Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WDMpShzcE1ivxDnApyczsGWob4s.cer
File: WDMpShzcE1ivxDnApyczsGWob4s.cer (raw, json)
Hash identifier: FjczMzK0qDVd6Jcn5m7Kc3pG4EdESQwS1FPHjka9WEU=
Subject key identifier: 58:33:29:4A:1C:DC:13:58:AF:C4:39:C0:A7:27:33:B0:65:A8:6F:8B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018EBD8C1D4C48B7AFF214414C39E9B14298
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 08 Apr 2024 11:51:00 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 39561
AS: 43146
AS: 49352
AS: 197695
AS: 201972
AS: 206812
IP: 5.63.152.0/21
IP: 31.31.192.0/20
IP: 37.140.192.0/21
IP: 46.183.160.0/24
IP: 46.183.163.0/24
IP: 46.183.165.0/24
IP: 62.113.91.0 -- 62.113.94.255
IP: 62.213.65.0 -- 62.213.68.255
IP: 62.213.87.0/24
IP: 62.213.92.0/24
IP: 62.213.100.0/24
IP: 62.213.106.0/24
IP: 62.213.108.0/24
IP: 62.213.111.0/24
IP: 62.213.114.0/24
IP: 62.213.122.0/24
IP: 62.213.125.0 -- 62.213.126.255
IP: 80.78.240.0/20
IP: 89.108.64.0/18
IP: 92.242.60.0/23
IP: 95.163.220.0 -- 95.163.247.255
IP: 134.0.112.0/21
IP: 151.248.112.0/20
IP: 176.99.0.0/20
IP: 178.21.8.0/21
IP: 185.10.60.0 -- 185.10.62.255
IP: 185.20.224.0/22
IP: 185.38.16.0/22
IP: 185.46.8.0/22
IP: 185.182.109.0 -- 185.182.111.255
IP: 188.93.208.0/21
IP: 194.58.88.0 -- 194.58.127.255
IP: 194.67.64.0 -- 194.67.68.255
IP: 194.67.71.0 -- 194.67.79.255
IP: 194.67.84.0 -- 194.67.94.255
IP: 194.67.96.0/19
IP: 212.24.32.0/23
IP: 212.24.35.0 -- 212.24.36.255
IP: 212.24.38.0/24
IP: 212.24.41.0/24
IP: 212.24.44.0/24
IP: 212.24.47.0 -- 212.24.48.255
IP: 212.24.55.0 -- 212.24.56.255
IP: 212.24.58.0/24
IP: 212.24.60.0/22
IP: 212.158.160.0/21
IP: 212.158.169.0/24
IP: 212.158.172.0/24
IP: 213.189.193.0 -- 213.189.195.255
IP: 213.189.199.0/24
IP: 213.189.201.0 -- 213.189.205.255
IP: 217.23.128.0/24
IP: 217.23.132.0 -- 217.23.138.255
IP: 217.23.140.0/23
IP: 217.23.143.0 -- 217.23.145.255
IP: 217.23.147.0 -- 217.23.148.255
IP: 217.23.150.0/24
IP: 2a00:1b48::/32
IP: 2a00:f940::/32
IP: 2a02:f20::/32
IP: 2a03:4900::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:bd:8c:1d:4c:48:b7:af:f2:14:41:4c:39:e9:b1:42:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 8 11:51:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5833294a1cdc1358afc439c0a72733b065a86f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:8c:17:da:9d:e3:fa:3b:41:8b:e9:ea:7a:7e:
14:cd:18:2a:f4:da:b1:6f:6e:6d:ea:2f:9c:95:ec:
a5:8b:e6:4b:53:d7:af:0f:01:39:c6:3c:c6:a5:97:
fd:5f:fb:6f:aa:d0:f0:25:aa:16:7a:81:28:ae:91:
01:bf:84:4e:12:ee:7d:76:d2:04:01:e7:75:88:f4:
6e:8e:55:d9:91:63:ff:5d:a9:0f:f1:f1:eb:45:bb:
f4:f2:75:80:08:21:c0:46:6b:bd:d2:c0:36:8c:b9:
02:40:37:68:21:05:9c:09:3c:5c:e5:cb:68:31:2d:
22:74:f4:4c:53:0a:35:56:b3:37:dc:2e:08:01:c3:
