Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer
File: CAGEeJFIcaqw4cADbTYm661uIMw.cer (raw, json)
Hash identifier: J6smt5Uv1IDqQ3s2fDPDh0824nUi8h39Ag7t+mdof1Y=
Subject key identifier: 08:01:84:78:91:48:71:AA:B0:E1:C0:03:6D:36:26:EB:AD:6E:20:CC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DAB232EA1572609479DEA30A0F6C13
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 44334
AS: 212650
AS: 216273
IP: 92.61.160.0/20
IP: 185.190.88.0/24
IP: 2a03:4600::/29
IP: 2a10:6540::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:b2:32:ea:15:72:60:94:79:de:a3:0a:0f:6c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08018478914871aab0e1c0036d3626ebad6e20cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:af:31:00:7d:b2:a3:58:27:de:49:82:01:7a:
2e:72:11:be:a6:1f:f8:e9:e7:28:89:07:d1:79:5d:
44:e8:5a:ae:3e:cf:38:e4:b2:fb:12:b2:01:21:92:
dc:98:8d:97:9b:bb:33:64:e0:e8:e3:a9:07:b7:52:
cd:a3:50:f2:09:eb:48:68:c8:c6:28:3c:fe:54:f2:
f8:4c:82:6f:de:15:31:0b:ce:05:ef:3a:2e:d2:69:
b2:49:5a:7b:5d:75:fd:85:71:da:0f:d3:6f:ea:29:
75:1b:71:7e:6a:e7:b6:83:2e:aa:c3:0e:8d:e6:02:
34:6a:19:96:89:85:b4:7c:ce:36:9a:ab:f4:66:06:
bf:b8:a4:95:77:fe:97:1a:99:75:0b:eb:5c:01:9a:
bc:a8:cc:12:46:6a:88:f5:53:96:38:ae:a0:78:13:
33:09:06:74:5f:c5:82:96:d2:ff:2f:b7:25:ab:a4:
82:19:06:07:f8:5a:12:8b:0e:aa:49:e5:7c:6b:ac:
02:3b:14:20:57:17:2a:4b:f5:34:e5:32:1c:0f:70:
02:3f:a4:f4:b2:58:ae:da:ca:28:b1:12:26:58:c5:
af:a0:65:bd:73:94:8b:fa:80:61:ba:f5:c4:0f:4b:
22:7a:b8:21:fc:c2:20:86:68:4c:fb:7f:e3:6a:06:
76:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:01:84:78:91:48:71:AA:B0:E1:C0:03:6D:36:26:EB:AD:6E:20:CC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.160.0/20
185.190.88.0/24
IPv6:
2a03:4600::/29
2a10:6540::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44334
212650
216273
Signature Algorithm: sha256WithRSAEncryption
58:a2:26:97:27:07:02:e6:8e:03:b1:c1:aa:4b:1b:ed:17:62:
c4:c5:2d:fa:db:26:be:e6:5f:e8:59:10:dd:09:f8:a1:4f:ab:
90:83:7c:56:ec:3d:ab:ba:a0:26:8e:7a:16:9e:47:9d:ab:94:
88:69:76:00:9f:c9:73:13:a2:1c:c0:6d:65:87:d6:1c:bd:61:
e5:7e:8d:6b:17:c0:dc:bb:3d:ea:56:be:1a:9f:9c:31:79:07:
e7:3e:28:86:c4:38:bf:03:4f:f2:b9:ac:04:41:92:f1:3b:9f:
1a:d8:b4:cd:bb:44:d1:eb:b7:47:2f:a6:c1:de:ad:33:35:27:
d7:74:95:fe:f3:56:3d:35:7c:ef:44:17:af:10:fb:7d:e3:d6:
0f:9a:c7:ce:53:21:c1:6c:aa:25:86:f4:b2:7f:c5:24:25:4a:
5d:ec:f7:be:f2:13:72:f0:d6:b9:0c:71:11:60:2a:55:42:f2:
17:29:14:0e:32:62:79:07:e7:df:c8:c9:02:90:02:38:a5:55:
2b:d8:e5:a7:3e:ed:d2:8a:ee:bd:39:e0:26:d7:2c:8f:c9:da:
6a:f0:22:fe:91:26:5f:1f:18:4f:7b:1b:1b:d2:9b:45:35:b8:
2b:b7:9e:f3:a6:bb:2d:ba:79:6a:07:e2:0e:d7:09:1f:31:79:
07:88:28:7d
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgISAYzC2rIy6hVyYJR53qMKD2wTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDIyOTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODAxODQ3ODkxNDg3MWFhYjBlMWMwMDM2ZDM2MjZlYmFkNmUyMGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAva8xAH2yo1gn3kmCAXouchG+ph/4
6ecoiQfReV1E6FquPs845LL7ErIBIZLcmI2Xm7szZODo46kHt1LNo1DyCetIaMjG
KDz+VPL4TIJv3hUxC84F7zou0mmySVp7XXX9hXHaD9Nv6il1G3F+aue2gy6qww6N
5gI0ahmWiYW0fM42mqv0Zga/uKSVd/6XGpl1C+tcAZq8qMwSRmqI9VOWOK6geBMz
CQZ0X8WCltL/L7clq6SCGQYH+FoSiw6qSeV8a6wCOxQgVxcqS/U05TIcD3ACP6T0
sliu2soosRImWMWvoGW9c5SL+oBhuvXED0siergh/MIghmhM+3/jagZ2qQIDAQAB
o4ICxjCCAsIwHQYDVR0OBBYEFAgBhHiRSHGqsOHAA202JuutbiDMMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y0LzVmODNj
NC02NDBkLTRmZjMtOWNmNC02MDYyN2UxMTUyNjkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQvNWY4M2M0
LTY0MGQtNGZmMy05Y2Y0LTYwNjI3ZTExNTI2OS8xL0NBR0VlSkZJY2FxdzRjQURi
VFltNjYxdUlNdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF
BwEHAQH/BCwwKjASBAIAATAMAwQEXD2gAwQAub5YMBQEAgACMA4DBQMqA0YAAwUD
KhBlQDAkBggrBgEFBQcBCAEB/wQVMBOgETAPAgMArS4CAwM+qgIDA0zRMA0GCSqG
SIb3DQEBCwUAA4IBAQBYoiaXJwcC5o4DscGqSxvtF2LExS362ya+5l/oWRDdCfih
T6uQg3xW7D2ruqAmjnoWnkedq5SIaXYAn8lzE6IcwG1lh9YcvWHlfo1rF8Dcuz3q
Vr4an5wxeQfnPiiGxDi/A0/yuawEQZLxO58a2LTNu0TR67dHL6bB3q0zNSfXdJX+
81Y9NXzvRBevEPt949YPmsfOUyHBbKolhvSyf8UkJUpd7Pe+8hNy8Na5DHERYCpV
QvIXKRQOMmJ5B+ffyMkCkAI4pVUr2OWnPu3Siu69OeAm1yyPydpq8CL+kSZfHxhP
exsb0ptFNbgrt57zprstunlqB+IO1wkfMXkHiCh9
-----END CERTIFICATE-----
Generated at Thu May 23 00:12:35 2024 by rpki-client on console-fra.rpki-client.org