Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0YiojVldwu2ML5I5ZFxOjF5zfTE.cer
File: 0YiojVldwu2ML5I5ZFxOjF5zfTE.cer (raw, json)
Hash identifier: vFOiA01w/GWlHwQcZ34vaajpp/xmXGHPfLk4RA0oQ3c=
Subject key identifier: D1:88:A8:8D:59:5D:C2:ED:8C:2F:92:39:64:5C:4E:8C:5E:73:7D:31
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E9A74B8D90B5B69EF5B81B7393EF2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:09 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.232.98.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:9a:74:b8:d9:0b:5b:69:ef:5b:81:b7:39:3e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d188a88d595dc2ed8c2f9239645c4e8c5e737d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:27:77:2d:95:9f:65:cf:85:87:4c:96:0c:31:
0e:dd:49:8a:8e:13:ae:e3:2f:51:dc:c4:9e:b2:0a:
30:41:c2:e8:df:78:47:ca:55:83:af:a1:2c:bd:a6:
31:3e:8b:4f:f2:bd:ab:03:34:62:97:74:9a:9b:4f:
65:97:2b:70:91:06:02:b2:53:ec:52:e0:bb:4b:fb:
21:65:10:e7:4e:eb:1c:1d:2b:b0:7e:2e:9f:c4:e8:
c2:da:bf:45:d1:56:b8:2a:2a:10:bb:04:1a:a6:76:
88:55:de:b1:22:02:d3:bb:43:59:5c:15:d3:fe:c0:
fd:1b:67:71:dc:dd:ae:e1:32:ce:69:0c:a4:71:2d:
b5:e8:f2:84:f5:56:80:53:65:ac:8f:0e:be:25:e2:
1e:9b:d1:6b:0e:5c:a1:06:07:a4:62:44:52:9c:03:
d0:29:84:4b:3a:62:ae:b7:c1:c7:9b:82:a4:76:b4:
cd:3a:1f:46:e5:f8:7d:37:ed:ef:bf:fd:de:ed:51:
42:88:17:19:08:a7:81:9c:e3:b0:2b:fc:f4:fc:3b:
f0:a5:a5:04:db:e0:64:51:d7:50:9d:0f:89:6d:5e:
ba:1a:17:b6:88:d5:24:51:1e:58:4a:9e:4f:6f:1d:
0f:c1:16:ff:cf:16:68:b8:58:86:7b:9d:72:54:2d:
5a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:88:A8:8D:59:5D:C2:ED:8C:2F:92:39:64:5C:4E:8C:5E:73:7D:31
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.98.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:3d:1a:fa:89:71:c6:25:58:b2:6d:c3:63:8b:c1:52:a2:83:
dc:b0:a1:d7:10:ee:ea:bc:85:86:1c:6b:82:70:ef:ce:9a:4e:
11:ed:a7:de:d0:1a:0c:1d:96:9f:92:ff:ff:65:59:03:e4:93:
cf:94:35:41:ff:20:73:24:1e:ff:b4:6b:e7:b4:70:e8:8a:0b:
25:e3:81:e7:27:9e:2c:bb:93:f4:72:86:76:00:a1:28:e6:a9:
ad:82:ed:54:c7:c2:c1:18:ac:fc:96:be:ea:21:8e:8f:5b:70:
4c:c9:34:f7:65:0a:8a:54:50:e3:03:77:33:b3:04:f0:7d:7d:
17:5d:24:e9:37:35:1b:a3:fc:04:42:1e:e8:25:dc:35:ad:eb:
b1:91:b7:22:59:44:00:3a:b6:5a:c4:bc:70:82:27:e7:78:c6:
8a:9e:1b:e7:83:72:7f:7b:65:aa:7d:28:d9:bb:d2:9d:5a:46:
89:cd:d9:99:18:e7:28:69:7d:a6:7e:02:af:08:fc:0b:32:fb:
78:32:e4:82:29:23:1f:24:89:0e:4f:b9:95:fa:57:85:38:bf:
e7:d0:10:39:00:3f:45:4a:42:c7:40:b6:a7:6c:47:73:e5:b0:
1c:95:9e:9f:fc:db:9d:57:05:62:a2:29:50:18:4f:10:f9:30:
ac:5c:77:05
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzFbpp0uNkLW2nvW4G3OT7yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTQzMDA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTg4YTg4ZDU5NWRjMmVkOGMyZjkyMzk2NDVjNGU4YzVlNzM3ZDMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Sd3LZWfZc+Fh0yWDDEO3UmKjhOu
4y9R3MSesgowQcLo33hHylWDr6EsvaYxPotP8r2rAzRil3Sam09llytwkQYCslPs
UuC7S/shZRDnTuscHSuwfi6fxOjC2r9F0Va4KioQuwQapnaIVd6xIgLTu0NZXBXT
/sD9G2dx3N2u4TLOaQykcS216PKE9VaAU2Wsjw6+JeIem9FrDlyhBgekYkRSnAPQ
KYRLOmKut8HHm4KkdrTNOh9G5fh9N+3vv/3e7VFCiBcZCKeBnOOwK/z0/DvwpaUE
2+BkUddQnQ+JbV66Ghe2iNUkUR5YSp5Pbx0PwRb/zxZouFiGe51yVC1aTQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFNGIqI1ZXcLtjC+SOWRcToxec30xMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUwLzBjZWUx
OS1hZjBmLTRlOTMtODAxMC1kOTUzZjQ4NTQ3NTcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAvMGNlZTE5
LWFmMGYtNGU5My04MDEwLWQ5NTNmNDg1NDc1Ny8xLzBZaW9qVmxkd3UyTUw1STVa
RnhPakY1emZURS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAuehiMA0GCSqGSIb3DQEBCwUAA4IBAQCNPRr6
iXHGJViybcNji8FSooPcsKHXEO7qvIWGHGuCcO/Omk4R7afe0BoMHZafkv//ZVkD
5JPPlDVB/yBzJB7/tGvntHDoigsl44HnJ54su5P0coZ2AKEo5qmtgu1Ux8LBGKz8
lr7qIY6PW3BMyTT3ZQqKVFDjA3czswTwfX0XXSTpNzUbo/wEQh7oJdw1reuxkbci
WUQAOrZaxLxwgifneMaKnhvng3J/e2WqfSjZu9KdWkaJzdmZGOcoaX2mfgKvCPwL
Mvt4MuSCKSMfJIkOT7mV+leFOL/n0BA5AD9FSkLHQLanbEdz5bAclZ6f/NudVwVi
oilQGE8Q+TCsXHcF
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:16:25 2024 by rpki-client on console-ams.rpki-client.org