Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
File: P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer (raw, json)
Hash identifier: +ikVtxZPs3hRqokaB8fxFn1pEy8BPfSs4hJL3f8M2bc=
Subject key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC34943AD7ED40B1D5D02CC47BBBC8702
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:30:07 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 8851
AS: 31270
AS: 43198
AS: 199291
IP: 37.98.144.0/21
IP: 37.252.24.0/21
IP: 77.107.64.0/18
IP: 79.99.72.0/21
IP: 80.240.80.0/20
IP: 81.5.128.0/18
IP: 81.168.0.0/17
IP: 82.152.0.0/15
IP: 82.163.0.0/19
IP: 85.159.128.0/21
IP: 89.31.232.0/21
IP: 89.213.0.0/21
IP: 89.213.40.0 -- 89.213.255.255
IP: 109.176.0.0/16
IP: 185.20.32.0/22
IP: 185.24.84.0/22
IP: 185.49.124.0/22
IP: 194.105.64.0/19
IP: 195.128.138.0/24
IP: 212.38.64.0/19
IP: 213.130.128.0/19
IP: 213.152.32.0/19
IP: 213.210.0.0/18
IP: 213.218.208.0 -- 213.218.255.255
IP: 217.144.144.0/20
IP: 217.145.64.0/20
IP: 2001:1a90::/32
IP: 2a00:c60::/32
IP: 2a00:4ae0::/29
IP: 2a01:4cc0::/32
IP: 2a02:21f8::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:43:ad:7e:d4:0b:1d:5d:02:cc:47:bb:bc:87:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:15:c4:33:c1:cb:64:46:09:6b:ff:d6:2e:92:
30:e6:08:0e:3e:52:f9:ec:68:28:48:7c:99:fb:e7:
e0:4c:fd:bb:1c:69:d0:18:0d:5b:bf:60:81:c0:e5:
87:76:7f:9f:2b:67:f9:6f:47:ab:61:f4:e9:8d:72:
63:35:1d:6b:90:87:f9:92:4f:d1:49:7a:50:27:c3:
88:69:b3:4b:13:5a:31:b3:51:a7:c0:71:0c:d9:a7:
6f:ed:5f:4c:84:e3:fe:b5:de:0b:a6:c3:81:6c:64:
d6:0b:6c:cc:4c:10:26:dc:ec:45:1c:e9:b1:23:e2:
54:ca:8a:23:fc:74:fb:81:ac:4a:c8:c1:ea:98:09:
41:3a:86:11:1f:14:ea:b9:07:03:09:7f:c2:ee:3e:
bf:58:a6:00:e4:72:99:6d:56:21:c8:b9:b2:c8:3a:
75:2a:38:26:68:da:1e:41:81:7b:67:ad:a2:13:50:
64:71:0b:a4:d1:36:a2:1d:24:9f:f7:44:a9:ed:15:
d6:31:2f:12:80:d9:4c:e3:41:d7:0c:04:95:3c:0d:
02:b4:8d:26:3f:3a:b1:37:5e:68:3e:33:b1:c2:a9:
33:03:66:ef:e8:3c:ac:8e:cf:2b:17:e7:49:58:55:
59:f7:5d:9c:04:20:ec:6b:93:5d:b5:02:74:28:a4:
f2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.144.0/21
37.252.24.0/21
77.107.64.0/18
79.99.72.0/21
80.240.80.0/20
81.5.128.0/18
81.168.0.0/17
82.152.0.0/15
82.163.0.0/19
85.159.128.0/21
89.31.232.0/21
89.213.0.0/21
89.213.40.0-89.213.255.255
109.176.0.0/16
185.20.32.0/22
185.24.84.0/22
185.49.124.0/22
194.105.64.0/19
195.128.138.0/24
212.38.64.0/19
213.130.128.0/19
213.152.32.0/19
213.210.0.0/18
213.218.208.0-213.218.255.255
217.144.144.0/20
217.145.64.0/20
IPv6:
2001:1a90::/32
2a00:c60::/32
2a00:4ae0::/29
2a01:4cc0::/32
2a02:21f8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8851
31270
43198
199291
Signature Algorithm: sha256WithRSAEncryption
0f:cf:a0:3c:00:2a:f0:6d:b9:63:b5:b3:76:61:49:90:63:7a:
2d:85:5f:ab:8b:73:0b:79:72:ce:3e:1e:10:40:a8:03:61:78:
c3:6c:bc:7f:0e:6f:39:1c:53:7f:77:b9:c8:c4:b7:6c:7c:f4:
03:96:5c:b2:98:af:e9:f7:d9:4b:07:b2:96:a7:f2:0e:55:8f:
aa:23:cf:f2:af:17:c5:83:9c:fc:f3:a7:fb:e5:17:2c:13:86:
09:0d:56:0c:70:3a:2b:cf:bc:99:e1:2b:48:8e:7b:33:1e:7a:
89:ea:2c:1a:d1:de:d3:74:ca:97:43:7d:af:82:da:e1:f9:12:
44:98:30:48:7a:d0:d2:4d:82:39:99:60:ef:d2:f3:b1:03:93:
89:a0:e9:ee:dd:4e:ad:fe:7f:12:48:37:1b:a0:09:ea:6f:ae:
4a:ee:66:d0:4b:53:15:bd:e1:1d:b2:aa:ae:a7:a3:68:07:60:
e6:a7:e5:a1:e0:25:9f:23:bc:8a:4b:3a:c8:d3:71:86:05:15:
19:81:47:b0:66:2f:00:c1:79:57:35:37:9c:85:e3:c6:2a:8a:
37:46:eb:87:3f:40:bb:68:5f:0f:7e:c9:8e:86:23:25:b2:7b:
2a:9f:57:c1:9c:d0:eb:fd:5e:cc:2d:87:92:cd:e8:d4:31:90:
13:b5:f0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:31:11 2024 by rpki-client on console-ams.rpki-client.org