Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
File: _TfMjxazxsvTNGqj7WF3Hz6DrJc.cer (raw, json)
Hash identifier: glYDm0EeqYriUYoa8I7xzRjksCISOd+0Ges/HfbH13k=
Subject key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F335D30DC70B700390F69FA9787857AE0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 May 2024 08:54:56 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 25369
AS: 49999
AS: 52167
AS: 58325
AS: 200039
IP: 5.226.136.0/21
IP: 31.14.102.0/24
IP: 31.14.254.0/24
IP: 37.10.113.0 -- 37.10.114.255
IP: 46.102.155.0/24
IP: 46.247.142.0/23
IP: 64.239.236.0/22
IP: 77.81.102.0/24
IP: 77.81.124.0/22
IP: 77.81.191.0/24
IP: 79.139.84.0/22
IP: 80.240.108.0/23
IP: 81.19.208.0/20
IP: 82.97.192.0/23
IP: 84.247.0.0/24
IP: 84.247.40.0/22
IP: 85.204.70.0/24
IP: 86.104.20.0/22
IP: 86.104.248.0/22
IP: 86.106.89.0/24
IP: 86.106.112.0/24
IP: 86.106.135.0/24
IP: 86.106.157.0 -- 86.106.158.255
IP: 86.107.241.0/24
IP: 89.21.64.0/22
IP: 89.32.127.0/24
IP: 89.34.96.0/22
IP: 89.35.25.0/24
IP: 89.35.28.0/22
IP: 89.37.64.0/22
IP: 89.37.172.0/22
IP: 89.38.68.0/23
IP: 89.40.212.0/24
IP: 89.46.222.0/23
IP: 89.46.248.0/22
IP: 93.113.175.0/24
IP: 93.114.83.0/24
IP: 93.114.129.0/24
IP: 93.118.40.0/22
IP: 94.177.17.0/24
IP: 109.69.104.0/21
IP: 109.70.144.0/21
IP: 109.230.203.0/24
IP: 109.230.209.0/24
IP: 109.230.215.0/24
IP: 109.230.218.0/24
IP: 109.230.220.0/24
IP: 128.127.148.0/22
IP: 134.255.243.0/24
IP: 176.223.172.0/22
IP: 178.239.160.0/20
IP: 185.3.236.0/22
IP: 185.16.204.0/22
IP: 185.38.148.0/22
IP: 185.44.76.0/22
IP: 185.61.156.0/22
IP: 185.114.224.0/24
IP: 185.121.136.0/22
IP: 185.125.204.0/22
IP: 185.134.20.0/22
IP: 185.137.36.0/22
IP: 185.158.240.0/22
IP: 185.200.204.0/22
IP: 185.216.144.0/22
IP: 185.223.232.0/22
IP: 188.212.154.0/24
IP: 188.240.56.0/21
IP: 188.240.71.0/24
IP: 188.241.120.0/24
IP: 188.241.144.0/24
IP: 188.241.156.0/23
IP: 188.241.246.0/24
IP: 193.32.208.0/22
IP: 193.176.28.0/22
IP: 194.50.234.0/23
IP: 194.50.250.0/23
IP: 195.20.108.0/23
IP: 195.140.212.0/22
IP: 195.206.165.0 -- 195.206.167.255
IP: 195.206.169.0 -- 195.206.171.255
IP: 195.206.180.0/22
IP: 195.234.124.0/23
IP: 195.234.127.0/24
IP: 212.237.224.0/22
IP: 213.166.84.0/22
IP: 217.146.80.0/20
IP: 2a00:1a30::/32
IP: 2a01:4020::/32
IP: 2a0b:b840::/29
IP: 2a0d:7440::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:33:5d:30:dc:70:b7:00:39:0f:69:fa:97:87:85:7a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 1 08:54:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:16:6d:97:9b:a4:24:de:4c:7b:53:5e:79:45:
0c:39:25:d0:06:16:e0:16:c2:73:ff:0c:3d:46:c5:
0c:f3:4e:b2:b0:83:27:62:5a:1c:e7:ee:04:36:dc:
c5:4b:32:ba:c1:f0:3d:0b:9a:45:69:32:fd:57:c4:
3f:9a:27:7b:10:ab:18:02:75:31:58:35:68:ce:e1:
9f:c5:2c:d2:f9:ff:eb:ed:66:b5:39:ea:3f:33:67:
cb:b7:cc:a1:88:bc:90:b0:5b:95:15:72:ae:b1:4a:
8a:3c:f3:93:46:0b:23:02:ef:55:93:48:69:98:77:
97:2e:7f:ac:eb:4b:ca:8b:c4:0e:15:fd:79:2d:9c:
