Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
File: IixFhb2I-yfK3ynuW7ldZXX874M.cer (raw, json)
Hash identifier: MX/es9C0wqga9Umg21PO4dfshX3eBKM7sEDky1Hq7dU=
Subject key identifier: 22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56ED479DD617C20CB16F98F613A0053
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 31.14.9.0/24
IP: 31.14.76.0/22
IP: 31.14.162.0/24
IP: 37.156.34.0/24
IP: 46.102.96.0/22
IP: 86.105.96.0/21
IP: 86.107.62.0/24
IP: 86.107.112.0/21
IP: 89.33.68.0/22
IP: 89.34.103.0/24
IP: 89.39.255.0/24
IP: 89.42.172.0/23
IP: 89.43.112.0/22
IP: 89.45.70.0/23
IP: 91.194.177.0/24
IP: 91.206.76.0/23
IP: 91.220.130.0/24
IP: 91.221.94.0/23
IP: 91.227.72.0/23
IP: 93.113.44.0/24
IP: 93.113.130.0/24
IP: 93.115.72.0/22
IP: 94.176.109.0/24
IP: 94.177.67.0/24
IP: 176.126.222.0/24
IP: 185.203.128.0/22
IP: 188.212.39.0/24
IP: 188.215.96.0/22
IP: 193.25.104.0/23
IP: 193.34.180.0/23
IP: 195.66.142.0/23
IP: 195.88.172.0/23
IP: 195.95.180.0/24
IP: 195.128.168.0/23
IP: 195.242.78.0/23
IP: 195.254.132.0/24
IP: 195.254.136.0/23
IP: 2a0a:e640::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 14:49:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:d4:79:dd:61:7c:20:cb:16:f9:8f:61:3a:00:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:05:dc:e2:e6:1c:80:bc:83:88:68:a2:77:3e:
41:f3:cc:cd:49:1b:e5:70:56:6f:71:53:1b:ab:82:
0c:d0:3a:60:02:53:db:11:6c:ac:9b:50:87:8a:41:
17:4f:ce:8e:97:06:35:85:ff:fb:4d:8a:ff:b7:29:
20:7d:a8:4b:c1:cf:31:56:0f:bc:c3:ab:b6:94:bf:
c3:f2:28:36:1e:f4:90:9f:08:9b:af:50:0b:7d:81:
d3:e2:39:4b:b3:6e:13:94:8e:3e:08:64:c1:de:25:
83:5c:24:7b:ae:23:ea:e9:3f:ec:75:91:77:1e:c1:
1e:6b:5a:64:0e:4e:b7:33:a4:33:05:ac:8e:6a:1a:
af:7b:7e:9e:cc:c5:43:8c:9e:06:29:3f:dc:aa:11:
6a:33:fd:fd:b8:ad:8e:23:f4:9c:59:14:e1:ac:39:
a3:14:c0:6e:7f:0c:43:11:4a:11:c1:98:d3:eb:7b:
cd:4c:fd:6a:2e:63:37:8f:70:1e:2c:5b:23:07:38:
43:ef:4a:67:2f:6d:ea:eb:89:7c:72:a1:16:26:e8:
18:d9:fa:c9:df:99:db:64:ea:9d:37:45:86:d6:2b:
73:9b:74:cd:07:d9:cb:9e:57:d6:f1:fe:40:a9:a9:
af:08:63:62:7b:ba:f6:21:be:be:c8:f1:4d:84:b8:
75:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.9.0/24
31.14.76.0/22
31.14.162.0/24
37.156.34.0/24
46.102.96.0/22
86.105.96.0/21
86.107.62.0/24
86.107.112.0/21
89.33.68.0/22
89.34.103.0/24
89.39.255.0/24
89.42.172.0/23
89.43.112.0/22
89.45.70.0/23
91.194.177.0/24
91.206.76.0/23
91.220.130.0/24
91.221.94.0/23
91.227.72.0/23
93.113.44.0/24
93.113.130.0/24
93.115.72.0/22
94.176.109.0/24
94.177.67.0/24
176.126.222.0/24
185.203.128.0/22
188.212.39.0/24
188.215.96.0/22
193.25.104.0/23
193.34.180.0/23
195.66.142.0/23
195.88.172.0/23
195.95.180.0/24
195.128.168.0/23
195.242.78.0/23
195.254.132.0/24
195.254.136.0/23
IPv6:
2a0a:e640::/29
Signature Algorithm: sha256WithRSAEncryption
1b:7c:36:18:9e:c8:a2:84:97:f6:2c:b1:8a:a8:ea:7e:de:b1:
54:c8:f5:78:cf:66:ca:70:04:46:66:a6:6d:67:cd:a5:d3:b9:
87:2f:5e:d1:fc:4e:a7:02:5b:25:03:0f:04:dc:16:89:f8:3a:
15:61:a6:42:85:af:88:5c:b4:da:b6:e9:58:9b:cf:42:ee:b3:
7b:65:15:26:2d:c7:6a:83:35:c8:84:a7:66:8c:07:62:a0:6a:
7c:65:ac:90:23:cf:e2:9e:c0:92:31:49:2d:0f:b0:92:08:78:
43:92:be:42:fd:18:44:51:33:b8:b8:3a:f9:5d:88:57:88:eb:
a3:af:5f:1a:7f:bd:32:f6:c5:c0:09:b6:3a:d8:a9:0b:8d:1f:
23:bd:4a:9b:a8:d2:68:3f:87:44:68:b9:c8:4f:da:27:8a:35:
cb:90:94:8f:fb:a7:be:f7:8a:81:de:f5:5e:5d:f5:72:3c:d5:
fb:65:d8:b2:6c:2c:bc:52:d3:97:6b:62:20:49:22:46:87:ae:
7e:9d:c9:2f:1e:4a:d2:98:89:9f:e7:23:7d:9e:11:07:a5:44:
9b:cf:12:eb:f1:5f:c5:85:35:59:3f:fc:48:f1:20:53:0d:75:
01:2f:3e:a0:94:48:52:40:c0:8c:e9:dc:2e:0e:a8:fd:4a:fb:
a2:3e:3f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 21:07:41 2024 by rpki-client on console-ams.rpki-client.org