Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
File: CkvR0w9yNc1xc5wEIxDcJggHOPY.cer (raw, json)
Hash identifier: odBNoxj+wBKsABY+olY6gYkJJ7C3HH4W7S9VE5cdRCw=
Subject key identifier: 0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BCA0CC1CF419E209CF7809BB850C8B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:51 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 51269
IP: 178.255.96.0/21
IP: 185.103.140.0/22
IP: 2a03:b700::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 14:36:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:a0:cc:1c:f4:19:e2:09:cf:78:09:bb:85:0c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a4bd1d30f7235cd71739c042310dc26080738f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:10:a0:b4:06:b5:f9:c2:ef:31:17:cb:41:67:
f1:11:4c:86:3c:68:a2:c9:91:93:20:b0:67:e2:e3:
1b:79:57:3b:42:73:16:aa:ec:87:e6:e3:ed:fb:32:
7b:37:c4:0c:12:1c:15:f2:53:97:27:ec:3e:7c:1d:
f0:13:68:02:c9:93:49:57:1d:07:df:8a:7b:43:22:
71:40:a3:fa:5b:70:fd:45:61:06:48:43:cb:0d:05:
7c:c8:c9:23:8f:1e:68:2e:bc:dd:8a:ef:5e:09:f3:
5d:fb:00:6b:e7:61:76:56:49:dd:6a:b3:a7:cf:fc:
40:9d:bc:3e:17:ce:6a:10:f9:ee:15:6f:1a:39:7c:
9f:b3:d1:12:b0:c1:6b:7b:b7:5f:e7:45:6f:ec:4c:
73:47:3f:cf:70:4d:f5:72:3b:8d:87:fc:b2:ae:05:
3c:24:4d:8c:66:f4:5d:a6:7e:0f:a7:9d:36:2d:73:
2b:fd:8d:60:fe:5e:c8:b1:e3:44:26:ac:c3:c2:b4:
7d:d0:7d:cb:e8:1b:42:4e:eb:54:cf:6c:fc:f3:3e:
f3:6b:c7:52:81:af:50:3a:c9:04:22:da:19:49:b9:
16:60:41:9a:75:51:30:5c:b3:f4:d4:4a:1c:18:a7:
7d:20:0c:ba:42:b9:15:ce:a8:84:91:1e:aa:5a:ef:
64:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.255.96.0/21
185.103.140.0/22
IPv6:
2a03:b700::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51269
Signature Algorithm: sha256WithRSAEncryption
90:6c:48:4f:ed:9f:58:70:db:09:bd:87:6e:7e:38:ae:5d:51:
6e:9c:fb:39:48:75:37:73:bf:aa:eb:97:72:19:5a:3b:32:3e:
c0:c9:d8:95:83:6c:bc:de:81:02:f2:fa:2a:bc:13:7a:70:f5:
21:45:36:65:52:11:f7:07:a3:ba:d1:0a:33:b5:29:36:f3:b0:
6d:0b:a6:35:b4:49:8a:2d:fd:ac:b9:5b:6b:39:0c:0f:b3:77:
e0:a6:95:8c:e2:76:90:16:7c:7d:29:58:97:80:6c:33:42:3f:
33:9c:cc:8e:07:66:8a:60:5f:20:94:0e:1f:90:48:e7:1a:c0:
5e:d8:2a:fd:ec:be:cb:7f:9c:08:db:da:76:78:39:fb:4f:68:
ed:ee:10:6d:2f:e8:2c:dc:ce:6c:46:13:e9:a1:3e:7b:03:7a:
f3:19:9a:49:48:13:a6:23:81:cf:45:74:a9:c7:8f:ef:16:1d:
fe:35:64:7d:5a:8d:b8:b2:6c:1d:e8:37:21:b4:cf:37:f2:3f:
dd:31:c4:06:99:3d:52:8f:50:7c:bb:3b:f3:a9:0d:95:f8:67:
e4:0d:fa:19:81:39:20:b6:79:e5:1b:b3:c4:0d:0a:4a:87:95:
70:a1:64:29:97:77:62:03:cb:02:ae:40:58:39:9e:80:ef:f4:
79:0b:37:e0
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAYzJvKDMHPQZ4gnPeAm7hQyLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTAzMzUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTRiZDFkMzBmNzIzNWNkNzE3MzljMDQyMzEwZGMyNjA4MDczOGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxCgtAa1+cLvMRfLQWfxEUyGPGii
yZGTILBn4uMbeVc7QnMWquyH5uPt+zJ7N8QMEhwV8lOXJ+w+fB3wE2gCyZNJVx0H
34p7QyJxQKP6W3D9RWEGSEPLDQV8yMkjjx5oLrzdiu9eCfNd+wBr52F2VkndarOn
z/xAnbw+F85qEPnuFW8aOXyfs9ESsMFre7df50Vv7ExzRz/PcE31cjuNh/yyrgU8
JE2MZvRdpn4Pp502LXMr/Y1g/l7IseNEJqzDwrR90H3L6BtCTutUz2z88z7za8dS
ga9QOskEItoZSbkWYEGadVEwXLP01EocGKd9IAy6QrkVzqiEkR6qWu9kzwIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFApL0dMPcjXNcXOcBCMQ3CYIBzj2MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JmLzhkNTA5
Zi1mYjY0LTQyM2QtYjI2MS0zODg0NDNkNWYwMGYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmYvOGQ1MDlm
LWZiNjQtNDIzZC1iMjYxLTM4ODQ0M2Q1ZjAwZi8xL0NrdlIwdzl5TmMxeGM1d0VJ
eERjSmdnSE9QWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQDsv9gAwQCuWeMMA0EAgACMAcDBQMqA7cAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDIRTANBgkqhkiG9w0BAQsFAAOCAQEAkGxI
T+2fWHDbCb2Hbn44rl1Rbpz7OUh1N3O/quuXchlaOzI+wMnYlYNsvN6BAvL6KrwT
enD1IUU2ZVIR9wejutEKM7UpNvOwbQumNbRJii39rLlbazkMD7N34KaVjOJ2kBZ8
fSlYl4BsM0I/M5zMjgdmimBfIJQOH5BI5xrAXtgq/ey+y3+cCNvadng5+09o7e4Q
bS/oLNzObEYT6aE+ewN68xmaSUgTpiOBz0V0qceP7xYd/jVkfVqNuLJsHeg3IbTP
N/I/3THEBpk9Uo9QfLs786kNlfhn5A36GYE5ILZ55RuzxA0KSoeVcKFkKZd3YgPL
Aq5AWDmegO/0eQs34A==
-----END CERTIFICATE-----
Generated at Mon Jun 3 20:25:27 2024 by rpki-client on console-fra.rpki-client.org