Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
File: zNdhWb_Z4zdSPukw898RHWuucwY.cer (raw, json)
Hash identifier: kYFrEVNjdfiHKCQOwxfKHe7LP78p7VPZvr/yrfHOj0U=
Subject key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018ECD664A6EA63725D43485844908B5586C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 11 Apr 2024 13:43:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.129.76.0/22
IP: 46.150.240.0/20
IP: 91.188.244.0/22
IP: 91.193.217.0/24
IP: 91.195.20.0/23
IP: 91.214.116.0/22
IP: 91.226.30.0/23
IP: 91.227.154.0/23
IP: 91.241.180.0/23
IP: 91.243.188.0/22
IP: 94.158.20.0/22
IP: 176.103.80.0/20
IP: 176.119.140.0/22
IP: 194.187.100.0/22
IP: 195.3.180.0/23
IP: 195.95.216.0/23
IP: 2a01:48a0::/32
IP: 2a05:1e40::/29
IP: 2a06:d640::/29
IP: 2a09:2980::/29
IP: 2a09:a800::/29
IP: 2a09:af80::/29
IP: 2a09:bc00::/29
IP: 2a09:c700::/29
IP: 2a09:cf00::/29
IP: 2a09:d700::/29
IP: 2a09:dd00::/29
IP: 2a09:e300::/29
IP: 2a09:e700::/29
IP: 2a09:ef00::/29
IP: 2a0a:b380::/29
IP: 2a0b:9000::/29
IP: 2a0d:3c40::/29
IP: 2a0d:95c0::/29
IP: 2a0d:afc0::/29
IP: 2a0d:c100::/29
IP: 2a0d:fcc0::/29
IP: 2a0e:3f40::/29
IP: 2a0e:5880::/29
IP: 2a0f:3100::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:cd:66:4a:6e:a6:37:25:d4:34:85:84:49:08:b5:58:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 11 13:43:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:96:df:50:3c:c8:32:a0:34:00:3a:b4:1f:ba:
2a:72:25:e0:94:ba:de:47:dc:3a:4b:e7:b2:02:8a:
c1:a2:ee:9e:c7:4c:66:94:cf:d0:92:ca:6b:c4:bc:
4e:50:4d:72:8d:b9:a9:5b:83:2a:17:14:14:c2:25:
db:81:2b:ac:52:90:3f:1f:ca:64:f9:b0:d0:e9:f8:
1f:d2:42:05:3e:88:05:a2:7e:72:30:e2:c3:90:4e:
ed:bd:f6:b7:73:05:93:87:a1:01:42:25:4a:9d:2c:
93:66:1b:3f:6c:62:bd:10:d9:49:99:7c:46:fe:5a:
29:8a:00:47:e3:ee:43:3c:bd:04:11:bc:50:41:85:
cf:b7:02:bf:21:17:f7:cd:d7:b8:bd:71:53:66:2c:
0f:bb:8a:0f:87:87:fd:d6:48:b9:f8:6a:c9:09:de:
dc:a6:6c:17:50:a8:94:8c:5a:06:6e:a7:16:f1:2d:
ff:15:f6:95:0f:74:cf:d8:e0:1c:06:b5:99:b2:f9:
e1:37:11:92:e7:8b:b6:ab:f6:62:e0:05:d7:48:ca:
9c:9f:c1:7a:22:ab:04:89:c3:61:2a:fe:ae:62:66:
c1:ea:4f:30:f2:fb:c5:de:0a:e1:20:92:58:68:80:
2b:b6:a5:d8:8c:a8:ec:c5:c5:49:38:a3:49:82:06:
e8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.76.0/22
46.150.240.0/20
91.188.244.0/22
91.193.217.0/24
91.195.20.0/23
91.214.116.0/22
91.226.30.0/23
91.227.154.0/23
91.241.180.0/23
91.243.188.0/22
94.158.20.0/22
176.103.80.0/20
176.119.140.0/22
194.187.100.0/22
195.3.180.0/23
195.95.216.0/23
IPv6:
2a01:48a0::/32
2a05:1e40::/29
2a06:d640::/29
2a09:2980::/29
2a09:a800::/29
2a09:af80::/29
2a09:bc00::/29
2a09:c700::/29
2a09:cf00::/29
2a09:d700::/29
2a09:dd00::/29
2a09:e300::/29
2a09:e700::/29
2a09:ef00::/29
2a0a:b380::/29
2a0b:9000::/29
2a0d:3c40::/29
2a0d:95c0::/29
2a0d:afc0::/29
2a0d:c100::/29
2a0d:fcc0::/29
2a0e:3f40::/29
2a0e:5880::/29
2a0f:3100::/29
Signature Algorithm: sha256WithRSAEncryption
22:40:04:08:c4:48:9f:6d:2b:a3:e6:12:6a:ff:c0:dd:c8:78:
52:f6:79:11:50:51:31:08:ef:42:6d:41:8d:7e:03:50:da:fd:
1d:81:ff:a8:db:e4:0f:8a:5e:b0:b6:a1:d0:41:a1:80:7d:89:
24:59:4e:86:fc:2f:83:c1:53:d7:f0:47:06:9a:7b:8c:a2:dd:
30:fe:9f:fe:2c:fc:7f:8b:14:c8:8c:68:21:5d:38:f2:de:57:
8f:75:81:a0:49:11:60:6e:ce:e3:fe:0c:76:a6:18:77:e5:66:
05:8c:03:ee:3a:a8:63:60:66:a1:6c:f5:1b:96:a3:b6:7e:44:
ff:45:a1:25:17:df:b6:0e:38:99:59:ee:48:84:f3:75:9b:16:
1a:31:23:ff:c5:85:fa:4e:93:8d:d7:a8:c6:a6:1e:4e:a3:a4:
b2:1f:57:c2:9d:08:85:c5:68:3a:0b:e1:2e:0f:3e:8b:d8:16:
b6:a8:ba:02:b9:a6:08:fe:df:8f:f3:d5:b2:92:8b:42:a3:98:
14:d4:fc:d5:43:35:0a:65:c3:59:c2:8b:65:18:aa:99:35:08:
04:65:e7:f0:46:3f:21:eb:2e:df:a1:bb:b4:c4:11:eb:ce:18:
f3:bc:bb:f2:08:8a:75:cc:36:b5:9a:82:d3:00:c7:5e:b8:f3:
ab:62:e9:d7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 28 02:23:34 2024 by rpki-client on console-ams.rpki-client.org