Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.cer
File: 0nAqOyfOm9BN3KKMIdnQ9f8yqQk.cer (raw, json)
Hash identifier: 7d0Fu7u++VdeVGAc0fr+c2ynR5eCCFWNHYxKUUjoFi8=
Subject key identifier: D2:70:2A:3B:27:CE:9B:D0:4D:DC:A2:8C:21:D9:D0:F5:FF:32:A9:09
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB4A8B7F835A147FFA936197082BA8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2b/49f528-e72f-4da7-902e-6975cadb2262/1/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2b/49f528-e72f-4da7-902e-6975cadb2262/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:30:00 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 42574
AS: 47565
IP: 31.41.192.0/21
IP: 91.189.160.0/21
IP: 91.201.204.0/22
IP: 91.203.0.0/22
IP: 94.232.232.0/21
IP: 193.33.100.0/23
IP: 194.146.200.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:4a:8b:7f:83:5a:14:7f:fa:93:61:97:08:2b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2702a3b27ce9bd04ddca28c21d9d0f5ff32a909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:96:30:be:a6:f9:ef:a0:2e:b2:ef:af:5e:1b:
68:91:eb:5e:f7:c9:a9:a3:35:4c:e9:f1:cf:3d:1b:
78:16:2e:4d:2c:ed:d6:5c:09:2b:88:38:84:f0:af:
75:d1:63:9a:71:bb:28:24:57:ee:10:5b:3d:99:c0:
35:35:76:77:65:3d:3c:21:e8:9e:a9:c6:fc:f3:56:
5b:0a:88:40:fd:6d:74:18:d8:2f:97:2c:f2:7f:5c:
93:fa:0d:ec:e8:02:c5:ce:2b:c6:1c:0c:aa:a0:68:
91:df:64:4f:ff:25:9e:3d:d2:22:5a:d3:68:03:2e:
75:df:fa:28:88:12:a5:78:87:93:3f:ee:32:b5:db:
9c:de:36:12:c5:ce:80:6f:72:89:85:ae:20:61:c7:
71:6a:1a:05:b1:41:7b:56:98:6c:95:43:b9:4b:67:
92:98:69:91:da:55:fd:c3:5c:f1:21:13:66:ca:51:
9d:fb:eb:81:b6:f7:55:15:2e:86:97:6e:81:07:14:
a6:a9:0e:e9:a9:92:6c:4c:67:85:e6:03:8d:65:7f:
32:59:f0:c7:20:b6:91:27:da:1b:69:87:c0:68:39:
2e:13:37:2a:e6:13:a7:fe:46:0d:c6:67:dc:a3:22:
76:36:0e:87:2f:d7:fb:29:06:3d:9d:01:83:d9:7c:
0a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:70:2A:3B:27:CE:9B:D0:4D:DC:A2:8C:21:D9:D0:F5:FF:32:A9:09
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/49f528-e72f-4da7-902e-6975cadb2262/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/49f528-e72f-4da7-902e-6975cadb2262/1/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.192.0/21
91.189.160.0/21
91.201.204.0/22
91.203.0.0/22
94.232.232.0/21
193.33.100.0/23
194.146.200.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42574
47565
Signature Algorithm: sha256WithRSAEncryption
58:07:e2:24:df:e1:7c:b2:29:59:79:8c:8c:01:c9:5c:a5:63:
90:39:fa:b5:43:af:19:e0:82:60:d2:4c:7e:3e:61:91:a6:4c:
c9:37:1d:90:f0:eb:c8:62:7c:0e:b3:2f:a2:a3:6d:6f:03:fc:
b6:14:8f:22:fa:37:3a:49:8b:fc:7d:90:ed:38:d7:82:65:e7:
af:70:7b:11:9b:64:d4:70:d3:04:df:6f:87:ee:df:03:23:71:
ba:1a:84:0d:aa:69:4b:2a:bd:10:1a:b1:4a:ff:43:57:28:aa:
39:88:36:b8:a1:65:60:ee:30:79:0a:cb:aa:08:7d:76:84:11:
f5:98:d6:d7:a4:94:e9:83:9e:c0:03:73:67:7b:56:91:70:6c:
83:96:2a:f8:81:62:52:2b:ad:21:0b:b7:4a:23:e3:3e:16:97:
e8:01:d7:79:89:48:6f:3d:4f:b2:d7:62:1c:4d:0c:17:58:da:
1b:e4:08:d6:8f:46:3b:f6:5c:0a:11:21:b7:df:f4:3f:c8:c8:
be:b1:d3:c4:1b:d4:54:e4:62:84:84:6f:bc:4a:0d:13:4c:4a:
a1:f6:1d:d0:30:e5:c7:e7:a4:4a:27:90:5d:ff:2b:53:e1:f8:
af:40:05:1d:09:8d:5f:ab:52:a7:f7:dd:e0:47:0b:2c:6b:7c:
f6:b6:75:07
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgISAYzC20qLf4NaFH/6k2GXCCuoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDIzMDAwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjcwMmEzYjI3Y2U5YmQwNGRkY2EyOGMyMWQ5ZDBmNWZmMzJhOTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZYwvqb576Ausu+vXhtokete98mp
ozVM6fHPPRt4Fi5NLO3WXAkriDiE8K910WOacbsoJFfuEFs9mcA1NXZ3ZT08Ieie
qcb881ZbCohA/W10GNgvlyzyf1yT+g3s6ALFzivGHAyqoGiR32RP/yWePdIiWtNo
Ay513/ooiBKleIeTP+4ytduc3jYSxc6Ab3KJha4gYcdxahoFsUF7VphslUO5S2eS
mGmR2lX9w1zxIRNmylGd++uBtvdVFS6Gl26BBxSmqQ7pqZJsTGeF5gONZX8yWfDH
ILaRJ9obaYfAaDkuEzcq5hOn/kYNxmfcoyJ2Ng6HL9f7KQY9nQGD2XwK7wIDAQAB
o4ICyTCCAsUwHQYDVR0OBBYEFNJwKjsnzpvQTdyijCHZ0PX/MqkJMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJiLzQ5ZjUy
OC1lNzJmLTRkYTctOTAyZS02OTc1Y2FkYjIyNjIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIvNDlmNTI4
LWU3MmYtNGRhNy05MDJlLTY5NzVjYWRiMjI2Mi8xLzBuQXFPeWZPbTlCTjNLS01J
ZG5ROWY4eXFRay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEMGCCsGAQUF
BwEHAQH/BDQwMjAwBAIAATAqAwQDHynAAwQDW72gAwQCW8nMAwQCW8sAAwQDXujo
AwQBwSFkAwQCwpLIMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwCmTgIDALnNMA0G
CSqGSIb3DQEBCwUAA4IBAQBYB+Ik3+F8silZeYyMAclcpWOQOfq1Q68Z4IJg0kx+
PmGRpkzJNx2Q8OvIYnwOsy+io21vA/y2FI8i+jc6SYv8fZDtONeCZeevcHsRm2TU
cNME32+H7t8DI3G6GoQNqmlLKr0QGrFK/0NXKKo5iDa4oWVg7jB5CsuqCH12hBH1
mNbXpJTpg57AA3Nne1aRcGyDlir4gWJSK60hC7dKI+M+FpfoAdd5iUhvPU+y12Ic
TQwXWNob5AjWj0Y79lwKESG33/Q/yMi+sdPEG9RU5GKEhG+8Sg0TTEqh9h3QMOXH
56RKJ5Bd/ytT4fivQAUdCY1fq1Kn993gRwssa3z2tnUH
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:34:37 2024 by rpki-client on console-ams.rpki-client.org