Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
File: TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer (raw, json)
Hash identifier: FLcQTW9UoeIPxy4KZDs4InzSqt8ew8cTPgoCdeGziOY=
Subject key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018EF03CB5A1D098063573F5E5CB7BC6C158
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 18 Apr 2024 08:04:54 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 6675
AS: 8220
AS: 8372
AS: 9126
AS: 12640
AS: 12755
AS: 12761
AS: 12878
AS: 15404
IP: 46.248.128.0/19
IP: 57.133.0.0/16
IP: 62.23.0.0/16
IP: 62.72.96.0/19
IP: 62.84.192.0/19
IP: 62.96.0.0/16
IP: 62.97.64.0/18
IP: 62.152.96.0/19
IP: 62.192.0.0/19
IP: 78.143.0.0/18
IP: 78.156.64.0/19
IP: 80.80.0.0/19
IP: 80.169.0.0/16
IP: 80.251.160.0/19
IP: 82.112.192.0/19
IP: 84.14.0.0/16
IP: 84.16.160.0/19
IP: 85.88.128.0/19
IP: 87.241.0.0/18
IP: 118.67.224.0/19
IP: 136.225.0.0/16
IP: 157.120.224.0/21
IP: 157.120.236.0 -- 157.120.255.255
IP: 193.82.32.0/19
IP: 193.93.80.0/22
IP: 193.114.160.0/19
IP: 193.116.128.0/19
IP: 193.118.160.0/19
IP: 193.118.224.0/19
IP: 193.188.132.0/23
IP: 194.223.128.0 -- 194.223.139.255
IP: 195.68.0.0/17
IP: 195.110.64.0/19
IP: 212.0.96.0/19
IP: 212.23.224.0/19
IP: 212.31.224.0/19
IP: 212.35.96.0/19
IP: 212.36.128.0/18
IP: 212.74.64.0/19
IP: 212.78.160.0/19
IP: 212.121.128.0/19
IP: 212.123.192.0/18
IP: 212.161.0.0/17
IP: 212.203.64.0/18
IP: 213.27.128.0/17
IP: 213.41.0.0/17
IP: 213.61.0.0/16
IP: 213.86.0.0/16
IP: 213.164.0.0/19
IP: 213.173.160.0/19
IP: 213.185.160.0/19
IP: 213.208.192.0/18
IP: 213.215.128.0/17
IP: 213.229.128.0/18
IP: 213.246.192.0/18
IP: 217.110.0.0/15
IP: 217.173.96.0/20
IP: 2001:920::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f0:3c:b5:a1:d0:98:06:35:73:f5:e5:cb:7b:c6:c1:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 18 08:04:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a3:94:da:e4:b5:6d:20:41:31:fd:17:3e:4a:
20:af:31:a0:4d:03:6b:7a:aa:ec:ac:76:56:3e:72:
f9:33:60:b6:0a:aa:d0:ef:48:9d:f0:5c:a9:ea:70:
84:c5:f3:b9:cc:e2:df:c2:5e:63:3e:1b:df:16:b8:
b8:ab:e2:cc:e8:f5:36:9a:2f:68:e0:90:09:26:e9:
30:10:1a:5c:3e:8b:6f:2b:1b:36:0c:f5:95:2d:16:
27:c1:bf:a4:e7:4a:de:cc:b8:e6:c4:b2:52:f8:18:
72:3b:b0:b0:a7:a4:fd:3a:5c:c7:b7:a0:9a:71:cb:
f4:5b:b1:8c:6f:49:af:43:55:c7:f3:b9:c0:6f:12:
9f:e8:16:60:e4:23:4c:4c:f2:ce:33:40:60:bc:14:
