Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
File: JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer (raw, json)
Hash identifier: mhKXrFDTYfKg4U5L417m0WsAW7b+mQeV0k5DlG4CsV4=
Subject key identifier: 26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0191FF2CE2A986AA86AAB6601CFBC5E133F5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 17 Sep 2024 08:50:17 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 29522
AS: 34360
AS: 41079
AS: 43758
AS: 47383
AS: 48760
AS: 198414
IP: 2.57.136.0/22
IP: 91.198.146.0/24
IP: 91.199.22.0/24
IP: 91.213.206.0/24
IP: 91.224.38.0/23
IP: 91.225.28.0/22
IP: 91.228.196.0/22
IP: 91.234.146.0/24
IP: 91.237.52.0/24
IP: 91.239.66.0/23
IP: 93.157.96.0/21
IP: 94.152.0.0/16
IP: 178.250.40.0/21
IP: 185.5.96.0/22
IP: 185.11.100.0/22
IP: 185.25.148.0/22
IP: 185.84.136.0/22
IP: 185.123.160.0/22
IP: 185.140.120.0/22
IP: 185.142.204.0/22
IP: 185.180.204.0 -- 185.180.211.255
IP: 185.193.112.0/22
IP: 185.201.112.0/22
IP: 185.204.216.0/22
IP: 185.208.164.0/22
IP: 185.212.132.0/22
IP: 185.243.52.0/22
IP: 193.17.184.0/24
IP: 193.218.152.0/22
IP: 194.60.251.0/24
IP: 194.169.227.0/24
IP: 195.2.254.0/23
IP: 195.62.12.0/23
IP: 195.78.66.0/23
IP: 195.114.0.0/23
IP: 195.149.224.0/21
IP: 195.242.116.0/23
IP: 213.108.56.0/21
IP: 2001:67c:2e0::/48
IP: 2a00:76a0::/32
IP: 2a00:e940::/32
IP: 2a01:4660::/32
IP: 2a02:1778::/32
IP: 2a02:7240::/32
IP: 2a07:1cc0::/29
IP: 2a0a:b180::/29
IP: 2a0a:c2c0::/29
IP: 2a0a:fe40::/29
IP: 2a0b:3ac0::/29
IP: 2a0b:77c0::/29
IP: 2a0d:680::/29
IP: 2a14:4bc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ff:2c:e2:a9:86:aa:86:aa:b6:60:1c:fb:c5:e1:33:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 17 08:50:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26a5aa918cbfeb3e12997f33890feb258907b343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5f:7a:b3:8f:d4:eb:59:69:01:cf:33:3f:8f:
10:5e:2c:69:d5:8c:d8:97:0d:93:77:f8:4b:c9:59:
11:5c:63:66:52:48:90:8c:ae:f2:b2:26:81:8c:90:
02:59:da:d6:ed:2f:88:26:d7:c8:01:2b:c0:19:b4:
7b:e4:1d:76:ee:66:b0:ae:7c:fc:24:6b:0c:ba:ae:
71:b9:90:5a:cb:eb:d9:fe:f7:60:de:18:d0:33:72:
65:19:29:8c:87:2b:a4:9c:66:fa:ff:56:2d:90:fc:
83:58:ba:5d:4e:48:ef:27:e4:d8:02:df:08:96:04:
af:54:23:9e:54:a2:be:d1:24:fe:56:e2:14:47:9b:
a8:8b:ca:0a:e3:e5:a7:58:ce:7a:07:1a:d2:f1:ed:
c4:08:92:7e:a0:93:21:16:06:46:4c:39:ef:e1:d2:
ce:77:ff:ad:1f:f4:b0:ef:9e:9d:c2:83:a9:d6:08:
ad:ae:b9:da:ca:5f:b0:33:24:d2:9c:a0:a9:d9:33:
50:b5:c0:1b:40:d3:0f:d6:59:98:16:bf:ec:8b:75:
62:45:cb:62:c4:1f:f0:80:c5:bb:e7:61:af:68:f3:
29:05:12:87:98:8a:a0:1a:21:e2:0b:cd:fe:69:70:
49:e1:3a:fe:a3:d2:b0:2b:bb:3c:10:08:56:4f:d0:
46:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.136.0/22
91.198.146.0/24
91.199.22.0/24
91.213.206.0/24
91.224.38.0/23
91.225.28.0/22
91.228.196.0/22
91.234.146.0/24
91.237.52.0/24
91.239.66.0/23
93.157.96.0/21
94.152.0.0/16
178.250.40.0/21
185.5.96.0/22
185.11.100.0/22
185.25.148.0/22
185.84.136.0/22
185.123.160.0/22
185.140.120.0/22
185.142.204.0/22
185.180.204.0-185.180.211.255
185.193.112.0/22
185.201.112.0/22
185.204.216.0/22
185.208.164.0/22
185.212.132.0/22
185.243.52.0/22
193.17.184.0/24
193.218.152.0/22
194.60.251.0/24
194.169.227.0/24
195.2.254.0/23
195.62.12.0/23
195.78.66.0/23
195.114.0.0/23
195.149.224.0/21
195.242.116.0/23
213.108.56.0/21
IPv6:
2001:67c:2e0::/48
2a00:76a0::/32
2a00:e940::/32
2a01:4660::/32
2a02:1778::/32
2a02:7240::/32
2a07:1cc0::/29
2a0a:b180::/29
2a0a:c2c0::/29
2a0a:fe40::/29
2a0b:3ac0::/29
2a0b:77c0::/29
2a0d:680::/29
2a14:4bc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29522
34360
41079
43758
47383
48760
198414
Signature Algorithm: sha256WithRSAEncryption
20:f3:ac:60:db:b8:ac:d4:42:2d:88:b5:05:9b:e8:2e:85:79:
9f:9c:e0:d2:1e:d6:d2:62:b1:fc:74:c1:28:98:db:79:e9:97:
d1:0a:6d:40:00:48:1d:38:c1:47:1c:69:b0:8a:fe:5a:0b:2b:
6b:3c:78:6a:f9:95:72:d6:bb:c3:3c:91:b1:19:a8:36:54:f0:
27:42:f0:0f:32:4e:2f:7c:7f:9a:e7:55:7d:28:1e:92:7a:24:
eb:89:fa:07:60:62:f8:e7:b5:db:90:0e:c6:d4:94:ea:48:f1:
9e:e9:aa:09:95:f2:30:c2:38:37:b1:b8:24:53:82:60:b5:92:
ce:6a:db:85:2d:92:0b:6b:29:94:69:50:e5:cb:aa:30:3e:0c:
02:90:04:e9:d9:20:c1:a1:96:9c:47:f0:e4:58:09:36:f3:fa:
60:4a:31:4d:6f:a5:3d:a7:20:78:38:7a:1d:65:2c:fd:d7:e9:
1d:92:73:69:bf:4f:d8:59:c3:2c:dd:1c:70:36:26:9f:b3:11:
ca:26:4a:ef:28:a9:ea:4c:26:3f:4a:ed:e7:d8:3e:f2:0d:27:
5f:85:ee:f2:1d:ff:51:ea:9d:59:40:b2:4f:f2:0b:9a:44:0b:
15:9e:d3:b4:d2:27:69:c4:b1:22:fb:48:23:22:ed:6c:c2:b5:
e4:b3:f5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:29:32 2024 by rpki-client on console-fra.rpki-client.org