Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/l7jZwuBUbEWtgewbIqExlWDV7nE.cer
File: l7jZwuBUbEWtgewbIqExlWDV7nE.cer (raw, json)
Hash identifier: bwdZ4kY1PWp1evOBJWScEyLf0sxCZyN948f0VtVjc/k=
Subject key identifier: 97:B8:D9:C2:E0:54:6C:45:AD:81:EC:1B:22:A1:31:95:60:D5:EE:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F577D6AF01A1751365863AC5E559EEBA5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b8/b1a7ab-21df-4308-9bd0-f346cfb56951/1/l7jZwuBUbEWtgewbIqExlWDV7nE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b8/b1a7ab-21df-4308-9bd0-f346cfb56951/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 08 May 2024 09:16:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 199055
IP: 37.26.88.0/21
IP: 83.151.208.0/20
IP: 2a03:6440::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Jun 2024 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:57:7d:6a:f0:1a:17:51:36:58:63:ac:5e:55:9e:eb:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 8 09:16:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97b8d9c2e0546c45ad81ec1b22a1319560d5ee71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:aa:4a:f5:e3:ff:40:ca:d9:02:7a:93:58:93:
b2:ac:6c:a6:60:64:a8:b6:99:39:62:71:a5:97:d4:
d1:ed:fc:14:9d:e0:34:26:a8:ea:be:b5:c2:f9:45:
48:15:09:c0:d5:97:7a:b6:7b:28:f6:41:51:c3:4a:
79:bf:f9:d4:34:32:d9:83:69:8e:97:22:a9:d4:26:
49:27:0d:66:36:30:bd:53:aa:0e:81:83:f7:dd:40:
dc:a3:62:df:90:46:0b:82:e6:63:af:0d:04:18:37:
92:27:4e:4f:12:d0:5a:11:f1:84:fa:bd:85:0d:ad:
8b:0f:69:d2:d8:c3:d8:32:cb:1d:9c:9b:b1:9b:f3:
f0:84:66:b5:ac:78:37:e3:a6:bc:ef:9a:5e:ba:b0:
36:bc:8a:9e:05:a3:f7:6c:ec:20:75:93:33:b6:e6:
d9:f2:5c:32:a7:33:1e:a0:b3:b7:bb:88:c5:eb:c1:
d1:cd:f5:82:e2:d7:dd:39:dd:ed:46:36:a3:ca:dc:
5b:a9:93:38:b1:81:08:4b:f2:4c:63:28:36:54:96:
df:38:83:6d:f1:5c:35:99:72:d1:34:14:57:df:2d:
cc:c6:e0:d2:d2:9e:df:7f:bc:28:63:ee:f4:86:3a:
a5:23:4b:05:a3:0b:6b:76:96:a7:19:ae:d1:2e:64:
6e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B8:D9:C2:E0:54:6C:45:AD:81:EC:1B:22:A1:31:95:60:D5:EE:71
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b1a7ab-21df-4308-9bd0-f346cfb56951/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b1a7ab-21df-4308-9bd0-f346cfb56951/1/l7jZwuBUbEWtgewbIqExlWDV7nE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.26.88.0/21
83.151.208.0/20
IPv6:
2a03:6440::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199055
Signature Algorithm: sha256WithRSAEncryption
74:4a:6b:01:a6:04:6a:c6:6c:27:12:87:5c:c3:0c:d5:0c:e4:
65:6a:ab:ad:e9:7a:3a:f5:f9:f9:f4:23:4a:dc:4e:3f:10:5e:
5b:71:6e:bf:65:f3:e2:ea:f4:c4:4c:3b:21:01:3a:61:9d:69:
b9:70:4e:16:0a:02:fc:fa:72:0c:a2:9c:75:09:c8:ab:12:01:
45:51:f2:9f:55:ad:04:77:ef:cf:3f:28:44:4c:63:c5:83:6f:
85:8a:1c:18:27:b7:c7:0d:14:20:e2:96:51:7d:0f:fc:80:32:
7f:f0:56:fa:fa:0a:57:d2:5d:15:93:d1:3d:89:ea:89:24:ac:
80:6b:5f:9d:14:0b:62:2c:75:e1:9b:fc:20:34:fa:b5:5b:fb:
4a:b5:2b:0f:47:6e:73:32:9e:a3:99:4c:b5:04:4a:a7:4b:39:
92:3c:81:60:34:8b:d9:70:27:af:cb:6b:f3:5b:cf:ac:d8:ba:
ef:b5:e4:b0:bf:80:d7:ec:12:c9:b3:49:50:81:ac:48:e2:af:
e4:11:81:24:d2:a0:78:36:d3:7f:9f:ae:8e:24:ec:0f:dc:25:
1e:39:43:bf:a6:ce:3b:d8:f1:28:99:0d:10:16:ba:5e:c9:f4:
28:0f:53:cc:95:96:38:63:2f:75:ba:54:bb:9f:64:dd:ae:70:
62:c2:62:70
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAY9XfWrwGhdRNlhjrF5VnuulMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNTA4MDkxNjI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5N2I4ZDljMmUwNTQ2YzQ1YWQ4MWVjMWIyMmExMzE5NTYwZDVlZTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6pK9eP/QMrZAnqTWJOyrGymYGSo
tpk5YnGll9TR7fwUneA0JqjqvrXC+UVIFQnA1Zd6tnso9kFRw0p5v/nUNDLZg2mO
lyKp1CZJJw1mNjC9U6oOgYP33UDco2LfkEYLguZjrw0EGDeSJ05PEtBaEfGE+r2F
Da2LD2nS2MPYMssdnJuxm/PwhGa1rHg346a875peurA2vIqeBaP3bOwgdZMztubZ
8lwypzMeoLO3u4jF68HRzfWC4tfdOd3tRjajytxbqZM4sYEIS/JMYyg2VJbfOINt
8Vw1mXLRNBRX3y3MxuDS0p7ff7woY+70hjqlI0sFowtrdpanGa7RLmRuHQIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFJe42cLgVGxFrYHsGyKhMZVg1e5xMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I4L2IxYTdh
Yi0yMWRmLTQzMDgtOWJkMC1mMzQ2Y2ZiNTY5NTEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvYjFhN2Fi
LTIxZGYtNDMwOC05YmQwLWYzNDZjZmI1Njk1MS8xL2w3alp3dUJVYkVXdGdld2JJ
cUV4bFdEVjduRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQDJRpYAwQEU5fQMA0EAgACMAcDBQAqA2RAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMJjzANBgkqhkiG9w0BAQsFAAOCAQEAdEpr
AaYEasZsJxKHXMMM1QzkZWqrrel6OvX5+fQjStxOPxBeW3Fuv2Xz4ur0xEw7IQE6
YZ1puXBOFgoC/PpyDKKcdQnIqxIBRVHyn1WtBHfvzz8oRExjxYNvhYocGCe3xw0U
IOKWUX0P/IAyf/BW+voKV9JdFZPRPYnqiSSsgGtfnRQLYix14Zv8IDT6tVv7SrUr
D0duczKeo5lMtQRKp0s5kjyBYDSL2XAnr8tr81vPrNi677XksL+A1+wSybNJUIGs
SOKv5BGBJNKgeDbTf5+ujiTsD9wlHjlDv6bOO9jxKJkNEBa6Xsn0KA9TzJWWOGMv
dbpUu59k3a5wYsJicA==
-----END CERTIFICATE-----
Generated at Tue Jun 4 12:03:15 2024 by rpki-client on console-ams.rpki-client.org