Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07yiuLJxkwaZAqfGZkNu3ATr-8c.cer
File: 07yiuLJxkwaZAqfGZkNu3ATr-8c.cer (raw, json)
Hash identifier: xVl5HY8P7W/rHzoxIuQDwBdBR/TIUSCpJnlJe8Yj6Qs=
Subject key identifier: D3:BC:A2:B8:B2:71:93:06:99:02:A7:C6:66:43:6E:DC:04:EB:FB:C7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D9CDAFD9A7E3A1E27A9038AC5E61F5B9E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/06/2bdcfe-172a-423e-8057-c924f8630fe4/1/07yiuLJxkwaZAqfGZkNu3ATr-8c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/06/2bdcfe-172a-423e-8057-c924f8630fe4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 12 Feb 2024 10:26:53 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.33.24.0/24
IP: 2a0a:c140::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9c:da:fd:9a:7e:3a:1e:27:a9:03:8a:c5:e6:1f:5b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 12 10:26:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d3bca2b8b27193069902a7c666436edc04ebfbc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7a:86:a2:33:8b:c9:66:de:0f:d3:a1:7c:c2:
bf:97:2b:8f:a3:66:49:7a:85:d9:4c:19:72:e4:53:
7f:eb:fe:ee:82:17:da:72:b9:f8:59:34:d6:a5:8e:
2b:b7:f4:83:8a:55:c1:dd:6a:33:11:7a:84:e9:00:
c7:3d:b2:f1:47:30:3a:09:af:5a:84:b3:b4:d8:88:
88:ce:c8:f9:be:3c:a6:1a:19:da:a5:28:fc:a6:f4:
d4:70:30:62:70:bc:ae:22:e3:e1:a3:09:7d:ff:31:
d6:25:fd:96:08:bc:df:9f:19:eb:76:a3:10:8d:db:
9b:ef:ba:ae:60:35:b7:c4:24:7f:33:0b:a3:31:d4:
ae:80:68:9d:42:2d:07:cb:de:39:fe:6c:f5:8d:0c:
36:0a:0e:09:88:63:38:be:98:1c:22:a4:a9:09:4a:
87:5f:5f:46:3e:ef:9d:58:09:10:47:93:ef:5c:8e:
e4:a1:b5:bc:a9:cc:f2:55:33:94:82:ef:7f:9b:65:
78:0a:84:e7:0a:ef:2b:02:b1:84:35:aa:7a:cb:ce:
1b:f9:0d:85:c8:d8:2f:68:dd:98:b9:57:cc:c7:7b:
a2:2e:a4:dd:f7:fb:df:e7:d3:c2:1c:36:ea:ef:46:
c7:ad:76:90:fd:d8:32:0f:f7:75:76:13:11:ab:fc:
4b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:BC:A2:B8:B2:71:93:06:99:02:A7:C6:66:43:6E:DC:04:EB:FB:C7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2bdcfe-172a-423e-8057-c924f8630fe4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2bdcfe-172a-423e-8057-c924f8630fe4/1/07yiuLJxkwaZAqfGZkNu3ATr-8c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.24.0/24
IPv6:
2a0a:c140::/29
Signature Algorithm: sha256WithRSAEncryption
49:c1:95:73:16:2b:06:a8:bd:ae:8c:b7:65:42:7f:05:78:20:
a7:41:30:21:24:dc:ee:49:72:74:0f:9c:b7:0c:21:9c:cf:a4:
9f:d5:bb:fe:24:61:56:e1:f5:1e:af:4d:ea:5b:ba:5f:38:71:
ab:f1:6a:0e:35:26:31:da:e1:18:c7:07:66:c4:e3:ed:1c:46:
97:cd:b1:cb:2f:40:3d:99:69:97:f8:b4:38:83:38:5f:ce:d9:
ae:44:82:7d:89:b8:a5:fc:c9:8f:10:54:54:1f:80:a2:24:30:
77:ff:58:cc:bf:0d:e9:2a:44:3a:1b:63:50:84:7e:30:a7:a6:
2e:61:89:a2:61:ab:5a:13:ff:25:7d:50:55:55:8c:dc:53:0c:
0b:05:a1:cc:0d:b4:81:64:ad:86:01:76:d9:eb:8e:01:bf:3b:
5f:10:db:c6:03:85:ac:b9:f4:b4:d1:54:90:cc:74:d1:14:6c:
c8:74:fd:6b:89:54:61:b4:6d:6c:e1:47:b9:1c:ea:4e:db:f4:
90:ed:33:25:73:2e:f8:4c:2b:f2:e9:bf:21:29:9d:09:4c:bd:
c5:da:64:83:fb:68:cf:a3:45:8b:77:fc:51:f8:b9:9f:bc:6c:
f9:31:81:a9:4a:6c:52:6e:4b:22:73:b9:2f:59:bd:48:27:5b:
58:40:9a:78
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAY2c2v2afjoeJ6kDisXmH1ueMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMjEyMTAyNjUzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkM2JjYTJiOGIyNzE5MzA2OTkwMmE3YzY2NjQzNmVkYzA0ZWJmYmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknqGojOLyWbeD9OhfMK/lyuPo2ZJ
eoXZTBly5FN/6/7ughfacrn4WTTWpY4rt/SDilXB3WozEXqE6QDHPbLxRzA6Ca9a
hLO02IiIzsj5vjymGhnapSj8pvTUcDBicLyuIuPhowl9/zHWJf2WCLzfnxnrdqMQ
jdub77quYDW3xCR/MwujMdSugGidQi0Hy945/mz1jQw2Cg4JiGM4vpgcIqSpCUqH
X19GPu+dWAkQR5PvXI7kobW8qczyVTOUgu9/m2V4CoTnCu8rArGENap6y84b+Q2F
yNgvaN2YuVfMx3uiLqTd9/vf59PCHDbq70bHrXaQ/dgyD/d1dhMRq/xLxwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFNO8oriycZMGmQKnxmZDbtwE6/vHMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA2LzJiZGNm
ZS0xNzJhLTQyM2UtODA1Ny1jOTI0Zjg2MzBmZTQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDYvMmJkY2Zl
LTE3MmEtNDIzZS04MDU3LWM5MjRmODYzMGZlNC8xLzA3eWl1TEp4a3dhWkFxZkda
a051M0FUci04Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAuSEYMA0EAgACMAcDBQMqCsFAMA0GCSqGSIb3
DQEBCwUAA4IBAQBJwZVzFisGqL2ujLdlQn8FeCCnQTAhJNzuSXJ0D5y3DCGcz6Sf
1bv+JGFW4fUer03qW7pfOHGr8WoONSYx2uEYxwdmxOPtHEaXzbHLL0A9mWmX+LQ4
gzhfztmuRIJ9ibil/MmPEFRUH4CiJDB3/1jMvw3pKkQ6G2NQhH4wp6YuYYmiYata
E/8lfVBVVYzcUwwLBaHMDbSBZK2GAXbZ644BvztfENvGA4WsufS00VSQzHTRFGzI
dP1riVRhtG1s4Ue5HOpO2/SQ7TMlcy74TCvy6b8hKZ0JTL3F2mSD+2jPo0WLd/xR
+LmfvGz5MYGpSmxSbksic7kvWb1IJ1tYQJp4
-----END CERTIFICATE-----
Generated at Thu Apr 25 22:48:30 2024 by rpki-client on console-fra.rpki-client.org