Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer
File: h4_WMe8uxzeUN_18dvjiRf8IJLs.cer (raw, json)
Hash identifier: s8jAng9/YpVPFGKen+rq67k8tP2KXchOwU3Q8U/6oew=
Subject key identifier: 87:8F:D6:31:EF:2E:C7:37:94:37:FD:7C:76:F8:E2:45:FF:08:24:BB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B926D24AD0873CDD71DE9742D8A701
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:31:12 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 8732
AS: 9068
AS: 15582
IP: 31.13.32.0/19
IP: 46.39.32.0/19
IP: 62.117.64.0/18
IP: 77.108.64.0/18
IP: 77.220.128.0/19
IP: 77.232.0.0/19
IP: 80.92.96.0/20
IP: 80.240.208.0/20
IP: 81.88.112.0/20
IP: 82.138.0.0/18
IP: 83.167.96.0/19
IP: 87.245.128.0/18
IP: 89.19.160.0/19
IP: 89.31.88.0/21
IP: 91.103.200.0/21
IP: 92.243.160.0/19
IP: 94.79.0.0/18
IP: 178.208.128.0/19
IP: 185.110.168.0/22
IP: 188.123.224.0/19
IP: 212.45.0.0/19
IP: 212.100.128.0/19
IP: 213.79.64.0/18
IP: 213.171.32.0/19
IP: 217.10.32.0/20
IP: 2a02:290::/32
IP: 2a02:7800::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:26:d2:4a:d0:87:3c:dd:71:de:97:42:d8:a7:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:31:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=878fd631ef2ec7379437fd7c76f8e245ff0824bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b9:e9:5e:9a:a1:46:aa:e6:7f:1c:1b:69:45:
5e:b2:4b:bd:a0:3f:aa:ac:1f:15:3f:d2:e1:fd:2f:
9c:0b:83:dc:72:d9:1f:93:ea:7b:3b:31:2d:20:a6:
6d:b2:b3:b6:98:8b:21:5d:80:61:9f:26:23:72:9d:
22:95:7b:0b:1b:a2:de:62:f9:6d:41:12:8c:6d:80:
39:46:f4:6a:3e:e7:64:10:77:61:44:66:69:c2:cc:
7b:7a:35:31:9d:8a:2c:f6:32:5a:21:f2:05:ad:cb:
47:e8:9c:1f:97:4d:eb:ee:99:c5:b7:a9:17:74:ca:
95:e1:c9:31:9d:92:33:58:70:e0:33:d8:b9:3b:53:
9e:97:9c:36:a2:8e:85:cd:59:03:bd:f8:6c:b6:41:
5c:d5:d3:23:17:26:2e:6e:31:9a:87:46:98:d3:cc:
90:01:ae:15:f7:0b:65:92:b7:80:4f:49:ce:82:c0:
92:f6:14:2a:c5:8f:2c:a0:02:52:68:cf:07:ad:96:
e0:72:64:42:09:d7:a9:86:b6:f2:bd:ed:7d:cd:df:
ea:a1:92:de:74:cf:2f:54:f0:e1:0d:1a:31:79:fa:
e0:7b:63:2b:f4:0b:c5:b0:af:5c:ec:20:1f:fb:80:
e7:5d:2b:d9:bd:18:65:c2:ad:7c:f6:73:5d:7b:a0:
14:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8F:D6:31:EF:2E:C7:37:94:37:FD:7C:76:F8:E2:45:FF:08:24:BB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.32.0/19
46.39.32.0/19
62.117.64.0/18
77.108.64.0/18
77.220.128.0/19
77.232.0.0/19
80.92.96.0/20
80.240.208.0/20
81.88.112.0/20
82.138.0.0/18
83.167.96.0/19
87.245.128.0/18
89.19.160.0/19
89.31.88.0/21
91.103.200.0/21
92.243.160.0/19
94.79.0.0/18
178.208.128.0/19
185.110.168.0/22
188.123.224.0/19
212.45.0.0/19
212.100.128.0/19
213.79.64.0/18
213.171.32.0/19
217.10.32.0/20
IPv6:
2a02:290::/32
2a02:7800::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8732
