Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer
File: 0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer (raw, json)
Hash identifier: jl/vIhb+dZNvIDE8yzETNhPrWaUPOXlqZOGk6cYNwxo=
Subject key identifier: D0:DE:61:88:22:B8:AF:6F:9E:CA:FF:CD:7D:54:59:B7:CC:11:44:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC727080A074F5123DA644851A36E25A7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:13 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 52093
IP: 185.156.4.0/22
IP: 2a07:9640::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:08:0a:07:4f:51:23:da:64:48:51:a3:6e:25:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0de618822b8af6f9ecaffcd7d5459b7cc11449a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:db:b0:8c:86:a9:98:dd:9b:d7:5a:a0:d7:88:
c2:59:f6:6e:43:74:d4:f4:81:13:f2:3c:ef:e8:fd:
51:32:19:6a:a0:71:8d:c4:e7:3d:fc:a9:22:0b:7a:
f0:1e:18:17:99:bf:16:d7:5d:b7:ba:9d:0e:ef:a5:
0e:e1:00:1d:81:e0:aa:ab:8d:7b:fa:ed:15:f4:68:
de:92:43:ee:bb:aa:65:20:b6:a1:d9:ec:92:c5:9e:
97:f6:68:40:d7:cd:f2:fa:aa:99:4a:78:48:d9:db:
38:04:9e:29:0b:0f:8f:49:ee:7f:65:c9:8a:55:f1:
17:84:e7:45:65:49:61:69:77:3a:d3:6e:9c:c2:c4:
8f:44:4d:b2:6f:41:26:5a:19:b1:0f:8f:95:1a:3a:
85:e3:38:6b:7e:25:05:65:a7:de:27:7c:b6:31:27:
9d:d1:91:85:e5:c0:b9:2c:6d:a1:5e:2d:a0:76:dd:
a9:ac:a3:37:dd:fc:77:cc:1e:0e:a1:c1:26:f2:c1:
96:44:a4:a1:09:c3:52:f7:b1:d2:1e:1c:f2:05:cc:
8a:da:9c:43:55:08:87:7e:fd:72:ca:42:9f:71:d1:
d9:44:cc:83:9e:1e:19:e2:85:a5:a2:74:b7:1f:df:
db:40:f5:68:1d:10:13:10:a2:14:be:5e:bc:c0:11:
50:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DE:61:88:22:B8:AF:6F:9E:CA:FF:CD:7D:54:59:B7:CC:11:44:9A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.4.0/22
IPv6:
2a07:9640::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52093
Signature Algorithm: sha256WithRSAEncryption
40:9f:78:e5:7f:e2:0b:9f:e4:a5:4d:9c:e0:12:47:d0:1c:a0:
d4:ab:ff:ac:bd:21:27:ce:68:e6:2d:1e:0c:d2:52:db:72:84:
26:05:65:87:ac:5a:e5:38:74:30:bc:97:c5:a2:85:4e:5b:6b:
f6:08:1c:71:06:b2:56:9d:2c:29:d9:44:d8:4a:23:a0:59:5c:
e7:06:b2:96:d2:01:f9:cb:fe:d8:33:72:5a:56:9d:ee:88:23:
68:55:ed:b3:95:a5:65:d8:47:20:0c:9d:ee:12:8a:08:30:5e:
4d:e2:30:a6:cf:00:a2:a5:68:8d:65:2c:11:88:fb:ba:d8:8d:
be:99:70:d6:05:9c:1f:e2:b8:94:71:40:89:74:88:32:fe:8d:
aa:97:3c:91:62:0e:db:a7:08:4e:48:31:84:fd:b7:2d:65:a8:
d2:71:17:57:c9:c5:85:ee:be:0e:25:2c:ad:fa:6e:2b:bb:77:
2b:8b:2a:86:58:5c:87:25:7a:90:28:62:cf:6f:3b:6f:10:c6:
64:d3:fe:89:5c:0c:0c:30:0f:f3:a5:88:2e:cc:8f:b5:d5:7e:
6f:b9:56:94:d6:dc:b9:1d:c8:d5:f6:13:8c:8c:af:6a:4c:0d:
b2:9b:b5:40:4c:34:37:b4:9d:f8:49:60:c7:f7:6c:08:43:88:
11:d4:03:84
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzHJwgKB09RI9pkSFGjbiWnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMjIzMTEzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMGRlNjE4ODIyYjhhZjZmOWVjYWZmY2Q3ZDU0NTliN2NjMTE0NDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnduwjIapmN2b11qg14jCWfZuQ3TU
9IET8jzv6P1RMhlqoHGNxOc9/KkiC3rwHhgXmb8W1123up0O76UO4QAdgeCqq417
+u0V9GjekkPuu6plILah2eySxZ6X9mhA183y+qqZSnhI2ds4BJ4pCw+PSe5/ZcmK
VfEXhOdFZUlhaXc6026cwsSPRE2yb0EmWhmxD4+VGjqF4zhrfiUFZafeJ3y2MSed
0ZGF5cC5LG2hXi2gdt2prKM33fx3zB4OocEm8sGWRKShCcNS97HSHhzyBcyK2pxD
VQiHfv1yykKfcdHZRMyDnh4Z4oWlonS3H9/bQPVoHRATEKIUvl68wBFQkQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFNDeYYgiuK9vnsr/zX1UWbfMEUSaMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q4LzVhY2Q3
OC1kNjcwLTQxOTItYjU2NC0wNDBlMDY0NGZiZTgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDgvNWFjZDc4
LWQ2NzAtNDE5Mi1iNTY0LTA0MGUwNjQ0ZmJlOC8xLzBONWhpQ0s0cjItZXl2X05m
VlJadDh3UlJKby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuZwEMA0EAgACMAcDBQMqB5ZAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDLfTANBgkqhkiG9w0BAQsFAAOCAQEAQJ945X/iC5/k
pU2c4BJH0Byg1Kv/rL0hJ85o5i0eDNJS23KEJgVlh6xa5Th0MLyXxaKFTltr9ggc
cQayVp0sKdlE2EojoFlc5wayltIB+cv+2DNyWlad7ogjaFXts5WlZdhHIAyd7hKK
CDBeTeIwps8AoqVojWUsEYj7utiNvplw1gWcH+K4lHFAiXSIMv6Nqpc8kWIO26cI
TkgxhP23LWWo0nEXV8nFhe6+DiUsrfpuK7t3K4sqhlhchyV6kChiz287bxDGZNP+
iVwMDDAP86WILsyPtdV+b7lWlNbcuR3I1fYTjIyvakwNspu1QEw0N7Sd+Elgx/ds
CEOIEdQDhA==
-----END CERTIFICATE-----
Generated at Thu Apr 25 04:09:30 2024 by rpki-client on console-ams.rpki-client.org