Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0jIxAbKVlv9ELTdJNzuOmYM1RnA.cer
File: 0jIxAbKVlv9ELTdJNzuOmYM1RnA.cer (raw, json)
Hash identifier: uVXAgFIlv90Z7XY5kau78v75eSFOMluos5tIfOP4I7I=
Subject key identifier: D2:32:31:01:B2:95:96:FF:44:2D:37:49:37:3B:8E:99:83:35:46:70
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8702C447B397F0E5A177B5DF3F00032
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:30:43 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.152.24.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Dec 2024 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:2c:44:7b:39:7f:0e:5a:17:7b:5d:f3:f0:00:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2323101b29596ff442d3749373b8e9983354670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3f:e3:99:e5:17:f8:1c:03:b2:ed:f1:c6:11:
ed:82:1f:df:b6:58:6e:56:53:33:a2:ab:f9:53:64:
a3:e3:b5:fd:eb:57:e2:9d:44:44:d2:ef:d2:ee:0a:
46:ad:31:52:67:01:87:6c:44:3d:33:18:c6:3a:53:
94:b0:83:01:b3:50:63:ae:57:29:d7:6d:3c:88:35:
16:74:5f:13:41:ca:9c:a0:73:cc:e2:01:8a:a7:2d:
b4:7d:22:32:d3:87:c0:58:30:7e:76:3a:42:18:a0:
26:44:d4:91:5c:3e:ca:f4:e0:13:c8:75:ef:15:be:
83:5b:5d:71:f7:91:88:ee:eb:a4:08:45:2a:ad:98:
9a:73:7a:e6:aa:06:38:4e:3c:7b:f0:38:61:3b:bf:
31:b4:26:a4:5a:0f:73:75:6d:3e:ed:c1:7c:9b:ff:
79:fe:82:08:cb:e4:fc:9e:a5:bb:9a:cc:cb:e9:4e:
6c:96:05:70:bc:8c:25:ec:01:78:ae:61:42:9c:3b:
ba:07:9f:b5:1a:69:45:42:47:3b:38:24:41:54:92:
eb:8c:03:f7:2d:c1:41:8c:60:b7:6e:c6:db:24:e9:
d9:fc:74:ce:cc:da:ce:9b:2d:35:1d:5f:bd:cb:3d:
f6:ae:e9:af:c6:76:27:d5:ed:ca:5f:ba:4e:d2:cd:
c0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:32:31:01:B2:95:96:FF:44:2D:37:49:37:3B:8E:99:83:35:46:70
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.24.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:d6:44:10:a7:7e:34:17:4b:9e:f1:8b:55:1a:1a:be:df:8d:
8e:a3:41:a7:24:0d:91:77:3c:76:32:12:aa:a3:82:fc:a5:f9:
dc:5f:e9:a9:38:d5:ad:13:9f:03:e5:a9:7c:da:a5:7a:0d:c6:
77:a6:78:0f:79:25:a1:42:48:24:a9:68:cd:4b:73:3a:fa:de:
c1:3b:e2:07:70:45:e5:cd:52:4a:0b:08:4e:25:88:17:69:dd:
0b:f6:86:fe:36:a0:5e:54:73:e2:54:72:a4:49:6d:ad:1d:96:
73:a9:71:60:24:9c:25:e8:ba:a9:fa:f0:e5:e5:c8:2f:6c:44:
57:22:86:f8:33:2c:11:df:08:8d:81:ec:63:9f:aa:f6:df:e3:
10:ab:fc:f1:de:93:87:82:53:a5:9e:46:48:b9:48:2c:bd:bb:
47:2e:6e:e3:e5:1c:44:69:55:7a:91:51:63:8d:22:6a:bb:57:
c5:ff:81:38:5a:7b:84:e1:d0:22:6a:94:95:90:a6:68:2f:f6:
bd:7b:93:47:b7:35:ee:06:98:e6:34:40:dc:75:22:9c:7a:98:
2e:d1:a2:e4:bd:ea:9a:cb:ed:be:09:73:4f:15:5d:75:30:98:
35:46:ce:0b:97:96:36:40:bd:c0:be:37:b6:91:d1:34:2e:05:
6c:36:49:57
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzIcCxEezl/DloXe13z8AAyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDQzMDQzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjMyMzEwMWIyOTU5NmZmNDQyZDM3NDkzNzNiOGU5OTgzMzU0NjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsj/jmeUX+BwDsu3xxhHtgh/ftlhu
VlMzoqv5U2Sj47X961finURE0u/S7gpGrTFSZwGHbEQ9MxjGOlOUsIMBs1Bjrlcp
1208iDUWdF8TQcqcoHPM4gGKpy20fSIy04fAWDB+djpCGKAmRNSRXD7K9OATyHXv
Fb6DW11x95GI7uukCEUqrZiac3rmqgY4Tjx78DhhO78xtCakWg9zdW0+7cF8m/95
/oIIy+T8nqW7mszL6U5slgVwvIwl7AF4rmFCnDu6B5+1GmlFQkc7OCRBVJLrjAP3
LcFBjGC3bsbbJOnZ/HTOzNrOmy01HV+9yz32rumvxnYn1e3KX7pO0s3AyQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFNIyMQGylZb/RC03STc7jpmDNUZwMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNlLzViNDE4
NS1iMDgwLTQ5OGUtOGNjNy02YTZhZjViNzRkMzgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2UvNWI0MTg1
LWIwODAtNDk4ZS04Y2M3LTZhNmFmNWI3NGQzOC8xLzBqSXhBYktWbHY5RUxUZEpO
enVPbVlNMVJuQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCLZgYMA0GCSqGSIb3DQEBCwUAA4IBAQB61kQQ
p340F0ue8YtVGhq+342Oo0GnJA2Rdzx2MhKqo4L8pfncX+mpONWtE58D5al82qV6
DcZ3pngPeSWhQkgkqWjNS3M6+t7BO+IHcEXlzVJKCwhOJYgXad0L9ob+NqBeVHPi
VHKkSW2tHZZzqXFgJJwl6Lqp+vDl5cgvbERXIob4MywR3wiNgexjn6r23+MQq/zx
3pOHglOlnkZIuUgsvbtHLm7j5RxEaVV6kVFjjSJqu1fF/4E4WnuE4dAiapSVkKZo
L/a9e5NHtzXuBpjmNEDcdSKcepgu0aLkveqay+2+CXNPFV11MJg1Rs4Ll5Y2QL3A
vje2kdE0LgVsNklX
-----END CERTIFICATE-----
Generated at Thu Dec 26 16:48:28 2024 by rpki-client on console-fra.rpki-client.org