Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WDMpShzcE1ivxDnApyczsGWob4s.cer
File: WDMpShzcE1ivxDnApyczsGWob4s.cer (raw, json)
Hash identifier: uKgAll6JGfLA9iu2Sq5gaphQJGeA0C+54JBFvwStXac=
Subject key identifier: 58:33:29:4A:1C:DC:13:58:AF:C4:39:C0:A7:27:33:B0:65:A8:6F:8B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01914B1A743B7946B9313D253E89824F172D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 13 Aug 2024 09:38:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 39561
AS: 43146
AS: 49352
AS: 197695
AS: 201972
AS: 206812
IP: 5.63.152.0/21
IP: 31.31.192.0/20
IP: 37.140.192.0/21
IP: 46.183.160.0/24
IP: 46.183.163.0/24
IP: 46.183.165.0/24
IP: 62.113.91.0 -- 62.113.94.255
IP: 62.213.65.0 -- 62.213.68.255
IP: 62.213.87.0/24
IP: 62.213.92.0/24
IP: 62.213.100.0/24
IP: 62.213.106.0/24
IP: 62.213.108.0/24
IP: 62.213.111.0/24
IP: 62.213.114.0/24
IP: 62.213.122.0/24
IP: 62.213.125.0 -- 62.213.126.255
IP: 80.78.240.0/20
IP: 89.108.64.0/18
IP: 91.197.96.0/22
IP: 92.242.60.0/23
IP: 95.163.220.0 -- 95.163.247.255
IP: 134.0.112.0/21
IP: 151.248.112.0/20
IP: 176.99.0.0/20
IP: 178.21.8.0/21
IP: 185.10.60.0 -- 185.10.62.255
IP: 185.20.224.0/22
IP: 185.38.16.0/22
IP: 185.46.8.0/22
IP: 185.182.109.0 -- 185.182.111.255
IP: 188.93.208.0/21
IP: 193.227.240.0/23
IP: 194.58.88.0 -- 194.58.127.255
IP: 194.67.64.0 -- 194.67.68.255
IP: 194.67.71.0 -- 194.67.79.255
IP: 194.67.84.0 -- 194.67.94.255
IP: 194.67.96.0/19
IP: 212.24.32.0/23
IP: 212.24.35.0 -- 212.24.36.255
IP: 212.24.38.0/24
IP: 212.24.41.0/24
IP: 212.24.44.0/24
IP: 212.24.47.0 -- 212.24.48.255
IP: 212.24.55.0 -- 212.24.56.255
IP: 212.24.58.0/24
IP: 212.24.60.0/22
IP: 212.158.160.0/21
IP: 212.158.169.0/24
IP: 212.158.172.0/24
IP: 213.189.193.0 -- 213.189.195.255
IP: 213.189.199.0/24
IP: 213.189.201.0 -- 213.189.205.255
IP: 217.23.128.0/24
IP: 217.23.132.0 -- 217.23.138.255
IP: 217.23.140.0/23
IP: 217.23.143.0 -- 217.23.145.255
IP: 217.23.147.0 -- 217.23.148.255
IP: 217.23.150.0/24
IP: 2a00:1b48::/32
IP: 2a00:f940::/32
IP: 2a02:f20::/32
IP: 2a03:4900::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4b:1a:74:3b:79:46:b9:31:3d:25:3e:89:82:4f:17:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 13 09:38:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5833294a1cdc1358afc439c0a72733b065a86f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:8c:17:da:9d:e3:fa:3b:41:8b:e9:ea:7a:7e:
14:cd:18:2a:f4:da:b1:6f:6e:6d:ea:2f:9c:95:ec:
a5:8b:e6:4b:53:d7:af:0f:01:39:c6:3c:c6:a5:97:
fd:5f:fb:6f:aa:d0:f0:25:aa:16:7a:81:28:ae:91:
01:bf:84:4e:12:ee:7d:76:d2:04:01:e7:75:88:f4:
6e:8e:55:d9:91:63:ff:5d:a9:0f:f1:f1:eb:45:bb:
f4:f2:75:80:08:21:c0:46:6b:bd:d2:c0:36:8c:b9:
02:40:37:68:21:05:9c:09:3c:5c:e5:cb:68:31:2d:
22:74:f4:4c:53:0a:35:56:b3:37:dc:2e:08:01:c3:
