Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
File: zNdhWb_Z4zdSPukw898RHWuucwY.cer (raw, json)
Hash identifier: ceWhklbmH8dIY8TI49BDgzM/GA+shSaRhSNrMNe9XHQ=
Subject key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01930BA2F438EB9754B693F9A724114FE7B4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 08 Nov 2024 11:57:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.129.79.0/24
IP: 46.150.240.0/20
IP: 91.188.244.0/23
IP: 91.195.21.0/24
IP: 91.214.116.0/22
IP: 91.226.30.0/23
IP: 91.227.155.0/24
IP: 91.241.180.0/23
IP: 91.243.188.0/23
IP: 94.158.20.0/23
IP: 176.103.80.0/20
IP: 176.119.140.0/24
IP: 176.119.142.0/23
IP: 194.187.100.0/22
IP: 195.3.180.0/23
IP: 195.95.216.0/23
IP: 2a01:48a0::/32
IP: 2a05:1e40::/29
IP: 2a06:d640::/29
IP: 2a09:2980::/29
IP: 2a09:a800::/29
IP: 2a09:af80::/29
IP: 2a09:bc00::/29
IP: 2a09:c700::/29
IP: 2a09:cf00::/29
IP: 2a09:d700::/29
IP: 2a09:dd00::/29
IP: 2a09:e300::/29
IP: 2a09:e700::/29
IP: 2a09:ef00::/29
IP: 2a0a:b380::/29
IP: 2a0b:9000::/29
IP: 2a0d:3c40::/29
IP: 2a0d:95c0::/29
IP: 2a0d:afc0::/29
IP: 2a0d:c100::/29
IP: 2a0d:fcc0::/29
IP: 2a0e:3f40::/29
IP: 2a0e:5880::/29
IP: 2a0f:3100::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:0b:a2:f4:38:eb:97:54:b6:93:f9:a7:24:11:4f:e7:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 8 11:57:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:96:df:50:3c:c8:32:a0:34:00:3a:b4:1f:ba:
2a:72:25:e0:94:ba:de:47:dc:3a:4b:e7:b2:02:8a:
c1:a2:ee:9e:c7:4c:66:94:cf:d0:92:ca:6b:c4:bc:
4e:50:4d:72:8d:b9:a9:5b:83:2a:17:14:14:c2:25:
db:81:2b:ac:52:90:3f:1f:ca:64:f9:b0:d0:e9:f8:
1f:d2:42:05:3e:88:05:a2:7e:72:30:e2:c3:90:4e:
ed:bd:f6:b7:73:05:93:87:a1:01:42:25:4a:9d:2c:
93:66:1b:3f:6c:62:bd:10:d9:49:99:7c:46:fe:5a:
29:8a:00:47:e3:ee:43:3c:bd:04:11:bc:50:41:85:
cf:b7:02:bf:21:17:f7:cd:d7:b8:bd:71:53:66:2c:
0f:bb:8a:0f:87:87:fd:d6:48:b9:f8:6a:c9:09:de:
dc:a6:6c:17:50:a8:94:8c:5a:06:6e:a7:16:f1:2d:
ff:15:f6:95:0f:74:cf:d8:e0:1c:06:b5:99:b2:f9:
e1:37:11:92:e7:8b:b6:ab:f6:62:e0:05:d7:48:ca:
9c:9f:c1:7a:22:ab:04:89:c3:61:2a:fe:ae:62:66:
c1:ea:4f:30:f2:fb:c5:de:0a:e1:20:92:58:68:80:
2b:b6:a5:d8:8c:a8:ec:c5:c5:49:38:a3:49:82:06:
e8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.79.0/24
46.150.240.0/20
91.188.244.0/23
91.195.21.0/24
91.214.116.0/22
91.226.30.0/23
91.227.155.0/24
91.241.180.0/23
91.243.188.0/23
94.158.20.0/23
176.103.80.0/20
176.119.140.0/24
176.119.142.0/23
194.187.100.0/22
195.3.180.0/23
195.95.216.0/23
IPv6:
2a01:48a0::/32
2a05:1e40::/29
2a06:d640::/29
2a09:2980::/29
2a09:a800::/29
2a09:af80::/29
2a09:bc00::/29
2a09:c700::/29
2a09:cf00::/29
2a09:d700::/29
2a09:dd00::/29
2a09:e300::/29
2a09:e700::/29
2a09:ef00::/29
2a0a:b380::/29
2a0b:9000::/29
2a0d:3c40::/29
2a0d:95c0::/29
2a0d:afc0::/29
2a0d:c100::/29
2a0d:fcc0::/29
2a0e:3f40::/29
2a0e:5880::/29
2a0f:3100::/29
Signature Algorithm: sha256WithRSAEncryption
3f:9c:ef:41:09:b3:15:18:74:77:6f:f7:38:c7:8f:92:14:ff:
98:20:22:b4:e6:45:33:64:4e:ba:88:bc:dc:4a:01:93:7e:2b:
ef:62:0e:bf:db:0a:56:2b:28:64:cd:fe:00:dd:8d:ee:4f:47:
2e:fe:88:1d:cd:8c:b3:77:eb:4f:fb:1e:84:91:f8:ea:d7:eb:
9f:2e:37:90:28:1c:a4:9b:56:4b:f4:5f:11:d7:96:e4:88:99:
f5:32:f3:58:3c:73:29:be:08:39:36:cb:a8:d1:4e:72:ac:96:
3e:17:ba:7d:b5:9a:ca:b7:61:70:fa:65:b7:66:ea:bd:77:0d:
34:ab:7f:4d:31:4f:7c:aa:72:e2:6b:2f:3a:ef:6c:14:86:20:
fa:51:4a:aa:74:f6:4b:1b:06:6c:d6:a6:f5:ab:d9:a2:6a:b6:
dd:d4:d5:92:8d:36:d2:2c:54:93:5e:cc:49:54:06:23:c8:97:
bd:d2:eb:4b:d1:b9:a9:28:98:ed:5d:fd:26:84:56:1f:67:b4:
ec:ad:ad:82:ff:20:fd:56:b9:d6:2f:d4:8a:10:67:4c:a0:f0:
ba:0a:a4:ab:aa:66:ee:1f:77:cf:de:a4:37:9b:1f:16:92:f9:
c5:4a:cb:60:f1:0b:4b:f4:b1:5a:88:9c:90:5e:40:28:40:71:
a1:38:36:0b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:24 2024 by rpki-client on console-ams.rpki-client.org