Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
File: 0lgUed7jtZlPEcnZVkYxv1pATAc.cer (raw, json)
Hash identifier: s+huV72rjey4G3OCgL6tKLm7Wbi5RZzt6FbjSVTqrSQ=
Subject key identifier: D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC870A7C4EEEEFF20D7594BF7652BB8A5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:31:15 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 134.59.0.0/16
IP: 157.169.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:a7:c4:ee:ee:ff:20:d7:59:4b:f7:65:2b:b8:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2581479dee3b5994f11c9d9564631bf5a404c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ed:fd:8e:67:eb:4c:55:0d:81:a5:ae:48:1d:
88:0b:c2:be:ae:e9:ef:c9:43:d1:a8:33:46:99:a4:
0b:69:3b:3c:ba:d3:0a:7e:20:fd:f5:87:0d:76:08:
b9:31:9a:84:55:d1:d1:4d:c6:ec:fa:80:02:e5:c5:
f9:ec:bd:dd:5f:d3:78:f6:96:c0:fc:3f:ec:cc:27:
a1:d8:82:c9:05:bc:e0:7d:16:71:c4:ca:1f:ad:51:
24:61:36:34:46:94:18:39:0f:bf:04:c8:e5:97:b2:
b0:51:d7:99:58:c9:16:88:52:c6:9c:c7:d5:4a:c6:
3d:7c:87:5c:19:5e:6e:a8:47:5c:46:c5:25:ad:08:
df:b9:da:04:91:d4:55:3b:36:72:b0:9d:43:10:8d:
64:2d:4e:ff:20:86:fe:d3:a0:59:63:70:a0:a3:d6:
fa:79:a6:8a:28:74:a7:ce:c2:9e:4e:be:0f:3f:5d:
7d:11:27:ad:3a:95:c0:e4:7c:30:70:a8:4c:7f:c8:
f1:a3:c4:9a:fa:f3:5a:2a:d1:ee:dd:5a:e2:1a:ab:
f9:1b:0d:78:30:6d:61:cd:75:72:42:26:73:28:63:
47:40:74:c7:2c:f0:02:a8:b7:0f:85:cf:9d:2e:b1:
c7:be:61:81:39:db:72:2c:bc:e8:1e:a8:ed:37:0f:
2c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.59.0.0/16
157.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8e:5f:20:8c:c0:37:bb:d6:ed:14:5e:18:f9:4c:13:ac:ae:4c:
44:2d:a0:0c:da:9b:77:f3:86:01:83:3a:b2:73:c1:c4:49:03:
88:1d:47:3a:89:70:04:26:67:ca:fd:52:f6:06:19:ab:a0:ce:
34:1d:d4:3e:76:9d:08:ef:66:8b:a2:c0:11:43:b9:6b:20:41:
23:c7:fd:f1:5f:0c:70:55:14:f4:71:f1:3a:be:2c:d4:82:54:
53:5b:59:46:67:fa:78:ae:2f:a0:2e:cc:2d:10:7f:67:a8:3f:
c8:1c:34:9b:1a:38:2f:9d:d6:b9:db:7a:d1:e7:49:b7:1c:7f:
59:08:26:b9:cd:f9:7a:65:8d:2a:8f:68:8c:75:33:d9:ca:07:
2a:c7:95:95:e3:a9:eb:a2:64:6a:7b:29:78:73:eb:58:85:4a:
19:3a:ad:be:54:b1:9a:8f:bd:08:7b:20:35:09:3e:9b:71:f9:
3a:7b:37:ba:b4:33:4c:06:55:e5:6a:cf:f8:9c:54:8e:f5:77:
b4:1d:d1:d3:ea:61:1f:96:c8:28:26:dd:94:93:24:df:1b:bb:
67:13:a5:3d:d9:d1:d6:0d:8e:e0:74:f5:2c:8c:0c:e5:8f:1e:
ea:3a:af:b9:b6:58:cc:d5:8a:65:ff:f7:81:bc:d1:2f:49:51:
3a:e0:cb:a7
-----BEGIN CERTIFICATE-----
MIIFfDCCBGSgAwIBAgISAYzIcKfE7u7/INdZS/dlK7ilMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDQzMTE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjU4MTQ3OWRlZTNiNTk5NGYxMWM5ZDk1NjQ2MzFiZjVhNDA0YzA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyu39jmfrTFUNgaWuSB2IC8K+runv
yUPRqDNGmaQLaTs8utMKfiD99YcNdgi5MZqEVdHRTcbs+oAC5cX57L3dX9N49pbA
/D/szCeh2ILJBbzgfRZxxMofrVEkYTY0RpQYOQ+/BMjll7KwUdeZWMkWiFLGnMfV
SsY9fIdcGV5uqEdcRsUlrQjfudoEkdRVOzZysJ1DEI1kLU7/IIb+06BZY3Cgo9b6
eaaKKHSnzsKeTr4PP119ESetOpXA5HwwcKhMf8jxo8Sa+vNaKtHu3VriGqv5Gw14
MG1hzXVyQiZzKGNHQHTHLPACqLcPhc+dLrHHvmGBOdtyLLzoHqjtNw8siwIDAQAB
o4ICiDCCAoQwHQYDVR0OBBYEFNJYFHne47WZTxHJ2VZGMb9aQEwHMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E3LzMzNmRi
My03MWE4LTQzZWYtOWI5Zi02YTZjNmUwOTYwNzEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcvMzM2ZGIz
LTcxYTgtNDNlZi05YjlmLTZhNmM2ZTA5NjA3MS8xLzBsZ1VlZDdqdFpsUEVjblpW
a1l4djFwQVRBYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCMGCCsGAQUF
BwEHAQH/BBQwEjAQBAIAATAKAwMAhjsDAwCdqTANBgkqhkiG9w0BAQsFAAOCAQEA
jl8gjMA3u9btFF4Y+UwTrK5MRC2gDNqbd/OGAYM6snPBxEkDiB1HOolwBCZnyv1S
9gYZq6DONB3UPnadCO9mi6LAEUO5ayBBI8f98V8McFUU9HHxOr4s1IJUU1tZRmf6
eK4voC7MLRB/Z6g/yBw0mxo4L53Wudt60edJtxx/WQgmuc35emWNKo9ojHUz2coH
KseVleOp66JkanspeHPrWIVKGTqtvlSxmo+9CHsgNQk+m3H5Ons3urQzTAZV5WrP
+JxUjvV3tB3R0+phH5bIKCbdlJMk3xu7ZxOlPdnR1g2O4HT1LIwM5Y8e6jqvubZY
zNWKZf/3gbzRL0lROuDLpw==
-----END CERTIFICATE-----
Generated at Fri May 3 12:19:27 2024 by rpki-client on console-fra.rpki-client.org