dc:6f:dc:1c:01:6d:da:f6:4f:3e:44:4d:88:76:74:
a6:44:44:ff:6b:23:c3:e1:15:7d:1f:bb:93:4f:36:
1b:48:d8:0b:22:29:a8:92:45:8d:f3:e4:01:8f:91:
c3:25:1a:52:32:71:bc:3c:e3:28:9c:59:f2:28:05:
54:bf:08:e0:2e:96:d4:fc:2a:3d:f5:4f:36:e6:9c:
6b:c5:f9:fa:0a:7f:5a:b5:4a:6d:1c:27:a5:64:b6:
e6:63:72:dc:93:30:44:bf:cd:63:4d:48:34:29:46:
b3:ce:9f:5a:4a:f6:76:0a:93:16:f6:ba:12:89:92:
81:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:33:29:4A:1C:DC:13:58:AF:C4:39:C0:A7:27:33:B0:65:A8:6F:8B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.152.0/21
31.31.192.0/20
37.140.192.0/21
46.183.160.0/24
46.183.163.0/24
46.183.165.0/24
62.113.91.0-62.113.94.255
62.213.65.0-62.213.68.255
62.213.87.0/24
62.213.92.0/24
62.213.100.0/24
62.213.106.0/24
62.213.108.0/24
62.213.111.0/24
62.213.114.0/24
62.213.122.0/24
62.213.125.0-62.213.126.255
80.78.240.0/20
89.108.64.0/18
91.197.96.0/22
92.242.60.0/23
95.163.220.0-95.163.247.255
134.0.112.0/21
151.248.112.0/20
176.99.0.0/20
178.21.8.0/21
185.10.60.0-185.10.62.255
185.20.224.0/22
185.38.16.0/22
185.46.8.0/22
185.182.109.0-185.182.111.255
188.93.208.0/21
193.227.240.0/23
194.58.88.0-194.58.127.255
194.67.64.0-194.67.68.255
194.67.71.0-194.67.79.255
194.67.84.0-194.67.94.255
194.67.96.0/19
212.24.32.0/23
212.24.35.0-212.24.36.255
212.24.38.0/24
212.24.41.0/24
212.24.44.0/24
212.24.47.0-212.24.48.255
212.24.55.0-212.24.56.255
212.24.58.0/24
212.24.60.0/22
212.158.160.0/21
212.158.169.0/24
212.158.172.0/24
213.189.193.0-213.189.195.255
213.189.199.0/24
213.189.201.0-213.189.205.255
217.23.128.0/24
217.23.132.0-217.23.138.255
217.23.140.0/23
217.23.143.0-217.23.145.255
217.23.147.0-217.23.148.255
217.23.150.0/24
IPv6:
2a00:1b48::/32
2a00:f940::/32
2a02:f20::/32
2a03:4900::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39561
43146
49352
197695
201972
206812
Signature Algorithm: sha256WithRSAEncryption
4a:95:0f:95:b8:f6:41:68:15:af:4f:e5:38:5c:62:bb:51:8d:
c1:ca:a5:e1:d3:0d:93:38:88:53:b6:63:b5:17:1d:0a:d8:84:
0e:42:cf:a4:51:29:86:d0:7c:75:97:6c:f0:a2:2e:28:4c:ca:
ca:8f:5b:a3:46:67:a9:91:d7:3e:cc:95:ab:ba:78:68:59:8e:
36:c1:cd:ad:91:d6:dc:d6:97:f7:e2:74:a6:68:33:93:2d:59:
8e:27:ea:3a:5d:6c:41:8b:29:c3:23:49:ec:97:7e:e9:e3:13:
aa:e4:ea:7f:61:d6:fb:75:1f:24:45:4d:5f:db:7f:11:d3:e9:
48:a2:15:6d:ec:68:11:d0:cc:bf:7c:cf:09:57:bd:12:47:f3:
11:cd:c0:bc:f8:fd:5a:92:37:c0:e8:34:55:06:59:06:c4:42:
01:bd:11:a2:db:4b:87:d3:04:34:c8:9b:c5:61:5b:7b:ce:8a:
cd:ef:a5:a9:0a:ac:a0:c0:74:3d:d0:53:56:88:8c:cd:ce:ff:
28:5c:73:49:a7:4e:fc:c7:01:50:97:c1:0d:17:43:12:02:c0:
8e:d0:8a:4d:a3:b3:1d:15:40:e6:16:31:45:0c:35:16:50:39:
aa:fb:65:fc:0a:53:55:63:88:b4:8c:f4:df:62:0b:75:64:79:
5b:0c:f8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:20:15 2024 by rpki-client on console-fra.rpki-client.org