Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96oDm4hrImV4vbakJ4G_WQRLsTg.cer
File: 96oDm4hrImV4vbakJ4G_WQRLsTg.cer (raw, json)
Hash identifier: 7t+1WgpohzwC7H2+IkW/uBfP119RHTo12e5b2GsWA6A=
Subject key identifier: F7:AA:03:9B:88:6B:22:65:78:BD:B6:A4:27:81:BF:59:04:4B:B1:38
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B87DCDEE25EC0BB324398736E128B0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:30:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 6858
AS: 24739
AS: 31191
AS: 35000
AS: 43267
AS: 49165
IP: 37.46.52.0 -- 37.46.63.255
IP: 37.143.16.0/20
IP: 46.228.0.0/20
IP: 46.252.240.0/20
IP: 62.181.33.0/24
IP: 62.181.40.0/22
IP: 62.181.45.0/24
IP: 62.181.52.0/24
IP: 77.232.50.0 -- 77.232.63.255
IP: 78.111.80.0/22
IP: 78.111.92.0/22
IP: 78.140.192.0 -- 78.140.239.255
IP: 78.140.248.0/22
IP: 79.99.104.0/21
IP: 81.23.96.0/19
IP: 81.24.112.0/20
IP: 82.112.184.0/21
IP: 84.47.137.0/24
IP: 84.47.188.0/24
IP: 84.242.4.0/24
IP: 85.235.192.0/19
IP: 87.249.32.0/24
IP: 87.249.34.0/23
IP: 87.249.39.0 -- 87.249.40.255
IP: 87.249.42.0/24
IP: 87.249.45.0 -- 87.249.48.255
IP: 87.249.51.0 -- 87.249.52.255
IP: 89.104.96.0/24
IP: 89.104.98.0/23
IP: 89.104.103.0 -- 89.104.106.255
IP: 89.104.108.0/23
IP: 89.104.120.0/24
IP: 89.104.124.0/24
IP: 89.223.5.0/24
IP: 89.223.8.0/24
IP: 89.223.10.0/24
IP: 91.196.72.0/22
IP: 92.255.2.0/24
IP: 92.255.5.0/24
IP: 92.255.7.0 -- 92.255.8.255
IP: 92.255.10.0/24
IP: 92.255.12.0/24
IP: 92.255.14.0/24
IP: 92.255.17.0/24
IP: 92.255.24.0/24
IP: 92.255.26.0 -- 92.255.28.255
IP: 92.255.31.0/24
IP: 93.174.240.0/21
IP: 94.140.192.0/19
IP: 176.32.176.0/20
IP: 178.238.16.0/20
IP: 185.7.144.0/22
IP: 185.58.248.0/22
IP: 185.124.188.0/22
IP: 185.247.80.0/22
IP: 188.227.0.0/19
IP: 188.227.36.0 -- 188.227.55.255
IP: 188.227.60.0 -- 188.227.83.255
IP: 188.227.88.0 -- 188.227.105.255
IP: 188.227.108.0 -- 188.227.127.255
IP: 195.182.128.0/19
IP: 212.59.112.0/22
IP: 212.59.127.0/24
IP: 212.116.96.0/19
IP: 213.135.68.0/24
IP: 213.135.75.0 -- 213.135.76.255
IP: 213.135.78.0/24
IP: 213.135.93.0/24
IP: 213.208.185.0/24
IP: 217.197.224.0/20
IP: 2a00:1020::/32
IP: 2a01:a280::/30
IP: 2a06:aa80:: -- 2a06:aa86:ffff:ffff:ffff:ffff:ffff:ffff
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:7d:cd:ee:25:ec:0b:b3:24:39:87:36:e1:28:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7aa039b886b226578bdb6a42781bf59044bb138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:48:68:bf:77:73:f6:db:54:2a:38:cb:d1:f3:
ed:12:99:fb:72:13:53:41:e8:0c:28:29:7e:3f:d0:
8b:61:7c:b5:d5:d2:ed:43:01:ba:5a:5e:3c:0d:6a:
57:50:fc:75:53:9d:1d:10:c4:d5:51:44:53:39:e8:
83:d7:5b:e6:79:00:57:55:74:b8:16:bd:28:49:60:
5e:a1:47:37:a7:08:22:d2:fb:d1:e1:c4:ba:0d:de:
41:23:0d:ff:fc:db:ed:21:d5:72:71:c6:9d:a0:fa:
db:4c:eb:a6:65:c9:a5:13:8b:de:f4:d5:fc:90:1c:
67:96:62:0a:d0:68:88:71:a8:8f:48:c7:bc:5c:ab:
