Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
File: _TfMjxazxsvTNGqj7WF3Hz6DrJc.cer (raw, json)
Hash identifier: 9r0x6sjuaaOoPxzoacOUSZdXo+I6MFZMTZESTd0ijUQ=
Subject key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0192F7174664A48E97B2F2110E4619160A34
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 04 Nov 2024 12:12:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 25369
AS: 49999
AS: 52167
AS: 58325
AS: 200039
IP: 5.226.136.0/21
IP: 31.14.102.0/24
IP: 31.14.254.0/24
IP: 37.10.113.0 -- 37.10.114.255
IP: 46.102.155.0/24
IP: 46.247.142.0/23
IP: 64.239.236.0/22
IP: 77.81.102.0/24
IP: 77.81.124.0/22
IP: 77.81.191.0/24
IP: 79.139.84.0/22
IP: 80.240.108.0/23
IP: 81.19.208.0/20
IP: 82.97.192.0/23
IP: 84.247.0.0/24
IP: 84.247.40.0/22
IP: 85.204.70.0/24
IP: 86.104.20.0/22
IP: 86.104.248.0/22
IP: 86.106.89.0/24
IP: 86.106.112.0/24
IP: 86.106.135.0/24
IP: 86.106.157.0 -- 86.106.158.255
IP: 86.107.241.0/24
IP: 89.21.64.0/22
IP: 89.32.127.0/24
IP: 89.34.96.0/22
IP: 89.35.25.0/24
IP: 89.35.28.0/22
IP: 89.37.64.0/22
IP: 89.37.172.0/22
IP: 89.38.68.0/23
IP: 89.40.212.0/24
IP: 89.46.222.0/23
IP: 89.46.248.0/22
IP: 93.113.175.0/24
IP: 93.114.83.0/24
IP: 93.114.129.0/24
IP: 93.118.40.0/22
IP: 94.177.17.0/24
IP: 109.69.104.0/21
IP: 109.70.144.0/21
IP: 109.230.203.0/24
IP: 109.230.209.0/24
IP: 109.230.215.0/24
IP: 109.230.218.0/24
IP: 109.230.220.0/24
IP: 128.127.148.0/22
IP: 134.255.243.0/24
IP: 176.223.172.0/22
IP: 178.239.160.0/20
IP: 185.3.236.0/22
IP: 185.16.204.0/22
IP: 185.38.148.0/22
IP: 185.44.76.0/22
IP: 185.61.156.0/22
IP: 185.114.224.0/24
IP: 185.121.136.0/22
IP: 185.125.204.0/22
IP: 185.134.20.0/22
IP: 185.137.36.0/22
IP: 185.158.240.0/22
IP: 185.200.204.0/22
IP: 185.216.144.0/22
IP: 185.223.232.0/22
IP: 188.212.154.0/24
IP: 188.240.56.0/21
IP: 188.240.71.0/24
IP: 188.241.120.0/24
IP: 188.241.144.0/24
IP: 188.241.156.0/23
IP: 188.241.246.0/24
IP: 193.32.208.0/22
IP: 193.124.20.0/23
IP: 193.176.28.0/22
IP: 194.50.234.0/23
IP: 194.50.250.0/23
IP: 194.88.96.0/21
IP: 195.20.108.0/23
IP: 195.140.212.0/22
IP: 195.206.165.0 -- 195.206.167.255
IP: 195.206.169.0 -- 195.206.171.255
IP: 195.206.180.0/22
IP: 195.234.124.0/23
IP: 195.234.127.0/24
IP: 212.237.224.0/22
IP: 213.166.84.0/22
IP: 217.146.80.0/20
IP: 2a00:1a30::/32
IP: 2a01:4020::/32
IP: 2a0b:b840::/29
IP: 2a0d:7440::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f7:17:46:64:a4:8e:97:b2:f2:11:0e:46:19:16:0a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 4 12:12:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:16:6d:97:9b:a4:24:de:4c:7b:53:5e:79:45:
0c:39:25:d0:06:16:e0:16:c2:73:ff:0c:3d:46:c5:
0c:f3:4e:b2:b0:83:27:62:5a:1c:e7:ee:04:36:dc:
c5:4b:32:ba:c1:f0:3d:0b:9a:45:69:32:fd:57:c4:
3f:9a:27:7b:10:ab:18:02:75:31:58:35:68:ce:e1:
9f:c5:2c:d2:f9:ff:eb:ed:66:b5:39:ea:3f:33:67:
cb:b7:cc:a1:88:bc:90:b0:5b:95:15:72:ae:b1:4a:
8a:3c:f3:93:46:0b:23:02:ef:55:93:48:69:98:77:
97:2e:7f:ac:eb:4b:ca:8b:c4:0e:15:fd:79:2d:9c:
9a:fc:52:3b:ec:3d:f5:d1:19:70:c8:50:bf:10:ca:
17:9c:c6:c6:98:0b:0b:26:75:92:b7:34:e9:2b:c9:
2c:40:0f:11:e1:aa:26:dc:da:59:f0:a3:c9:87:76:
17:a3:05:23:d0:50:eb:3e:ca:18:af:31:2a:f6:0d:
23:7d:81:88:3f:5e:fc:6d:5a:ce:70:f3:06:e6:ca:
73:d3:6e:74:b7:25:94:e9:95:13:78:f4:72:e3:19:
d9:af:7a:b2:8a:8a:77:2d:c5:e5:58:8a:2f:c6:71:
79:b9:5c:f3:55:67:97:ed:9b:75:7b:b5:92:66:a5:
af:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.136.0/21
31.14.102.0/24
31.14.254.0/24
37.10.113.0-37.10.114.255
46.102.155.0/24
46.247.142.0/23
64.239.236.0/22
77.81.102.0/24
77.81.124.0/22
77.81.191.0/24
79.139.84.0/22
80.240.108.0/23
81.19.208.0/20
82.97.192.0/23
84.247.0.0/24
84.247.40.0/22
85.204.70.0/24
86.104.20.0/22
86.104.248.0/22
86.106.89.0/24
86.106.112.0/24
86.106.135.0/24
86.106.157.0-86.106.158.255
86.107.241.0/24
89.21.64.0/22
89.32.127.0/24
89.34.96.0/22
89.35.25.0/24
89.35.28.0/22
89.37.64.0/22
89.37.172.0/22
89.38.68.0/23
89.40.212.0/24
89.46.222.0/23
89.46.248.0/22
93.113.175.0/24
93.114.83.0/24
93.114.129.0/24
93.118.40.0/22
94.177.17.0/24
109.69.104.0/21
109.70.144.0/21
109.230.203.0/24
109.230.209.0/24
109.230.215.0/24
109.230.218.0/24
109.230.220.0/24
128.127.148.0/22
134.255.243.0/24
176.223.172.0/22
178.239.160.0/20
185.3.236.0/22
185.16.204.0/22
185.38.148.0/22
185.44.76.0/22
185.61.156.0/22
185.114.224.0/24
185.121.136.0/22
185.125.204.0/22
185.134.20.0/22
185.137.36.0/22
185.158.240.0/22
185.200.204.0/22
185.216.144.0/22
185.223.232.0/22
188.212.154.0/24
188.240.56.0/21
188.240.71.0/24
188.241.120.0/24
188.241.144.0/24
188.241.156.0/23
188.241.246.0/24
193.32.208.0/22
193.124.20.0/23
193.176.28.0/22
194.50.234.0/23
194.50.250.0/23
194.88.96.0/21
195.20.108.0/23
195.140.212.0/22
195.206.165.0-195.206.167.255
195.206.169.0-195.206.171.255
195.206.180.0/22
195.234.124.0/23
195.234.127.0/24
212.237.224.0/22
213.166.84.0/22
217.146.80.0/20
IPv6:
2a00:1a30::/32
2a01:4020::/32
2a0b:b840::/29
2a0d:7440::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25369
49999
52167
58325
200039
Signature Algorithm: sha256WithRSAEncryption
1c:83:04:30:89:73:6d:d6:99:03:26:3b:f0:83:54:8f:ee:ae:
f8:33:67:16:c1:38:62:e7:57:f7:bc:7d:6a:5f:62:73:9e:f6:
93:20:5b:cc:fb:c3:f6:e7:85:9b:f8:85:79:61:e6:02:8d:da:
eb:91:70:5f:22:12:cf:f8:d0:c5:f3:94:fb:fb:30:e1:8a:b6:
7f:75:b3:39:fe:3e:04:a1:38:b4:89:e4:72:d7:3e:88:94:da:
24:1a:60:30:dd:bb:ef:9c:1f:3b:92:85:7c:00:a8:db:82:a9:
e4:74:86:08:a5:0d:2c:7b:04:58:e1:57:2a:07:91:6d:ec:23:
ef:ec:89:02:38:fc:b5:b0:b3:1d:ce:b1:75:07:4d:6d:fa:6e:
fc:bb:e4:a9:61:b5:01:1c:ba:6c:29:c8:ad:a9:15:4e:ca:37:
2b:02:c4:c8:b0:da:47:7f:6e:d0:2b:31:1a:c3:51:48:1a:d2:
68:62:40:34:a1:e2:ed:00:68:f0:09:5a:d2:47:9d:ee:2a:a1:
41:af:78:16:ed:fe:d8:b6:14:e8:a0:00:78:02:1d:2f:b0:16:
28:be:9f:ae:7b:0a:90:d5:34:6c:60:49:e3:b2:16:24:01:6c:
5f:36:5f:7e:a8:00:69:58:2f:61:84:60:b7:ff:8b:f4:fe:b8:
46:45:61:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:53:35 2024 by rpki-client on console-fra.rpki-client.org