9a:fc:52:3b:ec:3d:f5:d1:19:70:c8:50:bf:10:ca:
17:9c:c6:c6:98:0b:0b:26:75:92:b7:34:e9:2b:c9:
2c:40:0f:11:e1:aa:26:dc:da:59:f0:a3:c9:87:76:
17:a3:05:23:d0:50:eb:3e:ca:18:af:31:2a:f6:0d:
23:7d:81:88:3f:5e:fc:6d:5a:ce:70:f3:06:e6:ca:
73:d3:6e:74:b7:25:94:e9:95:13:78:f4:72:e3:19:
d9:af:7a:b2:8a:8a:77:2d:c5:e5:58:8a:2f:c6:71:
79:b9:5c:f3:55:67:97:ed:9b:75:7b:b5:92:66:a5:
af:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.136.0/21
31.14.102.0/24
31.14.254.0/24
37.10.113.0-37.10.114.255
46.102.155.0/24
46.247.142.0/23
64.239.236.0/22
77.81.102.0/24
77.81.124.0/22
77.81.191.0/24
79.139.84.0/22
80.240.108.0/23
81.19.208.0/20
82.97.192.0/23
84.247.0.0/24
84.247.40.0/22
85.204.70.0/24
86.104.20.0/22
86.104.248.0/22
86.106.89.0/24
86.106.112.0/24
86.106.135.0/24
86.106.157.0-86.106.158.255
86.107.241.0/24
89.21.64.0/22
89.32.127.0/24
89.34.96.0/22
89.35.25.0/24
89.35.28.0/22
89.37.64.0/22
89.37.172.0/22
89.38.68.0/23
89.40.212.0/24
89.46.222.0/23
89.46.248.0/22
93.113.175.0/24
93.114.83.0/24
93.114.129.0/24
93.118.40.0/22
94.177.17.0/24
109.69.104.0/21
109.70.144.0/21
109.230.203.0/24
109.230.209.0/24
109.230.215.0/24
109.230.218.0/24
109.230.220.0/24
128.127.148.0/22
134.255.243.0/24
176.223.172.0/22
178.239.160.0/20
185.3.236.0/22
185.16.204.0/22
185.38.148.0/22
185.44.76.0/22
185.61.156.0/22
185.114.224.0/24
185.121.136.0/22
185.125.204.0/22
185.134.20.0/22
185.137.36.0/22
185.158.240.0/22
185.200.204.0/22
185.216.144.0/22
185.223.232.0/22
188.212.154.0/24
188.240.56.0/21
188.240.71.0/24
188.241.120.0/24
188.241.144.0/24
188.241.156.0/23
188.241.246.0/24
193.32.208.0/22
193.176.28.0/22
194.50.234.0/23
194.50.250.0/23
195.20.108.0/23
195.140.212.0/22
195.206.165.0-195.206.167.255
195.206.169.0-195.206.171.255
195.206.180.0/22
195.234.124.0/23
195.234.127.0/24
212.237.224.0/22
213.166.84.0/22
217.146.80.0/20
IPv6:
2a00:1a30::/32
2a01:4020::/32
2a0b:b840::/29
2a0d:7440::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25369
49999
52167
58325
200039
Signature Algorithm: sha256WithRSAEncryption
13:ca:01:25:e6:af:8b:26:c8:a8:3a:7d:c2:94:43:1e:96:6f:
1f:c2:c9:4f:38:0f:5d:c5:d3:9c:b0:05:33:13:b2:72:3c:68:
0f:35:59:c3:fa:55:5e:6c:47:80:d4:8d:51:0a:9c:06:06:03:
56:d1:9e:b4:6a:f2:ea:2e:b9:44:84:2d:e5:f3:ed:21:f9:7e:
f6:b4:50:80:b7:3f:6c:f8:b5:f0:ab:5c:05:9c:64:cf:99:dc:
c4:95:b1:f2:6a:8d:91:11:a8:5a:a7:95:70:df:81:95:c9:80:
f3:9a:1e:cb:97:a5:d1:0d:16:ca:07:16:9f:66:28:85:1a:af:
27:86:f8:bf:13:9f:cb:4f:14:d3:7c:d4:c3:77:f6:4c:64:99:
5b:f4:5d:4e:44:16:95:1a:96:04:a4:c0:a3:4b:a7:51:68:fc:
80:86:be:ee:6e:7c:5e:59:c9:fb:55:ae:b3:b5:8c:88:28:3f:
03:21:89:16:85:95:ec:62:c7:5a:9f:68:b9:ca:c8:71:d0:e4:
78:a3:41:0b:9b:3d:ea:b9:73:8d:b8:5d:7a:18:7a:9f:ba:dd:
c1:8b:16:53:4f:c6:c7:07:77:fb:34:80:d8:57:18:2e:0c:59:
cc:83:59:b6:45:15:a3:fd:61:07:5a:dc:20:78:bf:8e:e1:31:
0c:1f:42:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:50:07 2024 by rpki-client on console-ams.rpki-client.org