Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0NvhCHgYqt80JKzYuZjGjZf5B5Y.cer
File: 0NvhCHgYqt80JKzYuZjGjZf5B5Y.cer (raw, json)
Hash identifier: z3sk+O/xgKN+lBxZICIhkAg5hI+jMaHtVYWERd/sNmo=
Subject key identifier: D0:DB:E1:08:78:18:AA:DF:34:24:AC:D8:B9:98:C6:8D:97:F9:07:96
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC50120F423EF9B5625C83B90DD681A13
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/9c035f-8bf9-46ab-a2c9-9fd9bd7b28bb/1/0NvhCHgYqt80JKzYuZjGjZf5B5Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/9c035f-8bf9-46ab-a2c9-9fd9bd7b28bb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.149.122.0/24
IP: 2a12:34c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:20:f4:23:ef:9b:56:25:c8:3b:90:dd:68:1a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0dbe1087818aadf3424acd8b998c68d97f90796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c3:ba:56:15:4e:87:8f:da:83:ea:b6:df:c3:
9c:7a:4a:58:15:6b:7f:19:8d:c1:ee:f4:1d:f9:3d:
72:c8:b0:ec:7d:71:18:16:79:94:b2:5b:6f:a0:01:
e4:8d:19:f9:0f:8e:96:d5:29:c2:4a:69:4a:61:54:
c3:94:5f:bb:67:3f:74:ae:f6:52:be:f3:24:f5:d2:
c2:55:25:e7:b3:7f:aa:1b:9b:c8:b5:85:67:e2:89:
aa:99:db:93:35:34:75:59:c8:4c:a7:e4:2d:75:8b:
b1:fd:ee:62:3d:1b:09:d8:dc:69:e6:1f:76:e5:f6:
9e:de:a7:d8:cc:a1:4a:79:7a:5b:a0:a5:e1:f7:b2:
4b:33:59:c6:0c:43:bd:75:83:9b:72:df:76:56:71:
21:93:08:5f:7c:fe:17:4c:27:cc:0b:0b:89:9c:a9:
e0:71:74:0f:97:68:32:79:a1:54:ed:bd:2d:4d:02:
2c:19:ff:4c:3a:0d:78:60:10:4b:b7:30:e1:ab:7f:
26:e9:93:0f:b9:3e:7b:6d:1b:19:3f:43:da:cc:ec:
26:13:d1:6a:93:fd:0c:0a:67:f9:a3:d2:a5:24:60:
5a:35:f6:55:d3:f0:1c:59:82:87:bc:64:81:e4:29:
ff:bc:9f:84:05:06:f4:cb:e8:40:25:a1:df:fc:70:
c1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DB:E1:08:78:18:AA:DF:34:24:AC:D8:B9:98:C6:8D:97:F9:07:96
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c035f-8bf9-46ab-a2c9-9fd9bd7b28bb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c035f-8bf9-46ab-a2c9-9fd9bd7b28bb/1/0NvhCHgYqt80JKzYuZjGjZf5B5Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.122.0/24
IPv6:
2a12:34c0::/29
Signature Algorithm: sha256WithRSAEncryption
af:79:e2:e5:6c:a8:4e:64:7e:23:a9:87:e6:95:1f:14:7e:fb:
6d:e9:94:c0:02:14:e4:4d:ed:86:d6:f8:b5:80:a1:5a:21:88:
b2:8a:ec:ce:76:aa:ad:2b:94:5a:a0:1e:09:2d:95:ee:45:07:
fe:af:b4:81:29:fe:d8:cb:6b:60:78:49:e0:b2:5a:7d:1f:33:
f2:fd:07:26:50:1b:52:f2:b5:90:48:0d:76:27:06:cd:fe:0d:
60:02:01:90:10:7c:b9:6e:4b:a0:28:48:93:e7:5d:c1:f2:b3:
80:eb:f9:ac:e3:b6:4f:9e:64:67:60:5a:89:01:cb:4f:93:ff:
6b:97:ed:dd:44:10:3a:02:a2:f0:e2:bb:b6:0c:0b:19:f5:20:
00:9d:cb:07:4c:63:53:d7:d2:a0:d9:5a:a6:97:d2:0f:ac:60:
33:0f:fe:ae:c5:0d:6f:05:38:41:90:ec:88:e2:de:14:34:fd:
af:25:03:3d:2d:fc:4a:91:a8:98:66:9f:e0:d2:22:21:b9:ea:
da:3f:2d:1d:09:54:bf:29:fb:26:0e:f6:42:2d:35:98:bb:44:
49:b3:8a:c9:a5:cd:d2:4a:4b:59:54:f4:d5:6f:52:80:df:fb:
01:c7:b5:7d:a1:79:81:ed:97:ea:94:9b:00:6f:69:58:66:2e:
ec:c6:48:09
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzFASD0I++bViXIO5DdaBoTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTIzMDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMGRiZTEwODc4MThhYWRmMzQyNGFjZDhiOTk4YzY4ZDk3ZjkwNzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MO6VhVOh4/ag+q238OcekpYFWt/
GY3B7vQd+T1yyLDsfXEYFnmUsltvoAHkjRn5D46W1SnCSmlKYVTDlF+7Zz90rvZS
vvMk9dLCVSXns3+qG5vItYVn4omqmduTNTR1WchMp+QtdYux/e5iPRsJ2Nxp5h92
5fae3qfYzKFKeXpboKXh97JLM1nGDEO9dYObct92VnEhkwhffP4XTCfMCwuJnKng
cXQPl2gyeaFU7b0tTQIsGf9MOg14YBBLtzDhq38m6ZMPuT57bRsZP0PazOwmE9Fq
k/0MCmf5o9KlJGBaNfZV0/AcWYKHvGSB5Cn/vJ+EBQb0y+hAJaHf/HDBgwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFNDb4Qh4GKrfNCSs2LmYxo2X+QeWMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQwLzljMDM1
Zi04YmY5LTQ2YWItYTJjOS05ZmQ5YmQ3YjI4YmIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDAvOWMwMzVm
LThiZjktNDZhYi1hMmM5LTlmZDliZDdiMjhiYi8xLzBOdmhDSGdZcXQ4MEpLell1
WmpHalpmNUI1WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAuZV6MA0EAgACMAcDBQMqEjTAMA0GCSqGSIb3
DQEBCwUAA4IBAQCveeLlbKhOZH4jqYfmlR8Ufvtt6ZTAAhTkTe2G1vi1gKFaIYiy
iuzOdqqtK5RaoB4JLZXuRQf+r7SBKf7Yy2tgeEngslp9HzPy/QcmUBtS8rWQSA12
JwbN/g1gAgGQEHy5bkugKEiT513B8rOA6/ms47ZPnmRnYFqJActPk/9rl+3dRBA6
AqLw4ru2DAsZ9SAAncsHTGNT19Kg2Vqml9IPrGAzD/6uxQ1vBThBkOyI4t4UNP2v
JQM9LfxKkaiYZp/g0iIhueraPy0dCVS/KfsmDvZCLTWYu0RJs4rJpc3SSktZVPTV
b1KA3/sBx7V9oXmB7ZfqlJsAb2lYZi7sxkgJ
-----END CERTIFICATE-----
Generated at Fri Apr 19 22:22:37 2024 by rpki-client on console-fra.rpki-client.org