Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0luQuJgbWR11p-k14TBKdAdWAv0.cer
File: 0luQuJgbWR11p-k14TBKdAdWAv0.cer (raw, json)
Hash identifier: tdT19cFQAGNXUl7KUh+CP24O0DZqx+Py26J00OEKLFk=
Subject key identifier: D2:5B:90:B8:98:1B:59:1D:75:A7:E9:35:E1:30:4A:74:07:56:02:FD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DAC6E561BE21BA58AB29AEAF7CD888
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 205798
IP: 193.141.109.0/24
IP: 193.141.121.0/24
IP: 193.141.177.0/24
IP: 193.142.3.0/24
IP: 2a0f:eec0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:c6:e5:61:be:21:ba:58:ab:29:ae:af:7c:d8:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d25b90b8981b591d75a7e935e1304a74075602fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6b:d0:72:da:75:a1:71:23:48:3a:97:6e:a9:
32:5e:f3:7f:2d:cd:e3:43:77:1b:8e:92:38:45:66:
7a:01:d6:60:fe:1c:47:c8:5b:41:91:b3:ca:cf:1c:
a2:2a:76:c3:4d:7f:f0:7b:4f:7c:9c:4c:25:d3:a1:
22:c2:78:93:2d:4c:ed:71:b8:a3:62:e9:c2:93:2f:
31:6b:24:5d:2e:79:77:64:cc:40:76:83:38:ba:77:
fb:0a:45:86:b7:18:04:11:af:1c:8c:e1:1e:e0:fe:
0c:be:97:da:85:21:6e:1a:28:9d:2d:b1:8a:96:dd:
65:8b:4a:57:68:42:09:47:c2:f5:51:2f:16:c2:6b:
15:92:a3:01:81:03:66:08:3a:38:f1:44:39:ce:1f:
dc:a3:39:21:81:18:9b:45:91:aa:71:e4:7b:16:bc:
ad:f3:ca:c4:a7:77:7c:3c:40:0f:85:53:c6:45:e3:
29:41:ad:7c:82:8d:0b:c3:ea:c7:52:6a:7c:8e:54:
22:b2:25:a6:39:83:1f:bc:a9:e4:52:31:13:29:07:
7c:38:46:cd:d7:e2:f3:40:48:db:44:7c:28:5f:76:
39:09:a6:2c:63:c9:05:e2:69:1a:22:8a:2f:8a:78:
05:ff:78:5b:60:21:3b:06:64:14:de:20:94:c6:53:
3a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:5B:90:B8:98:1B:59:1D:75:A7:E9:35:E1:30:4A:74:07:56:02:FD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.141.109.0/24
193.141.121.0/24
193.141.177.0/24
193.142.3.0/24
IPv6:
2a0f:eec0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205798
Signature Algorithm: sha256WithRSAEncryption
45:6f:9d:c7:ec:e2:6f:58:dc:fa:f2:5c:ac:f0:ea:76:36:7f:
8b:b3:b0:91:b5:58:05:5f:fc:77:a8:04:bc:78:49:3d:6d:52:
fd:43:99:e2:f8:c5:b8:74:8b:1f:a1:5a:84:7a:2c:88:c8:a9:
3f:3e:a0:d0:0c:2e:fa:63:4d:34:37:ad:15:cf:3b:86:85:1d:
f7:19:9e:77:80:d0:05:14:8c:65:69:5e:bd:1c:84:ac:b8:8f:
9f:11:24:94:0b:de:fe:81:f1:d6:9b:34:e6:4b:87:90:b5:2d:
2c:a6:8a:b8:95:5b:0e:4b:51:85:c5:f1:54:38:50:39:74:94:
0b:b1:74:0e:56:60:cf:8c:9b:45:aa:e8:d7:b0:e1:ca:98:4b:
d6:1f:2d:70:be:c3:af:41:06:93:44:4f:f3:23:b0:0d:9a:4f:
7b:e9:c5:18:73:60:7d:26:b2:1d:eb:8d:1f:2e:83:e7:e4:2d:
a4:09:b8:0a:7b:58:36:2d:81:38:32:a3:0c:76:12:08:22:9a:
52:5f:e7:84:1c:95:60:3c:2f:76:8a:16:ec:02:5e:62:f8:99:
7d:fe:51:3f:0d:9b:b9:67:be:cf:05:70:35:36:a1:a5:6e:36:
4e:e6:8f:c2:89:c7:a9:ac:2b:13:d7:5f:02:d1:ab:a7:6b:71:
96:d5:fa:50
-----BEGIN CERTIFICATE-----
MIIFtTCCBJ2gAwIBAgISAYzC2sblYb4hulirKa6vfNiIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDIyOTI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjViOTBiODk4MWI1OTFkNzVhN2U5MzVlMTMwNGE3NDA3NTYwMmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmvQctp1oXEjSDqXbqkyXvN/Lc3j
Q3cbjpI4RWZ6AdZg/hxHyFtBkbPKzxyiKnbDTX/we098nEwl06EiwniTLUztcbij
YunCky8xayRdLnl3ZMxAdoM4unf7CkWGtxgEEa8cjOEe4P4MvpfahSFuGiidLbGK
lt1li0pXaEIJR8L1US8WwmsVkqMBgQNmCDo48UQ5zh/cozkhgRibRZGqceR7Fryt
88rEp3d8PEAPhVPGReMpQa18go0Lw+rHUmp8jlQisiWmOYMfvKnkUjETKQd8OEbN
1+LzQEjbRHwoX3Y5CaYsY8kF4mkaIoovingF/3hbYCE7BmQU3iCUxlM6yQIDAQAB
o4ICwTCCAr0wHQYDVR0OBBYEFNJbkLiYG1kddafpNeEwSnQHVgL9MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q5LzJjZTUy
MC1lYzA3LTQ1ZWYtYjU4Ny1hMmFiZGFkZjVmOTAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDkvMmNlNTIw
LWVjMDctNDVlZi1iNTg3LWEyYWJkYWRmNWY5MC8xLzBsdVF1SmdiV1IxMXAtazE0
VEJLZEFkV0F2MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF
BwEHAQH/BDEwLzAeBAIAATAYAwQAwY1tAwQAwY15AwQAwY2xAwQAwY4DMA0EAgAC
MAcDBQMqD+7AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMj5jANBgkqhkiG9w0B
AQsFAAOCAQEARW+dx+zib1jc+vJcrPDqdjZ/i7OwkbVYBV/8d6gEvHhJPW1S/UOZ
4vjFuHSLH6FahHosiMipPz6g0Awu+mNNNDetFc87hoUd9xmed4DQBRSMZWlevRyE
rLiPnxEklAve/oHx1ps05kuHkLUtLKaKuJVbDktRhcXxVDhQOXSUC7F0DlZgz4yb
Raro17DhyphL1h8tcL7Dr0EGk0RP8yOwDZpPe+nFGHNgfSayHeuNHy6D5+QtpAm4
CntYNi2BODKjDHYSCCKaUl/nhByVYDwvdooW7AJeYviZff5RPw2buWe+zwVwNTah
pW42TuaPwonHqawrE9dfAtGrp2txltX6UA==
-----END CERTIFICATE-----
Generated at Thu Apr 25 03:56:55 2024 by rpki-client on console-fra.rpki-client.org