Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
File: aaTWkWuTFZqoCYSps3dGg7tVDr0.cer (raw, json)
Hash identifier: M/2ulSEQypg8hpTys8ADsQMYcBqQLXv8SaPxEKN7U+E=
Subject key identifier: 69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DA211EBC9788BEC321D5C77A2B875F01E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 13 Feb 2024 10:44:59 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 6903
AS: 30968
AS: 41535
AS: 205952
IP: 46.183.166.0/23
IP: 62.113.80.0/22
IP: 62.113.86.0/24
IP: 62.113.89.0 -- 62.113.90.255
IP: 62.113.95.0/24
IP: 62.113.120.0/21
IP: 62.213.72.0 -- 62.213.81.255
IP: 62.213.86.0/24
IP: 62.213.94.0/23
IP: 62.213.102.0/23
IP: 62.213.112.0/23
IP: 62.213.116.0/24
IP: 77.221.128.0/22
IP: 89.253.192.0/18
IP: 109.120.160.0/20
IP: 185.48.236.0/22
IP: 193.32.198.0/23
IP: 195.2.64.0/23
IP: 195.2.68.0/23
IP: 195.2.72.0/24
IP: 195.2.77.0/24
IP: 195.2.82.0/23
IP: 195.2.87.0 -- 195.2.91.255
IP: 195.2.94.0/23
IP: 212.24.37.0/24
IP: 212.24.39.0 -- 212.24.40.255
IP: 212.24.43.0/24
IP: 212.24.50.0/24
IP: 212.24.57.0/24
IP: 212.158.168.0/24
IP: 212.158.170.0/23
IP: 212.158.174.0/23
IP: 213.189.192.0/24
IP: 213.189.196.0 -- 213.189.198.255
IP: 213.189.200.0/24
IP: 213.189.207.0 -- 213.189.209.255
IP: 213.189.211.0 -- 213.189.214.255
IP: 217.23.129.0/24
IP: 217.23.139.0/24
IP: 217.23.152.0/21
IP: 2a01:9860::/32
IP: 2a02:440::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a2:11:eb:c9:78:8b:ec:32:1d:5c:77:a2:b8:75:f0:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 13 10:44:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69a4d6916b93159aa80984a9b3774683bb550ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:61:29:29:9e:a7:14:b2:d3:6c:3c:ae:e1:bf:
40:77:1e:3a:16:02:dc:6a:c7:64:16:68:ba:0c:4f:
7a:e8:a6:7c:3e:d7:84:13:99:1a:a6:11:d4:f8:da:
5a:17:ee:c9:9b:33:94:27:75:1f:eb:f0:0b:3a:ff:
4c:6b:23:73:e6:c5:53:30:53:d9:7a:d4:7e:7c:73:
39:69:c4:03:a4:3f:02:d4:66:a4:99:bc:6d:e2:83:
55:99:b8:fd:68:35:98:5d:ba:8a:d0:00:2b:f1:9f:
ba:8c:31:3f:19:a7:ce:2a:a7:f8:5f:f3:d1:64:77:
5d:67:c6:f3:ad:ee:8f:87:d1:be:f9:2e:6f:37:7f:
0c:6e:1b:ec:66:2b:f1:f8:6a:f9:53:d3:7e:69:de:
66:e6:27:4b:97:1b:05:38:c6:5d:f6:97:e4:96:1d:
e9:12:94:e0:88:24:4a:90:a0:94:d9:ca:7a:33:96:
31:d4:21:17:92:20:94:62:d9:cd:cd:9a:22:ac:75:
66:9d:9b:fd:98:61:49:4e:35:36:f5:90:4b:cc:e7:
f0:4e:48:c3:f5:f8:6f:5f:2d:0e:53:d2:59:07:d0:
16:fd:0b:f3:dc:ad:4b:39:92:8e:10:6e:7f:d4:a5:
3d:dc:7e:38:b2:cb:01:6e:5a:6a:ee:27:71:60:53:
41:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.166.0/23
62.113.80.0/22
62.113.86.0/24
62.113.89.0-62.113.90.255
62.113.95.0/24
62.113.120.0/21
62.213.72.0-62.213.81.255
62.213.86.0/24
62.213.94.0/23
62.213.102.0/23
62.213.112.0/23
62.213.116.0/24
77.221.128.0/22
89.253.192.0/18
109.120.160.0/20
185.48.236.0/22
193.32.198.0/23
195.2.64.0/23
195.2.68.0/23
195.2.72.0/24
195.2.77.0/24
195.2.82.0/23
195.2.87.0-195.2.91.255
195.2.94.0/23
212.24.37.0/24
212.24.39.0-212.24.40.255
212.24.43.0/24
212.24.50.0/24
212.24.57.0/24
212.158.168.0/24
212.158.170.0/23
212.158.174.0/23
213.189.192.0/24
213.189.196.0-213.189.198.255
213.189.200.0/24
213.189.207.0-213.189.209.255
213.189.211.0-213.189.214.255
217.23.129.0/24
217.23.139.0/24
217.23.152.0/21
IPv6:
2a01:9860::/32
2a02:440::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
6903
30968
41535
205952
Signature Algorithm: sha256WithRSAEncryption
2a:76:9f:44:fd:4e:a3:9e:f1:94:b5:f6:8f:f9:7e:45:3e:fd:
ab:9f:07:d2:ce:89:28:cb:d5:e3:78:72:6f:ab:64:59:8d:ab:
a7:3d:d7:93:3c:fc:77:e8:bb:7f:cd:d9:10:2f:c8:af:79:41:
7b:3e:25:d1:3f:c5:40:09:60:0f:39:ba:3e:ee:9f:25:2c:00:
18:1c:76:7b:16:41:53:a5:88:4d:13:dc:79:f6:9f:84:67:f2:
8a:18:8a:a1:ff:0c:a7:fc:5c:eb:db:00:d2:01:38:0c:a9:20:
19:dd:e6:45:57:88:18:e3:66:b1:d6:81:1a:72:72:4d:eb:06:
0c:18:84:cb:ee:e6:2c:37:53:97:be:8c:84:af:3e:6a:62:1d:
99:52:d1:33:5c:b0:75:2a:aa:ce:27:59:3d:c0:b5:50:ef:fa:
61:3e:9b:9c:e2:dc:c0:04:0e:15:c7:e7:aa:42:11:fc:d5:3c:
94:09:10:7f:f1:10:95:6f:f1:7e:8b:9f:d8:48:51:8d:09:3f:
85:80:68:af:1c:7f:dc:d4:28:f9:b3:d9:6b:c0:dc:a4:d1:b1:
5c:2a:6c:be:f5:ae:e7:46:dd:80:3a:ea:fe:fa:62:63:eb:ae:
a5:a7:ea:12:02:20:95:97:45:40:f7:df:5e:29:a3:40:17:23:
83:9e:be:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:10:38 2024 by rpki-client on console-fra.rpki-client.org