Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
File: m2t7PqYO-0pXmk9eI36nqI07wHg.cer (raw, json)
Hash identifier: AyW6VWDr1U5gAQH21iRDSjzdiJoaP5aqxPhZYwEruco=
Subject key identifier: 9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B9300513622C51075C61294FD223E6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:31:14 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 13110
AS: 33868 -- 33869
AS: 44514
AS: 52185
IP: 46.228.80.0/20
IP: 46.228.224.0/20
IP: 46.238.64.0/18
IP: 62.21.0.0/17
IP: 77.65.0.0/17
IP: 80.87.32.0/20
IP: 85.221.128.0/17
IP: 88.151.136.0/21
IP: 91.192.248.0/22
IP: 91.207.186.0/23
IP: 94.127.104.0/21
IP: 109.173.128.0/17
IP: 151.249.80.0/21
IP: 185.6.0.0/22
IP: 185.14.72.0/22
IP: 185.44.172.0/22
IP: 193.23.54.0/24
IP: 193.169.208.0/24
IP: 194.24.164.0/23
IP: 194.114.148.0/22
IP: 194.116.138.0/23
IP: 194.150.206.0/23
IP: 195.160.180.0/23
IP: 212.67.128.0/19
IP: 217.113.128.0/20
IP: 217.170.160.0/20
IP: 2001:4020::/32
IP: 2a02:78::/32
IP: 2a02:848::/32
IP: 2a12:2b40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:30:05:13:62:2c:51:07:5c:61:29:4f:d2:23:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:0d:e8:a2:74:fb:0b:e2:30:9d:63:d7:72:9f:
f4:63:2f:ee:66:99:c0:f0:79:dc:f7:3c:9c:b5:90:
f2:a8:c4:d4:e5:bd:8e:5f:20:f3:df:9f:1c:d4:30:
b7:4a:ae:b5:cb:5d:3b:9a:ea:ee:ba:8c:07:42:71:
13:0a:c9:68:14:37:ec:5b:c6:62:17:04:5c:36:92:
e1:21:b1:c1:7b:56:a7:af:49:43:e6:12:fa:e5:e1:
22:da:af:c0:cc:be:9c:11:5c:d7:d0:e9:26:5a:83:
42:57:e6:6d:8a:fd:2f:61:9f:6c:40:02:88:d4:f6:
00:ed:ef:be:81:a9:89:d8:5b:a6:6c:b7:02:db:12:
3a:89:83:f2:01:e3:b5:fc:5a:c3:76:14:a4:cb:a9:
73:b8:de:51:16:f3:4d:eb:eb:ce:a9:3c:30:32:cd:
f9:c4:6b:09:8b:8c:da:7f:f7:6d:e5:50:6b:12:ed:
30:07:ae:fd:45:ce:5a:99:da:9f:d8:8c:98:8b:17:
68:f7:89:ff:1e:9a:19:5f:9f:06:f5:e3:23:0b:a0:
d8:fd:36:a6:62:5e:f3:7c:ef:de:8d:72:40:85:7d:
09:19:75:fc:8a:bd:13:9c:aa:7e:14:20:03:a1:6a:
3d:9b:95:ef:cc:10:e1:43:18:a2:0a:1d:bc:48:e4:
03:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.228.80.0/20
46.228.224.0/20
46.238.64.0/18
62.21.0.0/17
77.65.0.0/17
80.87.32.0/20
85.221.128.0/17
88.151.136.0/21
91.192.248.0/22
91.207.186.0/23
94.127.104.0/21
109.173.128.0/17
151.249.80.0/21
185.6.0.0/22
185.14.72.0/22
185.44.172.0/22
193.23.54.0/24
193.169.208.0/24
194.24.164.0/23
194.114.148.0/22
194.116.138.0/23
194.150.206.0/23
195.160.180.0/23
212.67.128.0/19
217.113.128.0/20
217.170.160.0/20
IPv6:
2001:4020::/32
2a02:78::/32
2a02:848::/32
2a12:2b40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13110
33868-33869
44514
52185
Signature Algorithm: sha256WithRSAEncryption
2b:d5:f1:b2:97:e0:6b:35:cc:48:3c:30:12:69:e1:e2:84:ff:
a1:9b:5c:d0:40:22:7a:23:5e:c2:1a:0b:cb:75:62:ea:1e:60:
47:56:e3:c1:52:1a:63:91:1b:c0:93:a8:7c:38:ed:64:39:cb:
bb:44:6d:f2:69:d7:34:a1:69:cc:70:05:5b:a9:3f:98:4a:f6:
bb:52:b5:34:a7:99:4c:75:36:80:26:f0:fc:48:81:0f:d3:c6:
cd:5b:a2:82:7c:48:b5:b4:ac:90:6f:df:fb:64:e4:de:48:89:
9e:0f:16:d0:37:24:34:9f:fd:a3:df:7f:59:7c:10:21:b3:02:
aa:2f:c3:99:84:22:e3:03:e1:03:99:99:f1:79:c0:8c:84:21:
85:1e:d5:ac:0a:e0:55:92:3e:ed:c8:c2:03:0d:03:03:bb:8b:
9f:bc:25:0b:db:37:fe:4f:46:8d:5d:d1:4a:2d:96:22:0c:0e:
08:86:f2:93:63:b3:f2:e6:0d:b0:04:0e:86:09:1a:dc:9c:17:
02:4b:81:ee:a9:9e:eb:fc:a9:45:3d:c8:0b:4b:9f:0d:59:f2:
a0:30:ac:45:be:32:27:55:3e:88:71:1e:af:6a:e7:d8:4a:c5:
ed:06:27:af:b1:ba:99:e6:d5:bd:f5:5b:b2:a8:86:ee:9f:1c:
ea:dd:a1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:28:16 2024 by rpki-client on console-ams.rpki-client.org