Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20IFnOKR1Jpmkgcxx2faVj7yESQ.cer
File: 20IFnOKR1Jpmkgcxx2faVj7yESQ.cer (raw, json)
Hash identifier: fvILibzQvhUcD84w/Ph7OhcdjsrV7sCJPs/whhhobZY=
Subject key identifier: DB:42:05:9C:E2:91:D4:9A:66:92:07:31:C7:67:DA:56:3E:F2:11:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DBEC04A4CC234DC4D83504BF45D57E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/9e3f2a-1440-4084-84c2-9312d087dfca/1/20IFnOKR1Jpmkgcxx2faVj7yESQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/9e3f2a-1440-4084-84c2-9312d087dfca/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 57815
IP: 91.235.165.0/24
IP: 194.40.210.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 14:36:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:ec:04:a4:cc:23:4d:c4:d8:35:04:bf:45:d5:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db42059ce291d49a66920731c767da563ef21124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9f:b1:70:fe:7e:3e:43:c1:5f:9e:60:be:a7:
31:9c:32:55:71:98:ad:c0:b7:ce:4a:fd:48:7c:2b:
e9:7d:2e:ae:51:0d:f5:07:09:8c:42:cd:3a:da:64:
d3:c1:99:1a:7e:2a:b9:7e:7c:ac:c1:40:4e:34:4b:
57:ca:b9:a7:61:c0:0f:61:2c:13:76:a3:1c:72:f3:
36:12:3c:42:f5:b8:46:e4:95:7d:57:bc:e5:0b:86:
5d:be:9b:a5:59:dd:0f:55:90:16:bb:f7:20:68:c2:
05:9b:c6:03:6c:6a:6d:8e:22:cc:9a:92:fc:b4:1f:
cb:99:87:ed:6e:dd:a8:be:0d:9b:13:bc:2c:df:32:
34:9b:98:16:8e:25:d6:fe:bc:ed:af:d7:0d:1e:78:
10:9b:22:f2:bb:0a:ed:b9:65:ee:a2:89:c6:d3:68:
7a:db:db:c1:a1:80:5b:76:fc:b7:9b:70:fa:70:5f:
10:ef:18:9a:25:66:eb:cc:d0:80:6a:0f:ae:e1:85:
64:47:c9:53:67:3c:84:75:2c:b3:ac:81:37:3f:a3:
f6:21:ff:06:d6:84:2a:ed:75:fd:10:8f:48:35:59:
d5:ee:11:e4:74:39:a3:c0:ca:16:aa:ba:a0:6a:6c:
c2:f0:5a:11:39:e5:7c:08:0a:88:48:78:6a:70:eb:
ef:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:42:05:9C:E2:91:D4:9A:66:92:07:31:C7:67:DA:56:3E:F2:11:24
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9e3f2a-1440-4084-84c2-9312d087dfca/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9e3f2a-1440-4084-84c2-9312d087dfca/1/20IFnOKR1Jpmkgcxx2faVj7yESQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.165.0/24
194.40.210.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57815
Signature Algorithm: sha256WithRSAEncryption
a0:f1:e6:f1:06:cf:03:7c:af:ce:62:2e:39:89:45:39:63:bb:
44:62:30:0f:56:27:05:c6:f9:e1:c5:d2:07:71:16:4a:76:d0:
6a:af:65:d9:9f:ca:65:ed:ef:bf:5e:26:b9:4d:b2:90:20:17:
4f:fe:c1:a4:15:ff:96:a8:27:db:e9:1c:82:38:5d:67:bd:a0:
ca:9f:94:94:6e:be:9b:38:dc:e5:ee:79:84:18:2e:6c:ac:71:
4a:a6:56:03:ff:cb:1e:00:83:e8:48:ab:de:2f:cf:e3:d5:b8:
ea:7e:f0:aa:13:96:a6:8b:29:2e:32:40:92:f9:0f:51:b0:36:
4c:9e:db:71:53:81:b6:d5:fa:8b:94:49:ea:e8:f7:23:a4:c4:
1c:48:c4:7d:1c:4d:86:e1:8f:3c:42:5c:cb:3f:c3:74:fe:64:
f9:3c:b0:46:e3:55:55:e7:f9:37:8d:3c:fd:7e:a3:ef:d6:23:
ba:8e:b9:f0:1d:aa:27:f6:f0:af:a3:81:98:9c:79:88:5d:4f:
45:78:e3:91:5d:69:43:ea:26:03:35:2e:ff:dd:75:83:95:5c:
49:a5:e6:88:9f:2e:1e:4e:71:ac:7f:06:16:75:1f:2a:1a:2c:
a5:2f:bb:92:a4:7e:9a:9c:4c:00:d2:c7:b4:d4:28:3a:65:b6:
de:be:43:cc
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAYzF2+wEpMwjTcTYNQS/RdV+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTYyOTMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjQyMDU5Y2UyOTFkNDlhNjY5MjA3MzFjNzY3ZGE1NjNlZjIxMTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZ+xcP5+PkPBX55gvqcxnDJVcZit
wLfOSv1IfCvpfS6uUQ31BwmMQs062mTTwZkafiq5fnyswUBONEtXyrmnYcAPYSwT
dqMccvM2EjxC9bhG5JV9V7zlC4ZdvpulWd0PVZAWu/cgaMIFm8YDbGptjiLMmpL8
tB/LmYftbt2ovg2bE7ws3zI0m5gWjiXW/rztr9cNHngQmyLyuwrtuWXuoonG02h6
29vBoYBbdvy3m3D6cF8Q7xiaJWbrzNCAag+u4YVkR8lTZzyEdSyzrIE3P6P2If8G
1oQq7XX9EI9INVnV7hHkdDmjwMoWqrqgamzC8FoROeV8CAqISHhqcOvvGwIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFNtCBZzikdSaZpIHMcdn2lY+8hEkMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY2LzllM2Yy
YS0xNDQwLTQwODQtODRjMi05MzEyZDA4N2RmY2EvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYvOWUzZjJh
LTE0NDAtNDA4NC04NGMyLTkzMTJkMDg3ZGZjYS8xLzIwSUZuT0tSMUpwbWtnY3h4
MmZhVmo3eUVTUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQAW+ulAwQAwijSMBoGCCsGAQUFBwEIAQH/BAsw
CaAHMAUCAwDh1zANBgkqhkiG9w0BAQsFAAOCAQEAoPHm8QbPA3yvzmIuOYlFOWO7
RGIwD1YnBcb54cXSB3EWSnbQaq9l2Z/KZe3vv14muU2ykCAXT/7BpBX/lqgn2+kc
gjhdZ72gyp+UlG6+mzjc5e55hBgubKxxSqZWA//LHgCD6Eir3i/P49W46n7wqhOW
pospLjJAkvkPUbA2TJ7bcVOBttX6i5RJ6uj3I6TEHEjEfRxNhuGPPEJcyz/DdP5k
+TywRuNVVef5N408/X6j79Yjuo658B2qJ/bwr6OBmJx5iF1PRXjjkV1pQ+omAzUu
/911g5VcSaXmiJ8uHk5xrH8GFnUfKhospS+7kqR+mpxMANLHtNQoOmW23r5DzA==
-----END CERTIFICATE-----
Generated at Mon Jun 3 19:58:19 2024 by rpki-client on console-fra.rpki-client.org