116.0/22
85.202.160.0/22
89.190.156.0/22
178.218.144.0/22
185.185.40.0/22
185.186.64.0/22
185.227.68.0/22
185.234.72.0/22
185.242.224.0/22
193.31.28.0/22
193.34.76.0/22
193.105.165.0/24
193.105.177.0/24
193.221.192.0/22
194.31.140.0/22
194.50.16.0/22
194.56.224.0/22
212.107.12.0/22
IPv6:
2a0b:b80::/29
2a0b:7080::/29
2a0d:77c0::/29
2a0e:c7c0::/29
2a0e:e800::/29
2a0f:8ac0::/29
Signature Algorithm: sha256WithRSAEncryption
29:3c:69:63:80:97:75:0d:7a:39:bc:60:10:37:4c:26:69:4d:
f9:ed:dc:8b:e2:0c:7d:6c:3b:da:be:3b:7e:a1:0c:73:74:58:
ad:00:46:b2:63:5e:46:70:e6:2c:9a:2e:02:51:25:b3:2a:1e:
25:60:c1:bd:e2:3f:cc:ac:6d:9f:66:11:ee:f7:62:2d:06:dd:
29:48:5f:81:e3:81:ea:20:f9:22:5b:4f:82:10:63:85:d9:11:
e2:40:c1:90:43:50:13:5e:c9:83:50:2e:42:49:d2:79:ef:63:
66:fb:ac:b9:c7:68:21:31:41:5a:24:64:c0:b1:32:a5:44:e6:
e6:0f:3a:2f:3d:8f:d5:85:77:a3:af:1b:41:7d:85:41:51:4f:
cf:f7:dc:e8:a3:1d:18:83:d6:e2:c4:36:87:1d:6a:15:27:d5:
5f:23:24:ba:fe:91:5a:af:3b:d6:5e:11:d1:34:45:fc:cd:22:
7c:22:82:cf:b4:d4:34:15:9c:d7:fd:d0:3f:ab:39:54:97:c1:
a5:25:97:9b:1a:b0:9e:cf:5e:4f:a5:df:56:72:1b:c0:8c:15:
88:91:ef:1b:f4:d9:99:e3:8d:35:d1:b9:75:b6:43:75:50:39:
9f:0e:11:52:44:36:f3:cf:42:49:1b:eb:e6:2a:ce:e5:04:52:
77:f8:69:10
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgISAZMgVxPER3+qMUdhCZs6a2JhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQxMTEyMTIyNjM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMWE3YjBkOGRlODI1MWQzNmQ3YzgzZmFmNmJjN2VmZWM3M2I1MDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dFBUEcHKLM0YIkwOLKP83aU8veX
T+UKoCzWY1ONNOCxcOOtFUcprCR8Z1crNLh06GUETrjcayfwpl2MtuXijpeEXHjq
/0j27JYEPtCKLY1bUysYG0cYypTdlMulMZdCF+ON83DoOICNvQjbNmNEKSDl/kgn
HBT3cSM6vVa/BZeF/jfsGSSrOZ1DAIkFdPo4tHrF9ti76Hkzs70s2VlS2X0JMlnK
Mzgn+iME9ZYwgQErFJ8dyAi/q+sf8yg0rcE89PyQq0SD44H1btPN/XIg8Kx4XVJB
OXxOSNR/sXil8f3tLNa5L+ht0xGLvfJiVvvrkKUKHFQErzQJ5hOowQ0VGQIDAQAB
o4IDUTCCA00wHQYDVR0OBBYEFLGnsNjeglHTbXyD+va8fv7HO1A0MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE3L2YxMzRj
OC1mODE0LTRiNzEtOTU3Yi0zOTRhY2QyMWYzOWIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTcvZjEzNGM4
LWY4MTQtNGI3MS05NTdiLTM5NGFjZDIxZjM5Yi8xL3NhZXcyTjZDVWROdGZJUDY5
cngtX3NjN1VEUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHrBggrBgEF
BQcBBwEB/wSB2zCB2DCBowQCAAEwgZwDBAICOKQDBAIFtjADBAItURQDBAItWpAD
BAItjNwDBAItmsQDBAJNU/ADBAJObNgDBAJTj3QDBAJVyqADBAJZvpwDBAKy2pAD
BAK5uSgDBAK5ukADBAK540QDBAK56kgDBAK58uADBALBHxwDBALBIkwDBADBaaUD
BADBabEDBALB3cADBALCH4wDBALCMhADBALCOOADBALUawwwMAQCAAIwKgMFAyoL
C4ADBQMqC3CAAwUDKg13wAMFAyoOx8ADBQMqDugAAwUDKg+KwDANBgkqhkiG9w0B
AQsFAAOCAQEAKTxpY4CXdQ16ObxgEDdMJmlN+e3ci+IMfWw72r47fqEMc3RYrQBG
smNeRnDmLJouAlElsyoeJWDBveI/zKxtn2YR7vdiLQbdKUhfgeOB6iD5IltPghBj
hdkR4kDBkENQE17Jg1AuQknSee9jZvusucdoITFBWiRkwLEypUTm5g86Lz2P1YV3
o68bQX2FQVFPz/fc6KMdGIPW4sQ2hx1qFSfVXyMkuv6RWq871l4R0TRF/M0ifCKC
z7TUNBWc1/3QP6s5VJfBpSWXmxqwns9eT6XfVnIbwIwViJHvG/TZmeONNdG5dbZD
dVA5nw4RUkQ2889CSRvr5irO5QRSd/hpEA==
-----END CERTIFICATE-----
Generated at Mon Nov 25 09:39:58 2024 by rpki-client on console-fra.rpki-client.org