Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0bS-sKan4ShKv0OFNIz0hhALn4A.cer
File: 0bS-sKan4ShKv0OFNIz0hhALn4A.cer (raw, json)
Hash identifier: Or+afvUy0swPLnN72Hwi7qf/7flEhEObrHw2j9sYqbw=
Subject key identifier: D1:B4:BE:B0:A6:A7:E1:28:4A:BF:43:85:34:8C:F4:86:10:0B:9F:80
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8714858F367510A9D9EA8528214198C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:31:56 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 41358
AS: 41907
IP: 194.34.198.0/24
IP: 195.74.92.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 02:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:48:58:f3:67:51:0a:9d:9e:a8:52:82:14:19:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:31:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d1b4beb0a6a7e1284abf4385348cf486100b9f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:39:cd:13:25:1e:65:ff:b0:06:4d:9d:21:89:
2e:80:b9:50:71:4d:2f:34:8d:f4:b2:22:2b:8f:fc:
10:f8:fb:a8:0e:c9:c8:c5:e9:29:4c:2d:e8:61:e0:
06:c0:2d:9d:07:76:9e:a5:e0:71:5a:6c:69:2e:68:
4e:8a:78:68:e1:2d:0a:7e:94:2f:c1:17:b2:e6:e2:
c7:cc:4e:05:61:67:9d:d1:0a:b1:6d:db:38:17:fe:
25:a0:32:5c:fb:e5:7b:7c:c5:bf:af:57:9f:0d:0e:
dd:1d:26:ed:02:d2:e5:e2:51:64:ef:d0:7c:1e:43:
6b:a3:1a:76:82:19:b6:1d:9d:ef:ac:eb:fc:2c:b6:
02:fd:7d:6f:62:7d:6f:46:be:33:b1:11:53:f5:90:
fa:f9:9d:7c:98:83:f8:3c:47:8f:22:ce:3e:34:8d:
04:1b:df:4a:c3:10:34:81:9c:0b:3e:32:5c:a5:22:
de:a5:d2:0c:26:cf:71:64:65:c1:82:3a:59:d4:c9:
18:39:04:18:5b:34:21:7d:4b:1c:da:62:cd:f1:90:
ba:61:3b:2f:54:22:f2:02:2f:a3:46:5d:5a:54:a8:
aa:2d:ec:cb:87:ce:bf:70:4f:23:09:12:a4:23:9e:
c5:21:08:40:2b:5e:28:cd:f3:9d:91:57:fe:4d:d9:
7b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B4:BE:B0:A6:A7:E1:28:4A:BF:43:85:34:8C:F4:86:10:0B:9F:80
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.198.0/24
195.74.92.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41358
41907
Signature Algorithm: sha256WithRSAEncryption
8a:bc:7d:bc:97:d5:04:88:70:a7:bb:c2:fb:5e:4b:77:77:c0:
b3:3c:94:04:ef:0a:b8:b5:13:8a:17:d4:4d:a7:3b:d4:0e:b5:
d0:b2:c0:7d:0d:a7:47:8b:29:62:4a:1e:25:2e:14:f8:98:75:
1e:94:7a:c6:f5:1a:39:6a:88:88:71:76:9f:cd:b0:23:1c:b3:
18:c4:af:8d:89:44:90:09:1e:b1:29:ca:0f:9e:52:cb:c2:7b:
50:3f:de:93:c0:6a:e2:ea:10:4d:a8:24:26:3a:bb:bf:d3:83:
4b:8a:b8:dd:2d:b8:d9:fb:bc:33:63:2c:ca:8e:f3:ac:15:09:
df:5e:6a:4d:d6:e8:5a:f5:38:9e:14:5d:0d:b2:46:98:79:59:
93:7f:ae:26:bb:c2:3a:e6:72:a4:e4:82:55:84:4a:f8:63:42:
94:1d:1f:e0:83:4d:65:e9:3c:5d:98:11:98:b3:82:6e:40:25:
f7:a6:b2:83:6b:ce:85:b2:05:a3:d2:ee:f7:2a:cd:03:ac:e0:
75:0d:8b:11:85:bb:a1:d6:7e:04:c3:51:56:c3:fa:15:1f:b9:
cd:fa:15:c9:db:98:51:ef:ae:3b:b3:4b:f1:e2:9a:dd:47:e7:
0a:23:0f:15:fe:b4:43:58:0e:dc:c9:07:77:c4:d2:16:d3:4d:
4f:a7:57:38
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgISAYzIcUhY82dRCp2eqFKCFBmMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDQzMTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMWI0YmViMGE2YTdlMTI4NGFiZjQzODUzNDhjZjQ4NjEwMGI5ZjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DnNEyUeZf+wBk2dIYkugLlQcU0v
NI30siIrj/wQ+PuoDsnIxekpTC3oYeAGwC2dB3aepeBxWmxpLmhOinho4S0KfpQv
wRey5uLHzE4FYWed0Qqxbds4F/4loDJc++V7fMW/r1efDQ7dHSbtAtLl4lFk79B8
HkNroxp2ghm2HZ3vrOv8LLYC/X1vYn1vRr4zsRFT9ZD6+Z18mIP4PEePIs4+NI0E
G99KwxA0gZwLPjJcpSLepdIMJs9xZGXBgjpZ1MkYOQQYWzQhfUsc2mLN8ZC6YTsv
VCLyAi+jRl1aVKiqLezLh86/cE8jCRKkI57FIQhAK14ozfOdkVf+Tdl7mwIDAQAB
o4ICqzCCAqcwHQYDVR0OBBYEFNG0vrCmp+EoSr9DhTSM9IYQC5+AMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQzL2Y4ZDk4
ZC0xZmZlLTQ2MzktYjM3My05YmExMTcyYTY4YzAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDMvZjhkOThk
LTFmZmUtNDYzOS1iMzczLTliYTExNzJhNjhjMC8xLzBiUy1zS2FuNFNoS3YwT0ZO
SXowaGhBTG40QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQAwiLGAwQAw0pcMB8GCCsGAQUFBwEIAQH/BBAw
DqAMMAoCAwChjgIDAKOzMA0GCSqGSIb3DQEBCwUAA4IBAQCKvH28l9UEiHCnu8L7
Xkt3d8CzPJQE7wq4tROKF9RNpzvUDrXQssB9DadHiyliSh4lLhT4mHUelHrG9Ro5
aoiIcXafzbAjHLMYxK+NiUSQCR6xKcoPnlLLwntQP96TwGri6hBNqCQmOru/04NL
irjdLbjZ+7wzYyzKjvOsFQnfXmpN1uha9TieFF0NskaYeVmTf64mu8I65nKk5IJV
hEr4Y0KUHR/gg01l6TxdmBGYs4JuQCX3prKDa86FsgWj0u73Ks0DrOB1DYsRhbuh
1n4Ew1FWw/oVH7nN+hXJ25hR7647s0vx4prdR+cKIw8V/rRDWA7cyQd3xNIW001P
p1c4
-----END CERTIFICATE-----
Generated at Wed Apr 24 06:32:44 2024 by rpki-client on console-ams.rpki-client.org