Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.cer
File: 8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.cer (raw, json)
Hash identifier: +SGfeVxs1grUqsNT9rUQ4eobizl64f8vFQDLT574Rwc=
Subject key identifier: F1:F4:60:9D:0D:05:3A:EC:03:07:DA:44:B0:E6:78:C3:88:F6:41:A4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F3DAFEC10A805E38079952933D3496D4C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 03 May 2024 09:01:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 214973
IP: 185.18.221.0/24
IP: 2a13:2c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3d:af:ec:10:a8:05:e3:80:79:95:29:33:d3:49:6d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 3 09:01:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1f4609d0d053aec0307da44b0e678c388f641a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:db:04:a4:4e:6f:d9:3b:2d:21:8d:61:0c:5b:
f1:cb:94:c1:ce:38:ef:15:12:86:cb:e2:8f:a3:b8:
01:98:97:12:10:33:0a:f7:a6:0f:93:1f:5e:54:5a:
42:ea:51:06:7d:fa:50:39:94:f9:4a:35:67:7a:f7:
57:71:e9:7c:6e:c6:36:9c:07:af:e2:a7:67:dd:09:
d0:04:d1:fe:f0:da:c1:d4:c5:7e:4d:a0:e8:3f:28:
ec:a8:8b:14:cb:93:94:2e:db:51:af:de:2c:f9:6f:
04:8a:18:b7:cf:ae:84:ce:ce:62:06:e1:96:e7:30:
2c:9d:c6:fe:1e:d4:ff:64:98:7e:a0:13:10:89:05:
83:1c:a3:3a:c5:a0:d0:82:a6:aa:65:90:92:ab:cf:
8f:b8:32:fb:5f:5b:65:a8:0b:6a:0b:a7:77:a3:60:
72:f5:b6:7c:4e:4a:ad:d0:12:e6:1a:c4:bf:84:ff:
99:13:bc:fa:98:6a:66:5b:ef:2d:73:22:58:b8:fb:
1d:32:4f:9f:f4:58:67:57:29:9f:e6:29:80:11:6d:
e6:57:c2:12:73:c3:f2:85:2b:de:89:d8:44:f2:6b:
f3:f4:63:c5:2d:66:ea:da:43:5e:e9:4d:46:53:08:
1b:9a:1e:75:19:e7:a4:56:b8:6d:89:32:13:4f:48:
d3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F4:60:9D:0D:05:3A:EC:03:07:DA:44:B0:E6:78:C3:88:F6:41:A4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.18.221.0/24
IPv6:
2a13:2c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214973
Signature Algorithm: sha256WithRSAEncryption
9a:39:6f:91:61:a1:a7:1f:42:d7:87:33:fb:30:4e:6d:3e:7d:
30:79:e4:d1:a0:de:43:51:03:32:98:40:53:77:bb:15:68:f9:
7f:7a:7a:89:af:e1:50:4a:dd:0c:a2:36:55:96:4c:ce:d6:d9:
fa:16:63:c4:e9:c9:f2:1d:32:5f:24:1f:fe:f3:ef:22:dc:a0:
07:6e:4c:df:0e:19:72:eb:c4:ad:d7:ec:f0:da:e8:82:e5:af:
9c:ec:f4:3c:f8:ed:5c:23:03:79:b4:59:49:13:d5:73:3b:81:
df:44:24:36:1e:ad:74:40:cb:b3:08:60:f6:b0:50:ac:27:08:
d9:0a:35:29:8b:48:95:80:4d:09:b3:1d:b3:39:43:6c:f7:b7:
3e:ec:f3:e0:2e:59:94:e4:23:0f:b0:e9:82:b6:88:02:e0:08:
3e:7a:b8:6a:ab:49:ab:9c:34:50:98:2c:8f:15:64:35:c8:0c:
13:c8:82:ea:37:86:aa:90:27:39:30:35:11:b6:5a:5b:4d:ed:
90:9c:42:71:87:61:91:d0:c8:92:f8:e5:94:18:34:66:32:a6:
9b:7a:a5:39:ba:f6:1d:18:8a:97:df:90:d7:4d:72:8d:01:44:
cd:ef:7e:e9:1b:42:ce:f5:97:1c:a5:6d:f7:f9:e8:06:37:bc:
b8:66:97:d4
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAY89r+wQqAXjgHmVKTPTSW1MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNTAzMDkwMTMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWY0NjA5ZDBkMDUzYWVjMDMwN2RhNDRiMGU2NzhjMzg4ZjY0MWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodsEpE5v2TstIY1hDFvxy5TBzjjv
FRKGy+KPo7gBmJcSEDMK96YPkx9eVFpC6lEGffpQOZT5SjVnevdXcel8bsY2nAev
4qdn3QnQBNH+8NrB1MV+TaDoPyjsqIsUy5OULttRr94s+W8Eihi3z66Ezs5iBuGW
5zAsncb+HtT/ZJh+oBMQiQWDHKM6xaDQgqaqZZCSq8+PuDL7X1tlqAtqC6d3o2By
9bZ8Tkqt0BLmGsS/hP+ZE7z6mGpmW+8tcyJYuPsdMk+f9FhnVymf5imAEW3mV8IS
c8PyhSveidhE8mvz9GPFLWbq2kNe6U1GUwgbmh51GeekVrhtiTITT0jT2QIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFPH0YJ0NBTrsAwfaRLDmeMOI9kGkMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg0LzlhMThh
ZC0wODdiLTRkMTItOWY2OS04Y2JmOTAzZTkxY2QvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQvOWExOGFk
LTA4N2ItNGQxMi05ZjY5LThjYmY5MDNlOTFjZC8xLzhmUmduUTBGT3V3REI5cEVz
T1o0dzRqMlFhUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAuRLdMA0EAgACMAcDBQMqEwLAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNHvTANBgkqhkiG9w0BAQsFAAOCAQEAmjlvkWGhpx9C
14cz+zBObT59MHnk0aDeQ1EDMphAU3e7FWj5f3p6ia/hUErdDKI2VZZMztbZ+hZj
xOnJ8h0yXyQf/vPvItygB25M3w4ZcuvErdfs8NroguWvnOz0PPjtXCMDebRZSRPV
czuB30QkNh6tdEDLswhg9rBQrCcI2Qo1KYtIlYBNCbMdszlDbPe3Puzz4C5ZlOQj
D7DpgraIAuAIPnq4aqtJq5w0UJgsjxVkNcgME8iC6jeGqpAnOTA1EbZaW03tkJxC
cYdhkdDIkvjllBg0ZjKmm3qlObr2HRiKl9+Q101yjQFEze9+6RtCzvWXHKVt9/no
Bje8uGaX1A==
-----END CERTIFICATE-----
Generated at Tue Jun 4 09:03:16 2024 by rpki-client on console-fra.rpki-client.org