5c:e6:96:e8:17:ef:d3:67:58:59:33:ed:9f:72:72:
a6:46:e6:d0:05:67:b3:c1:f6:e2:64:f7:a5:47:0e:
73:12:12:7f:95:54:f6:c3:0f:40:71:2d:44:2e:71:
f6:83:78:98:f1:ff:da:34:9f:38:ad:69:b6:40:2a:
e8:5c:8f:89:96:af:4a:99:8e:fc:3b:fa:56:d1:93:
22:d4:7f:b1:a1:aa:a4:8b:92:b9:20:80:12:dd:b7:
b9:4a:c5:2b:c3:10:8b:79:2d:52:74:97:c9:a5:fa:
55:81:19:50:86:99:63:92:b2:55:4d:8c:c6:6b:d7:
57:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:AA:03:9B:88:6B:22:65:78:BD:B6:A4:27:81:BF:59:04:4B:B1:38
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.52.0-37.46.63.255
37.143.16.0/20
46.228.0.0/20
46.252.240.0/20
62.181.33.0/24
62.181.40.0/22
62.181.45.0/24
62.181.52.0/24
77.232.50.0-77.232.63.255
78.111.80.0/22
78.111.92.0/22
78.140.192.0-78.140.239.255
78.140.248.0/22
79.99.104.0/21
81.23.96.0/19
81.24.112.0/20
82.112.184.0/21
84.47.137.0/24
84.47.188.0/24
84.242.4.0/24
85.235.192.0/19
87.249.32.0/24
87.249.34.0/23
87.249.39.0-87.249.40.255
87.249.42.0/24
87.249.45.0-87.249.48.255
87.249.51.0-87.249.52.255
89.104.96.0/24
89.104.98.0/23
89.104.103.0-89.104.106.255
89.104.108.0/23
89.104.120.0/24
89.104.124.0/24
89.223.5.0/24
89.223.8.0/24
89.223.10.0/24
91.196.72.0/22
92.255.2.0/24
92.255.5.0/24
92.255.7.0-92.255.8.255
92.255.10.0/24
92.255.12.0/24
92.255.14.0/24
92.255.17.0/24
92.255.24.0/24
92.255.26.0-92.255.28.255
92.255.31.0/24
93.174.240.0/21
94.140.192.0/19
176.32.176.0/20
178.238.16.0/20
185.7.144.0/22
185.58.248.0/22
185.124.188.0/22
185.247.80.0/22
188.227.0.0/19
188.227.36.0-188.227.55.255
188.227.60.0-188.227.83.255
188.227.88.0-188.227.105.255
188.227.108.0-188.227.127.255
195.182.128.0/19
212.59.112.0/22
212.59.127.0/24
212.116.96.0/19
213.135.68.0/24
213.135.75.0-213.135.76.255
213.135.78.0/24
213.135.93.0/24
213.208.185.0/24
217.197.224.0/20
IPv6:
2a00:1020::/32
2a01:a280::/30
2a06:aa80::-2a06:aa86:ffff:ffff:ffff:ffff:ffff:ffff
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
6858
24739
31191
35000
43267
49165
Signature Algorithm: sha256WithRSAEncryption
56:60:1f:a7:16:42:5e:72:f5:a0:3a:bc:0b:13:81:17:1b:1c:
9e:76:62:0b:09:c9:36:98:7b:9a:ce:08:1e:09:39:a1:9b:ed:
25:3a:6e:fb:65:73:43:9a:3b:0e:15:f2:17:a1:c1:4b:3d:61:
ea:d2:86:b0:54:a4:bc:d5:4a:1f:7f:06:25:b7:42:bd:44:5b:
6d:73:9c:9a:e8:9e:f9:94:e0:f3:4a:d2:88:99:f8:29:07:bc:
e9:75:8b:82:f6:37:19:10:f3:bf:ed:20:e6:4a:1f:81:bd:52:
cb:53:af:13:31:66:d4:38:11:9c:eb:fa:ff:d2:5f:49:11:3c:
cb:51:9c:9d:d7:4a:0b:56:ce:fa:34:ba:b8:0a:db:6b:e9:2c:
95:b5:d6:15:9a:2e:48:c1:ab:1e:f4:68:00:cf:9c:6f:94:e0:
80:ff:7a:ba:11:86:a5:a6:f6:b3:a9:67:f9:42:0b:41:13:6e:
74:64:9f:88:2c:33:fe:f4:71:9e:37:a2:11:00:42:fc:4b:2b:
7a:ba:1f:34:6e:9f:a7:7b:74:a2:fe:fa:4b:cc:17:9e:5c:76:
38:0b:3a:74:1b:78:36:81:6c:a5:68:12:8c:97:43:ff:3f:7d:
e6:94:1f:b4:c0:b4:cd:e1:45:b7:0d:44:a7:5e:7d:a9:2e:81:
95:66:39:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:11:00 2024 by rpki-client on console-ams.rpki-client.org