Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
File: 1BGrxMBGirKJHqrK26DcA3eTb9U.cer (raw, json)
Hash identifier: 4mFnmzSXnBsDWdfxXxG37ZuB4Nm4pwkDzBkhrVMJFGw=
Subject key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC50148682F13892362F0E381D2E9CCDD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:44 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 6866
AS: 41657
AS: 212875
IP: 31.153.0.0/16
IP: 37.149.0.0/16
IP: 46.198.0.0/17
IP: 46.199.0.0/16
IP: 62.228.0.0/16
IP: 81.4.128.0/18
IP: 83.168.0.0/18
IP: 87.228.128.0/17
IP: 93.109.0.0/16
IP: 128.0.107.0 -- 128.0.111.255
IP: 128.0.200.0 -- 128.0.255.255
IP: 176.92.200.0 -- 176.92.255.255
IP: 185.2.96.0/22
IP: 193.22.30.0/24
IP: 193.43.0.64/27
IP: 193.58.0.0 -- 193.58.0.47
IP: 193.58.0.64 -- 193.58.0.255
IP: 193.164.232.160/27
IP: 193.188.134.168 -- 193.188.134.199
IP: 193.192.12.128/25
IP: 193.201.147.160/27
IP: 193.201.148.0/26
IP: 193.201.149.192/26
IP: 193.201.150.64 -- 193.201.150.191
IP: 193.201.151.0/26
IP: 193.201.157.0/25
IP: 193.218.205.64 -- 193.218.205.223
IP: 193.218.207.80 -- 193.218.207.127
IP: 194.42.55.32 -- 194.42.55.159
IP: 194.117.52.0/25
IP: 194.153.156.64 -- 194.153.156.255
IP: 194.153.157.192/26
IP: 195.14.128.0/19
IP: 195.60.81.192 -- 195.60.82.63
IP: 195.60.83.64/27
IP: 195.60.83.160/27
IP: 195.60.84.0/25
IP: 195.60.87.128/25
IP: 195.60.93.0/26
IP: 195.60.93.192/26
IP: 195.60.95.0/25
IP: 212.31.96.0/19
IP: 213.7.0.0/16
IP: 213.149.160.0/19
IP: 2a00:1358::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:48:68:2f:13:89:23:62:f0:e3:81:d2:e9:cc:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1a:8c:5d:f4:6c:7a:d0:c3:db:ee:e1:fd:a6:
33:27:49:0d:a8:97:0e:5f:21:4f:44:57:d3:49:8e:
85:93:a9:36:11:29:81:08:dc:90:d4:ac:7d:3b:5b:
ec:e9:e0:29:85:36:a1:00:1c:ea:eb:59:5d:d0:d4:
c0:07:95:f2:04:36:5a:a5:99:e5:07:9d:6b:40:a8:
3e:c2:3c:88:98:02:66:dd:e1:59:a9:ac:81:93:c9:
47:df:9a:45:93:b3:7a:6e:6d:51:1a:40:45:1b:33:
db:21:82:50:d1:05:bb:ea:bb:cb:4f:a4:70:85:6f:
4a:1d:e4:04:d0:9b:97:b7:48:9e:7a:6f:b4:85:8c:
d1:b6:52:26:d4:5d:d9:e0:0b:13:15:26:cb:89:29:
e4:0f:b6:32:17:e5:5e:63:98:c2:a3:a7:21:b6:5e:
42:4c:3d:04:3e:69:73:4d:ba:46:a5:72:70:92:d7:
a1:ed:a7:dc:b4:c2:f3:1a:da:bb:ed:3f:0c:29:5a:
b8:11:bb:3f:8b:1e:1c:cb:ff:af:73:b3:7e:1a:cc:
a8:16:06:98:50:a0:ee:db:0b:b3:b1:48:88:2d:e6:
8c:3e:38:a6:95:6f:a6:b9:13:5c:e6:ec:c6:27:3f:
e9:4f:42:f4:d5:d1:cb:31:1a:ff:06:03:0c:cf:f5:
5d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.153.0.0/16
37.149.0.0/16
46.198.0.0/17
46.199.0.0/16
62.228.0.0/16
81.4.128.0/18
83.168.0.0/18
87.228.128.0/17
93.109.0.0/16
128.0.107.0-128.0.111.255
128.0.200.0-128.0.255.255
176.92.200.0-176.92.255.255
185.2.96.0/22
193.22.30.0/24
193.43.0.64/27
193.58.0.0-193.58.0.47
193.58.0.64-193.58.0.255
193.164.232.160/27
193.188.134.168-193.188.134.199
193.192.12.128/25
193.201.147.160/27
193.201.148.0/26
193.201.149.192/26
193.201.150.64-193.201.150.191
193.201.151.0/26
193.201.157.0/25
193.218.205.64-193.218.205.223
193.218.207.80-193.218.207.127
194.42.55.32-194.42.55.159
194.117.52.0/25
194.153.156.64-194.153.156.255
194.153.157.192/26
195.14.128.0/19
195.60.81.192-195.60.82.63
195.60.83.64/27
195.60.83.160/27
195.60.84.0/25
195.60.87.128/25
195.60.93.0/26
195.60.93.192/26
195.60.95.0/25
212.31.96.0/19
213.7.0.0/16
213.149.160.0/19
IPv6:
2a00:1358::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
6866
41657
212875
Signature Algorithm: sha256WithRSAEncryption
0a:85:9d:13:33:71:14:a0:f8:e3:45:2e:d8:82:de:6f:8e:cd:
ef:34:cb:ea:a6:dc:bf:71:da:41:0b:f1:26:85:42:ab:25:ee:
26:93:7e:ef:49:43:a8:6e:6b:6c:e4:6b:0f:4a:43:02:4a:d7:
c8:a6:9c:83:13:44:2a:eb:cf:80:ed:1f:30:a0:63:76:44:5d:
b2:b1:16:5b:ac:cd:9a:41:67:1b:e1:a8:38:2a:0f:7e:bd:14:
90:d4:80:5d:15:7b:d2:50:c6:d0:a0:26:da:ad:24:6c:31:a3:
37:04:70:c8:a8:e2:48:32:dc:8c:20:14:c8:85:94:72:b8:35:
3d:97:84:8a:62:f2:01:ca:91:5f:ea:7b:1f:69:f3:5a:b8:e9:
2f:12:d8:9d:56:e9:f8:b7:96:96:1d:79:58:51:8d:33:6a:78:
37:6e:3d:76:41:00:d5:2e:4a:e1:60:1c:77:29:92:ce:e8:65:
13:cd:9d:32:5e:5a:c3:c0:14:bc:2d:d2:98:31:da:9a:de:69:
eb:34:1a:f8:78:a1:8d:30:3b:e2:c1:ab:61:7a:20:41:4e:4f:
45:0e:4a:d7:62:8b:a9:b5:be:1b:4a:00:0f:43:7e:61:d5:84:
e1:2f:b5:da:b2:62:64:91:8e:97:8f:3a:94:03:66:60:dd:de:
09:c1:6d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:40:49 2024 by rpki-client on console-fra.rpki-client.org