Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
File: 2dYxVsGDbxbDtDDv-7cqxpky6ps.cer (raw, json)
Hash identifier: 0sudJSPj+ONDArv28x8mSiumjHeVkTx4A1MrEhGQGvQ=
Subject key identifier: D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D4540EB90A749A8F6CDC53567B63A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:50 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 31.12.76.0/22
IP: 31.40.220.0/22
IP: 31.40.228.0/22
IP: 37.44.200.0/22
IP: 46.149.160.0/22
IP: 78.138.8.0/24
IP: 78.138.41.0/24
IP: 78.138.53.0 -- 78.138.55.255
IP: 78.138.63.0/24
IP: 80.240.98.0/23
IP: 80.240.116.0 -- 80.240.123.255
IP: 80.240.125.0/24
IP: 82.97.204.0/24
IP: 83.229.0.0/23
IP: 83.229.7.0/24
IP: 83.229.12.0/23
IP: 83.229.27.0/24
IP: 83.229.30.0/24
IP: 83.229.36.0/23
IP: 83.229.58.0 -- 83.229.60.255
IP: 83.229.66.0/24
IP: 83.229.92.0/24
IP: 83.229.110.0/24
IP: 83.229.114.0/24
IP: 83.229.116.0/22
IP: 91.196.180.0/22
IP: 103.14.104.0/22
IP: 185.4.226.0/24
IP: 185.18.40.0/22
IP: 185.51.23.0/24
IP: 185.182.20.0/22
IP: 185.240.128.0/22
IP: 185.254.104.0/22
IP: 185.255.164.0/22
IP: 188.190.104.0/22
IP: 188.190.120.0/22
IP: 193.31.56.0/22
IP: 193.32.96.0/22
IP: 193.42.56.0/22
IP: 193.47.56.0/22
IP: 194.31.176.0/22
IP: 194.41.120.0/22
IP: 194.99.60.0/22
IP: 194.187.36.0/22
IP: 195.3.136.0/22
IP: 195.216.128.0/22
IP: 212.103.56.0/22
IP: 212.107.0.0/22
IP: 213.255.193.0 -- 213.255.194.255
IP: 213.255.196.0/24
IP: 213.255.199.0/24
IP: 213.255.204.0/24
IP: 213.255.207.0/24
IP: 213.255.240.0/22
IP: 213.255.248.0/22
IP: 217.194.130.0/23
IP: 217.194.136.0/23
IP: 217.194.139.0/24
IP: 217.194.144.0/24
IP: 217.194.151.0 -- 217.194.152.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:45:40:eb:90:a7:49:a8:f6:cd:c5:35:67:b6:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:78:8c:8f:23:9f:7b:97:3d:28:34:a0:11:73:
d7:8b:0e:b9:51:2c:30:89:6c:0a:d8:91:c2:65:c6:
cd:a2:78:7e:9f:db:e8:17:94:c3:5c:46:53:5e:dd:
32:b1:c1:95:d2:5b:33:33:2c:3b:e3:f3:84:ef:c6:
b4:71:d1:72:5b:cc:44:24:a1:31:4e:c1:99:f1:d1:
d5:61:66:53:a1:91:ee:74:66:7b:d0:4b:0b:e0:5d:
09:ec:ed:df:45:81:0f:1e:3d:c9:33:06:df:df:1d:
04:dd:03:d0:83:c9:e9:d5:e8:92:6a:7c:ae:89:3e:
95:1a:1a:b9:8e:7e:0f:37:87:01:1b:e4:be:62:97:
11:1c:5f:57:2c:7c:3c:bc:28:7e:b6:7b:fd:63:23:
f5:67:28:ef:6e:c6:46:75:54:2d:40:98:b6:5e:be:
16:8b:db:6a:19:4f:16:cb:ad:f7:cb:e6:ae:11:3f:
58:2e:7b:49:26:c6:27:53:02:13:1c:97:fc:68:20:
d2:e4:f4:7c:55:b6:1e:3f:a2:e6:50:d5:66:dc:ea:
4b:5c:37:f8:ea:61:1e:31:e2:16:c2:83:66:47:c1:
b2:82:b8:94:ba:0b:65:a3:99:31:22:97:88:90:52:
00:2e:01:a9:3b:93:12:bc:fa:ce:78:47:c2:e8:0d:
cd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.12.76.0/22
31.40.220.0/22
31.40.228.0/22
37.44.200.0/22
46.149.160.0/22
78.138.8.0/24
78.138.41.0/24
78.138.53.0-78.138.55.255
78.138.63.0/24
80.240.98.0/23
80.240.116.0-80.240.123.255
80.240.125.0/24
82.97.204.0/24
83.229.0.0/23
83.229.7.0/24
83.229.12.0/23
83.229.27.0/24
83.229.30.0/24
83.229.36.0/23
83.229.58.0-83.229.60.255
83.229.66.0/24
83.229.92.0/24
83.229.110.0/24
83.229.114.0/24
83.229.116.0/22
91.196.180.0/22
103.14.104.0/22
185.4.226.0/24
185.18.40.0/22
185.51.23.0/24
185.182.20.0/22
185.240.128.0/22
185.254.104.0/22
185.255.164.0/22
188.190.104.0/22
188.190.120.0/22
193.31.56.0/22
193.32.96.0/22
193.42.56.0/22
193.47.56.0/22
194.31.176.0/22
194.41.120.0/22
194.99.60.0/22
194.187.36.0/22
195.3.136.0/22
195.216.128.0/22
212.103.56.0/22
212.107.0.0/22
213.255.193.0-213.255.194.255
213.255.196.0/24
213.255.199.0/24
213.255.204.0/24
213.255.207.0/24
213.255.240.0/22
213.255.248.0/22
217.194.130.0/23
217.194.136.0/23
217.194.139.0/24
217.194.144.0/24
217.194.151.0-217.194.152.255
Signature Algorithm: sha256WithRSAEncryption
3a:41:5d:48:b4:71:fb:37:03:80:a6:c8:1c:d5:e0:a6:b5:05:
71:cc:1f:a0:83:23:c7:ae:04:09:98:e5:4d:7d:eb:6c:a2:8d:
86:17:ed:51:79:40:d1:87:4b:62:06:4c:9a:e8:a0:37:81:65:
36:76:17:75:e0:14:fa:32:43:0b:14:8b:1b:f1:3f:cd:56:ac:
e7:24:58:6b:7f:44:36:32:e6:b1:c5:25:16:3a:38:ca:e9:da:
3e:03:46:a8:72:74:57:92:fe:f4:33:cf:52:0e:dd:aa:c9:17:
65:ee:08:97:a2:e7:12:94:e1:f5:73:57:d6:44:09:96:c4:89:
2d:ba:6c:fe:81:94:1f:1d:d1:7e:6c:35:3d:c2:fe:60:f0:9e:
d2:17:a3:79:78:c8:62:aa:d4:18:65:90:f3:fb:34:73:af:ac:
7a:e5:e8:cc:38:db:13:83:eb:ce:1b:74:bc:2a:85:01:37:cd:
71:2f:75:e7:27:52:f5:96:fb:b0:99:b3:4c:d3:21:d6:ec:66:
72:85:43:91:68:f3:0e:ef:4d:69:1a:5e:6d:dc:a9:dd:1f:64:
96:10:48:03:1e:a4:c0:b0:01:35:e6:1d:3b:91:a4:83:ec:cb:
bf:95:fe:b5:7e:4b:d3:9d:59:e2:57:d8:26:f9:47:8c:54:6a:
d0:3b:c1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:28:18 2024 by rpki-client on console-ams.rpki-client.org