9068
15582
Signature Algorithm: sha256WithRSAEncryption
23:ba:0a:7f:63:f3:f4:59:48:21:69:fb:00:d0:b0:b9:7c:3e:
68:1a:1a:3d:1c:ed:08:37:be:0a:33:cc:86:14:86:8a:36:08:
94:65:0d:ee:66:dd:10:23:cb:0a:b3:e9:76:f4:c9:32:f9:8e:
12:ff:04:ec:07:9e:99:6b:f9:69:b3:86:c1:d3:d7:e7:6f:4f:
1b:03:8d:fc:f5:d5:8a:0f:14:6d:45:a8:eb:2a:ae:2d:96:d9:
cc:b7:fb:35:e7:34:3c:11:31:84:c5:0d:01:65:05:8b:3e:ef:
b5:a4:47:73:b6:94:93:7f:45:71:fc:a2:22:dc:96:80:f5:7d:
52:8a:5f:93:71:a5:17:f8:27:71:ae:d7:12:71:8e:ac:10:89:
e4:e5:33:7d:08:78:12:2d:30:96:70:70:98:ac:a5:f7:c5:a7:
a2:01:09:50:af:b9:28:cb:af:a5:d9:a9:2a:43:58:34:0c:df:
f6:66:c0:31:57:1b:2a:1e:79:8b:37:a3:9a:87:c2:cf:4f:fd:
85:62:bd:e3:12:b9:0e:0b:85:e9:16:5f:f8:c6:08:8e:93:ee:
5b:fd:41:54:18:29:4f:50:67:27:fa:f5:c6:62:b0:e5:96:b9:
26:e8:f5:58:e0:5c:9a:8e:f9:50:e1:fd:d9:cb:44:8b:fd:34:
b3:e5:45:05
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgISAYzGuSbSStCHPN1x3pdC2KcBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMjAzMTEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NzhmZDYzMWVmMmVjNzM3OTQzN2ZkN2M3NmY4ZTI0NWZmMDgyNGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bnpXpqhRqrmfxwbaUVesku9oD+q
rB8VP9Lh/S+cC4Pcctkfk+p7OzEtIKZtsrO2mIshXYBhnyYjcp0ilXsLG6LeYvlt
QRKMbYA5RvRqPudkEHdhRGZpwsx7ejUxnYos9jJaIfIFrctH6Jwfl03r7pnFt6kX
dMqV4ckxnZIzWHDgM9i5O1Oel5w2oo6FzVkDvfhstkFc1dMjFyYubjGah0aY08yQ
Aa4V9wtlkreAT0nOgsCS9hQqxY8soAJSaM8HrZbgcmRCCdephrbyve19zd/qoZLe
dM8vVPDhDRoxefrge2Mr9AvFsK9c7CAf+4DnXSvZvRhlwq189nNde6AUQQIDAQAB
o4IDUjCCA04wHQYDVR0OBBYEFIeP1jHvLsc3lDf9fHb44kX/CCS7MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QxL2FhM2Rj
Yi1kYTY0LTQ5YzgtOThlZC1iYTZjYjQyNTJmZDcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDEvYWEzZGNi
LWRhNjQtNDljOC05OGVkLWJhNmNiNDI1MmZkNy8xL2g0X1dNZTh1eHplVU5fMThk
dmppUmY4SUpMcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHJBggrBgEF
BQcBBwEB/wSBuTCBtjCBnQQCAAEwgZYDBAUfDSADBAUuJyADBAY+dUADBAZNbEAD
BAVN3IADBAVN6AADBARQXGADBARQ8NADBARRWHADBAZSigADBAVTp2ADBAZX9YAD
BAVZE6ADBANZH1gDBANbZ8gDBAVc86ADBAZeTwADBAWy0IADBAK5bqgDBAW8e+AD
BAXULQADBAXUZIADBAbVT0ADBAXVqyADBATZCiAwFAQCAAIwDgMFACoCApADBQAq
AngAMCEGCCsGAQUFBwEIAQH/BBIwEKAOMAwCAiIcAgIjbAICPN4wDQYJKoZIhvcN
AQELBQADggEBACO6Cn9j8/RZSCFp+wDQsLl8PmgaGj0c7Qg3vgozzIYUhoo2CJRl
De5m3RAjywqz6Xb0yTL5jhL/BOwHnplr+WmzhsHT1+dvTxsDjfz11YoPFG1FqOsq
ri2W2cy3+zXnNDwRMYTFDQFlBYs+77WkR3O2lJN/RXH8oiLcloD1fVKKX5NxpRf4
J3Gu1xJxjqwQieTlM30IeBItMJZwcJispffFp6IBCVCvuSjLr6XZqSpDWDQM3/Zm
wDFXGyoeeYs3o5qHws9P/YViveMSuQ4LhekWX/jGCI6T7lv9QVQYKU9QZyf69cZi
sOWWuSbo9VjgXJqO+VDh/dnLRIv9NLPlRQU=
-----END CERTIFICATE-----
Generated at Fri May 3 09:32:21 2024 by rpki-client on console-ams.rpki-client.org