94:67:27:9e:35:ab:4e:07:5b:af:b7:ed:a5:e1:bd:
57:4c:64:a9:1c:c4:58:12:77:70:4d:07:94:b5:0c:
fd:c4:1a:3b:11:90:ed:67:f7:dd:5d:68:3b:91:9a:
82:45:47:92:ad:a4:91:04:3c:70:58:42:01:ad:53:
34:da:ff:97:50:a0:7f:a7:f4:4d:0e:65:f3:8d:90:
3c:11:6c:b3:8d:8e:09:2e:9f:4a:d3:4a:13:8a:5d:
a2:65:1e:68:32:43:1b:cf:67:85:69:3c:29:45:6c:
aa:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.248.128.0/19
57.133.0.0/16
62.23.0.0/16
62.72.96.0/19
62.84.192.0/19
62.96.0.0/16
62.97.64.0/18
62.152.96.0/19
62.192.0.0/19
78.143.0.0/18
78.156.64.0/19
80.80.0.0/19
80.169.0.0/16
80.251.160.0/19
82.112.192.0/19
84.14.0.0/16
84.16.160.0/19
85.88.128.0/19
87.241.0.0/18
118.67.224.0/19
136.225.0.0/16
157.120.224.0/21
157.120.236.0-157.120.255.255
193.82.32.0/19
193.93.80.0/22
193.114.160.0/19
193.116.128.0/19
193.118.160.0/19
193.118.224.0/19
193.188.132.0/23
194.223.128.0-194.223.139.255
195.68.0.0/17
195.110.64.0/19
212.0.96.0/19
212.23.224.0/19
212.31.224.0/19
212.35.96.0/19
212.36.128.0/18
212.74.64.0/19
212.78.160.0/19
212.121.128.0/19
212.123.192.0/18
212.161.0.0/17
212.203.64.0/18
213.27.128.0/17
213.41.0.0/17
213.61.0.0/16
213.86.0.0/16
213.164.0.0/19
213.173.160.0/19
213.185.160.0/19
213.208.192.0/18
213.215.128.0/17
213.229.128.0/18
213.246.192.0/18
217.110.0.0/15
217.173.96.0/20
IPv6:
2001:920::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
6675
8220
8372
9126
12640
12755
12761
12878
15404
Signature Algorithm: sha256WithRSAEncryption
0e:33:eb:a7:5e:48:ba:f8:7e:57:98:56:93:a0:6d:24:3a:ed:
80:74:c9:d8:1d:1f:eb:ac:81:f0:16:a2:6d:73:b0:e4:78:ef:
06:79:01:42:da:25:f9:11:65:40:c8:4d:c8:1d:a4:60:51:7d:
37:d6:eb:4c:f2:a7:0f:82:c5:ec:b0:2f:61:ed:cf:23:a0:5b:
4c:9f:cc:93:18:e3:5a:fe:be:4d:01:aa:b6:f0:73:b8:80:3d:
fe:a9:c4:3c:4e:c4:ee:1b:96:75:3d:df:61:61:2a:c0:6a:c9:
fe:50:00:70:45:60:e5:cf:0d:61:92:ae:33:d3:9b:dd:5b:0c:
85:76:20:bc:80:e3:ea:5b:e6:b5:e7:26:ce:30:3d:f3:e4:d3:
ee:11:14:a1:bb:10:d9:99:e6:85:89:5f:2b:e8:ec:57:93:1c:
1a:81:c4:97:b6:3b:63:fc:86:ed:b9:49:ff:64:0b:05:69:89:
c3:41:7c:28:bc:8a:cb:e8:6a:59:95:a4:bb:00:a2:1c:a9:59:
e0:dd:8f:e2:e3:39:e0:8b:3b:c3:a9:84:c6:04:f2:3b:d2:d4:
92:9d:0b:cc:35:c7:57:5b:7f:ca:5d:65:f0:62:32:a6:ef:47:
eb:26:09:1a:f8:f5:b5:46:20:8a:9b:82:51:af:e4:7a:2a:98:
b1:df:d2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:58:58 2024 by rpki-client on console-ams.rpki-client.org