Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
File: 1LDBHmZmz8G38baZTg9Dcymt7AQ.cer (raw, json)
Hash identifier: zsDvbfRZDMizM8qGRvY+/wYuxPBCB1KUkX3nk6sBLjM=
Subject key identifier: D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB0A06F4862E4064E4B45C5BB86564
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:44 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 176.124.254.0/23
IP: 2001:678:dc::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 07:52:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:0a:06:f4:86:2e:40:64:e4:b4:5c:5b:b8:65:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4b0c11e6666cfc1b7f1b6994e0f437329adec04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:0b:5f:15:3e:87:99:40:0c:a6:49:e7:e5:ec:
81:26:62:4d:48:c9:13:8c:d3:14:a0:d0:ff:57:1d:
38:e4:b0:02:e0:c4:2c:b3:3a:dd:6d:d7:8e:f3:19:
95:02:a5:45:eb:01:63:93:52:75:64:01:36:cd:a6:
b3:df:4a:80:79:4a:ef:5a:13:4b:a4:94:92:9c:3d:
73:4a:7e:f0:47:e6:87:e2:27:67:b1:d3:68:10:16:
47:44:2e:03:8f:52:49:b5:79:68:e9:0e:8a:f2:d7:
3f:13:e4:55:ba:9b:1f:05:a9:c0:f7:a9:e7:7f:09:
2b:74:b0:b2:15:be:30:8f:6e:92:34:56:54:15:04:
b1:a0:25:ea:03:31:4f:43:ed:5c:57:fb:a4:5e:2f:
b4:32:96:db:4c:05:37:81:28:a4:a8:09:17:44:26:
ad:20:be:f2:79:fd:87:82:7b:8e:00:e7:cd:ea:56:
4f:d0:a1:b1:79:92:5a:e1:db:2f:a6:bb:6a:27:44:
b3:e6:be:21:4b:a4:d2:19:fb:99:a0:b1:35:7d:23:
30:f0:13:af:3b:44:61:e3:6a:d0:ec:3f:90:31:39:
90:62:81:77:c3:d1:a7:10:ee:c5:cd:43:b3:b2:bd:
89:fd:e3:fd:85:49:36:73:26:7a:42:17:0e:ba:70:
e3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.254.0/23
IPv6:
2001:678:dc::/48
Signature Algorithm: sha256WithRSAEncryption
06:7f:ca:e7:51:46:5c:ff:bc:4b:b5:80:4d:71:32:1b:fd:ac:
85:79:44:c4:7f:f8:ae:c1:6b:54:b8:3b:84:51:fd:02:13:51:
32:45:dc:a9:f9:04:03:00:2f:a7:ec:71:55:5b:70:f6:f1:85:
66:a8:be:77:76:e5:ab:83:e4:c6:40:e6:06:e0:4e:0b:53:bb:
49:6d:a2:c7:c4:55:20:fd:9d:d2:d9:9c:7f:a9:85:69:f2:d7:
d7:42:5a:94:82:be:1e:6f:ca:57:0c:e0:17:6f:79:d9:44:69:
26:3f:3a:7e:fe:ea:d3:e3:ae:99:c1:12:f9:46:2b:ea:1f:56:
5e:63:86:c0:a2:f9:a6:4c:25:ce:0a:cc:f0:65:7f:fb:80:87:
9e:65:dd:87:a1:9e:78:3b:cd:0d:fd:d6:38:bb:d9:da:0c:8e:
89:2b:32:fc:f6:10:fa:3e:db:74:84:c7:80:ca:8c:5a:fb:a2:
83:c1:c2:33:10:48:5d:5d:c7:53:8f:6d:3f:9d:af:71:7e:5b:
e4:87:25:05:ee:36:f9:f3:23:0f:a2:08:ec:f7:23:4a:5c:7d:
4c:10:2e:cf:34:1d:2a:97:52:60:09:c5:8c:61:db:5c:b0:a2:
e6:d1:ec:2d:3e:49:d9:63:93:f6:42:42:f6:d2:21:d5:78:2b:
bd:97:09:71
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgISAYzC2woG9IYuQGTktFxbuGVkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDIyOTQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNGIwYzExZTY2NjZjZmMxYjdmMWI2OTk0ZTBmNDM3MzI5YWRlYzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8QtfFT6HmUAMpknn5eyBJmJNSMkT
jNMUoND/Vx045LAC4MQsszrdbdeO8xmVAqVF6wFjk1J1ZAE2zaaz30qAeUrvWhNL
pJSSnD1zSn7wR+aH4idnsdNoEBZHRC4Dj1JJtXlo6Q6K8tc/E+RVupsfBanA96nn
fwkrdLCyFb4wj26SNFZUFQSxoCXqAzFPQ+1cV/ukXi+0MpbbTAU3gSikqAkXRCat
IL7yef2HgnuOAOfN6lZP0KGxeZJa4dsvprtqJ0Sz5r4hS6TSGfuZoLE1fSMw8BOv
O0Rh42rQ7D+QMTmQYoF3w9GnEO7FzUOzsr2J/eP9hUk2cyZ6QhcOunDjhQIDAQAB
o4IClTCCApEwHQYDVR0OBBYEFNSwwR5mZs/Bt/G2mU4PQ3MprewEMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y1LzRkYjkz
ZC1mYzg3LTRlMTYtOWIzYi03OTQ1M2I0NzRlMmUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjUvNGRiOTNk
LWZjODctNGUxNi05YjNiLTc5NDUzYjQ3NGUyZS8xLzFMREJIbVptejhHMzhiYVpU
ZzlEY3ltdDdBUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF
BwEHAQH/BCEwHzAMBAIAATAGAwQBsHz+MA8EAgACMAkDBwAgAQZ4ANwwDQYJKoZI
hvcNAQELBQADggEBAAZ/yudRRlz/vEu1gE1xMhv9rIV5RMR/+K7Ba1S4O4RR/QIT
UTJF3Kn5BAMAL6fscVVbcPbxhWaovnd25auD5MZA5gbgTgtTu0ltosfEVSD9ndLZ
nH+phWny19dCWpSCvh5vylcM4BdvedlEaSY/On7+6tPjrpnBEvlGK+ofVl5jhsCi
+aZMJc4KzPBlf/uAh55l3Yehnng7zQ391ji72doMjokrMvz2EPo+23SEx4DKjFr7
ooPBwjMQSF1dx1OPbT+dr3F+W+SHJQXuNvnzIw+iCOz3I0pcfUwQLs80HSqXUmAJ
xYxh21ywoubR7C0+Sdljk/ZCQvbSIdV4K72XCXE=
-----END CERTIFICATE-----
Generated at Wed May 22 08:46:02 2024 by rpki-client on console-fra.rpki-client.org