Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
File: aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer (raw, json)
Hash identifier: O0wEUr+h8CgMuGGHLE+hIEIfWr61R0Td0NFnEcpU0SE=
Subject key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2BB27222633280D72D832CEF987758
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:35:10 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 15694
AS: 24723 -- 24724
AS: 24748
AS: 34342
AS: 41406
AS: 57367
IP: 31.186.80.0/21
IP: 46.229.144.0/20
IP: 77.79.192.0/18
IP: 85.194.240.0/21
IP: 85.232.224.0/19
IP: 91.185.184.0/21
IP: 128.204.216.0/21
IP: 185.2.112.0/22
IP: 185.36.168.0/22
IP: 193.111.36.0 -- 193.111.38.255
IP: 194.9.24.0/23
IP: 194.145.228.0/24
IP: 194.153.134.0/24
IP: 195.167.144.0/20
IP: 195.238.184.0/22
IP: 206.252.224.0/19
IP: 212.91.0.0/19
IP: 213.189.32.0/19
IP: 217.17.32.0/20
IP: 217.149.240.0/20
IP: 2001:7f8:60::/48
IP: 2001:1a68::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:b2:72:22:63:32:80:d7:2d:83:2c:ef:98:77:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:35:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0b:15:49:71:f3:46:76:7b:ed:a0:4a:41:48:
cc:97:00:b5:45:5a:56:d5:7a:09:d3:aa:7c:a0:53:
92:3c:ec:f6:ce:c4:8a:56:71:d3:4d:e0:32:c3:ec:
c1:c6:3e:7e:e1:61:97:f8:c5:29:de:5c:f2:c2:c7:
59:22:bd:5b:d9:55:96:1d:6e:54:18:7d:5f:f6:14:
22:09:6d:71:e0:de:0a:4a:37:59:35:f8:dc:0a:9d:
73:a0:3b:54:07:06:a2:00:eb:6b:12:17:ea:36:bc:
71:a0:bf:4c:86:06:cf:93:a6:cf:76:9d:5d:5a:93:
a1:cb:04:b1:2d:88:dd:49:b3:51:f7:ce:2b:1c:fd:
8b:10:b2:b2:a9:fa:ab:f1:b2:d4:87:4f:b7:2e:f5:
03:ea:0a:9e:74:11:24:ca:a2:fc:09:65:ac:31:17:
12:a7:c2:45:2f:e2:4c:80:b1:9d:ca:f2:c9:56:55:
f1:93:50:d5:ca:22:1b:33:5f:48:20:b6:ff:a8:23:
2b:ad:dd:e0:84:90:5e:65:d8:c5:1b:7a:45:ca:27:
2d:2c:04:77:0f:c6:43:73:e0:13:91:c3:56:3f:4a:
98:55:83:9d:15:10:a4:b5:10:4e:41:cb:a5:d4:4e:
0f:d6:c2:da:3b:0c:13:58:51:e7:57:d2:74:0c:b0:
25:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.186.80.0/21
46.229.144.0/20
77.79.192.0/18
85.194.240.0/21
85.232.224.0/19
91.185.184.0/21
128.204.216.0/21
185.2.112.0/22
185.36.168.0/22
193.111.36.0-193.111.38.255
194.9.24.0/23
194.145.228.0/24
194.153.134.0/24
195.167.144.0/20
195.238.184.0/22
206.252.224.0/19
212.91.0.0/19
213.189.32.0/19
217.17.32.0/20
217.149.240.0/20
IPv6:
2001:7f8:60::/48
2001:1a68::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15694
24723-24724
24748
34342
41406
57367
Signature Algorithm: sha256WithRSAEncryption
40:a2:65:01:01:73:ee:8d:aa:d7:03:6f:f0:d0:8e:ff:1f:fb:
77:39:99:11:91:65:fd:b8:63:c3:64:3a:e8:a0:61:f2:ec:50:
83:53:ac:65:61:80:15:10:dc:0e:42:f7:15:cb:a8:a5:6e:f9:
18:8b:31:2f:2d:c0:df:18:94:aa:17:c8:25:4e:d9:9d:d3:b9:
69:00:af:15:cd:55:9e:89:00:02:17:5c:32:6b:8b:14:3a:3b:
89:6c:9d:0b:9d:4b:ae:a2:99:35:3e:7b:93:c3:cf:a3:d2:bc:
49:ec:e7:ef:77:58:4b:52:4b:a1:4e:55:87:c5:24:d4:30:15:
b3:6d:09:73:32:b5:ba:41:3e:1d:90:f6:4b:a9:cc:c7:62:21:
ed:3a:50:75:89:63:22:ee:75:93:17:b0:46:47:f1:4d:2e:1a:
5b:a1:d6:2e:3f:b5:87:cb:77:1d:21:e5:12:f6:9c:68:d9:e9:
db:7b:45:68:8b:51:01:b4:f6:d2:b4:0d:81:19:62:20:a2:3e:
89:95:a5:7d:58:74:70:27:6e:8e:de:d6:6c:79:f3:e7:fb:ce:
f1:a6:3f:2d:f0:71:d8:52:5f:74:ea:90:74:f0:42:d2:10:2a:
52:a9:60:6a:24:01:56:34:3e:8a:fb:e2:02:00:bd:60:e2:60:
1b:79:cf:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:13:23 2024 by rpki-client on console-ams.rpki-client.org