dc:6f:dc:1c:01:6d:da:f6:4f:3e:44:4d:88:76:74:
a6:44:44:ff:6b:23:c3:e1:15:7d:1f:bb:93:4f:36:
1b:48:d8:0b:22:29:a8:92:45:8d:f3:e4:01:8f:91:
c3:25:1a:52:32:71:bc:3c:e3:28:9c:59:f2:28:05:
54:bf:08:e0:2e:96:d4:fc:2a:3d:f5:4f:36:e6:9c:
6b:c5:f9:fa:0a:7f:5a:b5:4a:6d:1c:27:a5:64:b6:
e6:63:72:dc:93:30:44:bf:cd:63:4d:48:34:29:46:
b3:ce:9f:5a:4a:f6:76:0a:93:16:f6:ba:12:89:92:
81:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:33:29:4A:1C:DC:13:58:AF:C4:39:C0:A7:27:33:B0:65:A8:6F:8B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.152.0/21
31.31.192.0/20
37.140.192.0/21
46.183.160.0/24
46.183.163.0/24
46.183.165.0/24
62.113.91.0-62.113.94.255
62.213.65.0-62.213.68.255
62.213.87.0/24
62.213.92.0/24
62.213.100.0/24
62.213.106.0/24
62.213.108.0/24
62.213.111.0/24
62.213.114.0/24
62.213.122.0/24
62.213.125.0-62.213.126.255
80.78.240.0/20
89.108.64.0/18
92.242.60.0/23
95.163.220.0-95.163.247.255
134.0.112.0/21
151.248.112.0/20
176.99.0.0/20
178.21.8.0/21
185.10.60.0-185.10.62.255
185.20.224.0/22
185.38.16.0/22
185.46.8.0/22
185.182.109.0-185.182.111.255
188.93.208.0/21
194.58.88.0-194.58.127.255
194.67.64.0-194.67.68.255
194.67.71.0-194.67.79.255
194.67.84.0-194.67.94.255
194.67.96.0/19
212.24.32.0/23
212.24.35.0-212.24.36.255
212.24.38.0/24
212.24.41.0/24
212.24.44.0/24
212.24.47.0-212.24.48.255
212.24.55.0-212.24.56.255
212.24.58.0/24
212.24.60.0/22
212.158.160.0/21
212.158.169.0/24
212.158.172.0/24
213.189.193.0-213.189.195.255
213.189.199.0/24
213.189.201.0-213.189.205.255
217.23.128.0/24
217.23.132.0-217.23.138.255
217.23.140.0/23
217.23.143.0-217.23.145.255
217.23.147.0-217.23.148.255
217.23.150.0/24
IPv6:
2a00:1b48::/32
2a00:f940::/32
2a02:f20::/32
2a03:4900::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39561
43146
49352
197695
201972
206812
Signature Algorithm: sha256WithRSAEncryption
06:de:f3:53:23:e8:7f:52:a4:83:4c:3b:b1:3f:01:56:aa:18:
9d:fc:3a:0e:36:92:7d:a5:df:6d:f6:f4:13:1e:01:ef:a9:6a:
c0:8b:b2:2c:31:b2:76:3f:99:b7:ec:da:02:a9:7a:53:95:fc:
47:87:78:44:5a:93:6d:65:93:fe:de:d4:2d:28:12:f3:55:38:
58:f8:26:2e:ce:89:83:e8:56:19:3f:60:71:ee:80:5f:89:da:
00:5b:ae:5f:ab:c6:b9:5f:0d:20:d7:d9:78:48:8c:9f:9a:35:
52:12:d1:3b:96:fc:1d:91:30:db:a5:4a:2f:5d:98:20:cc:3f:
7a:49:f3:0d:41:09:7a:b4:25:1f:f9:58:e7:5c:ba:49:a0:1e:
81:fa:dc:91:fc:06:48:85:0e:fe:de:f2:f3:17:e3:d1:3d:77:
a5:6a:5d:b3:66:19:e9:2a:f2:df:0b:3c:4d:a6:af:d0:34:d8:
13:e9:bf:eb:33:74:c6:ae:f9:c4:d7:1e:5a:f0:c7:74:07:43:
0a:99:83:ab:73:2d:09:bb:b6:60:36:6f:2e:81:fa:57:e9:71:
b4:63:eb:41:59:43:1c:c2:89:bf:64:7b:38:f9:1d:a2:35:eb:
54:f8:4d:b9:98:15:25:7c:31:7d:82:8c:9a:e8:59:55:6b:f0:
9c:ea:42:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:47:36 2024 by rpki-client on console-ams.rpki-client.org