Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
File: 4MijkN3l4VGaS9PadUqT6YhJLWc.cer (raw, json)
Hash identifier: 3+GtVJR67LXxf4tYARpScekFNtNzLjLZ2WBXSeZiJlQ=
Subject key identifier: E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7949096F7D839889E8FA6C2FCEB78F3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:30:51 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 34934
AS: 61323
IP: 31.193.0.0/20
IP: 37.220.88.0/21
IP: 45.67.172.0/22
IP: 45.84.20.0/22
IP: 45.131.136.0/22
IP: 45.145.100.0/22
IP: 45.157.40.0/22
IP: 46.37.160.0/19
IP: 78.24.88.0/22
IP: 78.109.160.0/20
IP: 78.137.112.0/20
IP: 80.66.200.0/22
IP: 80.244.176.0/20
IP: 81.201.128.0/20
IP: 94.229.160.0/20
IP: 109.108.128.0/19
IP: 159.253.208.0/21
IP: 176.124.52.0/22
IP: 178.238.128.0/20
IP: 185.55.76.0/22
IP: 185.156.64.0/22
IP: 185.160.180.0/22
IP: 185.160.252.0/22
IP: 185.162.224.0/22
IP: 185.166.128.0/22
IP: 185.181.196.0/22
IP: 185.182.88.0/22
IP: 185.197.60.0/22
IP: 185.207.108.0/22
IP: 185.210.196.0/22
IP: 185.213.116.0/22
IP: 185.216.76.0/22
IP: 185.217.40.0/22
IP: 185.220.60.0/22
IP: 185.221.204.0/22
IP: 185.224.68.0/22
IP: 185.226.220.0/22
IP: 185.234.36.0/22
IP: 185.241.248.0/22
IP: 192.166.44.0/22
IP: 193.39.252.0/22
IP: 194.39.164.0/22
IP: 195.69.100.0/22
IP: 2a02:21a8::/32
IP: 2a02:22d0::/32
IP: 2a09:b200::/29
IP: 2a09:b600::/29
IP: 2a09:ba00::/29
IP: 2a0c:3dc0::/29
IP: 2a0d:1bc0::/29
IP: 2a0e:9380::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:90:96:f7:d8:39:88:9e:8f:a6:c2:fc:eb:78:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:30:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0c8a390dde5e1519a4bd3da754a93e988492d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:62:f4:dc:e2:05:ad:22:73:0e:75:ad:1f:0d:
8a:dc:49:36:4a:cc:49:55:06:9a:e4:ed:c3:34:e4:
7a:fb:c2:38:37:92:52:22:c7:74:ca:73:e6:37:8e:
80:62:47:78:b9:5b:4d:38:fc:73:90:42:f8:3c:85:
29:48:49:de:ef:c2:14:5f:81:32:8c:ad:88:df:d0:
f3:e2:cd:ba:6f:c8:74:67:f4:91:eb:b6:8b:5b:bc:
a2:6e:3c:c4:0b:58:2a:ac:04:d3:3f:4a:10:09:d9:
88:c5:83:2e:4c:ba:42:9b:7f:aa:48:f0:9b:38:64:
74:56:f9:05:82:26:b3:b5:e4:5d:1b:ae:a2:55:04:
7b:49:a0:14:21:0c:08:1e:88:79:d1:4f:ed:98:22:
16:4f:9c:e1:96:eb:b9:64:c2:73:56:e2:da:f9:ea:
63:11:e3:d7:33:bf:b4:b7:3e:ae:be:79:a1:07:8c:
1f:bf:25:e9:25:16:68:a1:39:4d:69:f1:0d:6e:73:
84:34:a0:04:e0:d8:74:9d:2e:66:e5:52:cc:2b:91:
eb:26:5d:ed:3e:0c:74:36:69:b0:ea:b2:69:2b:16:
c2:b9:fb:0b:29:f4:19:02:79:ea:a5:41:a0:e8:03:
84:9e:31:e2:31:51:50:ff:f4:95:06:a3:c4:76:1d:
66:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.0.0/20
37.220.88.0/21
45.67.172.0/22
45.84.20.0/22
45.131.136.0/22
45.145.100.0/22
45.157.40.0/22
46.37.160.0/19
78.24.88.0/22
78.109.160.0/20
78.137.112.0/20
80.66.200.0/22
80.244.176.0/20
81.201.128.0/20
94.229.160.0/20
109.108.128.0/19
159.253.208.0/21
176.124.52.0/22
178.238.128.0/20
185.55.76.0/22
185.156.64.0/22
185.160.180.0/22
185.160.252.0/22
185.162.224.0/22
185.166.128.0/22
185.181.196.0/22
185.182.88.0/22
185.197.60.0/22
185.207.108.0/22
185.210.196.0/22
185.213.116.0/22
185.216.76.0/22
185.217.40.0/22
185.220.60.0/22
185.221.204.0/22
185.224.68.0/22
185.226.220.0/22
185.234.36.0/22
185.241.248.0/22
192.166.44.0/22
193.39.252.0/22
194.39.164.0/22
195.69.100.0/22
IPv6:
2a02:21a8::/32
2a02:22d0::/32
2a09:b200::/29
2a09:b600::/29
2a09:ba00::/29
2a0c:3dc0::/29
2a0d:1bc0::/29
2a0e:9380::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34934
61323
Signature Algorithm: sha256WithRSAEncryption
9a:6c:29:69:1b:27:4c:58:43:fb:26:b0:d7:bd:78:75:03:be:
19:d8:a3:69:b4:38:e1:22:41:60:69:c6:83:e2:25:07:4a:0f:
f4:96:b7:c3:fd:25:1b:87:9b:a6:41:50:23:d1:db:27:bb:78:
c5:eb:e7:d9:94:5b:20:1b:db:5f:66:19:b4:fe:53:33:8a:8d:
9c:b6:f1:0b:1d:bb:1e:4d:bf:db:93:63:af:f8:4d:04:8e:ca:
0c:cf:5c:83:b1:17:af:72:75:a0:3b:e8:00:e6:c9:9c:7c:e7:
5f:e4:44:c2:00:f6:c7:40:48:ed:d8:c5:1f:d6:55:e9:c8:db:
5f:b5:87:7c:b6:30:a6:a3:94:b5:95:d0:f9:80:41:5c:13:ba:
9a:b0:fc:58:9f:09:ff:2f:72:b5:01:66:43:b6:9f:83:6a:2e:
b1:cb:71:1e:9f:36:8a:83:44:68:87:09:f3:e2:2a:29:53:f9:
ea:bd:95:73:21:20:6a:ac:3e:78:b3:35:e0:a6:ad:39:57:66:
08:22:ed:04:39:9a:87:f7:45:37:d9:c8:70:3e:6f:66:81:d0:
09:8b:29:e0:56:0d:b3:93:71:6e:3f:c6:4e:6f:02:08:d5:54:
2d:45:85:a2:d8:d3:33:67:77:44:37:c3:b5:1d:63:15:ab:77:
ca:44:94:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 13:50:05 2024 by rpki-client on console-ams.rpki-client.org