Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.cer
File: 1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.cer (raw, json)
Hash identifier: 5h96mHDt7p6Ku1bbOZywYE+Lz4IvCRPXd2UsPj5LQWM=
Subject key identifier: F8:CF:DC:0E:5E:DB:1C:C3:23:F9:34:4F:E2:82:7C:79:3E:95:AC:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC50119F5E79ECF6E1DE1C0455058029E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/17/eda8ef-36d3-45d4-911e-5fa90c13e1b7/1/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/17/eda8ef-36d3-45d4-911e-5fa90c13e1b7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.113.20.0/23
IP: 2001:678:b38::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Apr 2024 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:19:f5:e7:9e:cf:6e:1d:e1:c0:45:50:58:02:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f8cfdc0e5edb1cc323f9344fe2827c793e95ac6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0a:ed:93:fb:fa:ad:82:e4:61:45:24:c0:f0:
6a:d4:a6:0c:69:19:52:4b:f3:33:d1:8b:80:cb:61:
d2:bf:a8:e0:30:ae:4a:5b:d5:80:3a:1b:7e:be:f5:
46:bc:90:24:3c:d5:81:16:57:c2:1b:c7:ad:9b:35:
04:df:2c:c4:19:96:6c:2f:84:59:bc:c7:e8:3c:7f:
76:0f:3d:3e:47:14:62:73:c6:0c:9e:12:00:55:5b:
a7:33:f2:9f:98:2b:f6:02:26:36:c6:74:51:64:db:
ee:58:5e:c4:68:fd:1c:ac:0d:97:5e:90:2e:58:92:
7f:21:13:88:23:48:94:a2:9f:ff:b4:f7:10:d3:f3:
05:f6:69:7b:39:55:7e:dd:0c:6d:e3:25:3d:86:89:
0d:b1:d5:80:8d:5d:95:6d:28:d6:ab:ff:1c:7d:b5:
70:90:d3:c8:99:9a:ae:04:b8:22:3c:8a:b8:dd:35:
4a:95:38:96:73:b8:92:7f:a6:83:89:73:a5:33:17:
f9:bc:b9:5b:a4:89:6f:61:8b:31:42:cd:66:9b:17:
12:25:c6:53:06:f0:4f:b8:e3:19:b0:98:cb:38:ab:
40:e7:8e:63:31:7a:59:1b:3a:45:56:a7:99:3d:90:
09:78:70:58:7a:ce:7f:64:af:5d:04:dc:3e:1f:1a:
17:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:CF:DC:0E:5E:DB:1C:C3:23:F9:34:4F:E2:82:7C:79:3E:95:AC:6F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/eda8ef-36d3-45d4-911e-5fa90c13e1b7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/eda8ef-36d3-45d4-911e-5fa90c13e1b7/1/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.20.0/23
IPv6:
2001:678:b38::/48
Signature Algorithm: sha256WithRSAEncryption
12:60:58:de:93:68:c6:c8:8a:fc:f4:fb:b0:9f:be:a7:bd:2d:
aa:e7:7c:df:86:55:0c:bd:71:24:17:32:46:51:c3:45:8d:35:
7a:15:9d:3f:b3:44:41:1a:a8:0e:05:d5:85:aa:c1:06:8c:e6:
94:9b:53:86:2f:67:26:a8:2c:31:f0:d1:05:28:0b:b0:33:56:
d8:8d:42:19:58:49:b3:30:6b:66:cc:c3:54:2c:3d:b4:eb:ae:
67:47:81:62:dc:1a:0c:51:c4:d6:1d:62:08:b0:71:0d:4f:37:
6f:e2:4c:dd:25:d8:48:26:01:15:87:9f:60:8c:24:f3:d7:8b:
83:6b:e8:a9:32:15:47:81:e4:bd:5c:99:50:a7:fb:4c:78:1c:
ed:7e:a4:1f:19:97:d9:ed:b3:01:7f:74:8f:aa:50:af:c2:89:
42:82:38:1b:bf:ae:63:0d:03:99:a4:13:c3:e3:99:94:ad:c4:
22:df:7e:d0:d8:77:26:43:8d:aa:84:3d:86:24:45:47:aa:2c:
ea:84:a1:b2:fb:ee:fc:3a:3f:52:73:c5:12:74:2d:3a:2e:b1:
fd:e1:7b:f9:10:fb:0e:99:20:30:b7:20:d7:10:e8:b0:8b:5d:
00:3c:8e:b5:f6:4b:13:16:52:ef:be:1d:e9:dd:74:69:a1:6c:
c9:6b:a1:e3
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgISAYzFARn1557Pbh3hwEVQWAKeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTIzMDMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOGNmZGMwZTVlZGIxY2MzMjNmOTM0NGZlMjgyN2M3OTNlOTVhYzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlArtk/v6rYLkYUUkwPBq1KYMaRlS
S/Mz0YuAy2HSv6jgMK5KW9WAOht+vvVGvJAkPNWBFlfCG8etmzUE3yzEGZZsL4RZ
vMfoPH92Dz0+RxRic8YMnhIAVVunM/KfmCv2AiY2xnRRZNvuWF7EaP0crA2XXpAu
WJJ/IROII0iUop//tPcQ0/MF9ml7OVV+3Qxt4yU9hokNsdWAjV2VbSjWq/8cfbVw
kNPImZquBLgiPIq43TVKlTiWc7iSf6aDiXOlMxf5vLlbpIlvYYsxQs1mmxcSJcZT
BvBPuOMZsJjLOKtA545jMXpZGzpFVqeZPZAJeHBYes5/ZK9dBNw+HxoXTQIDAQAB
o4ICljCCApIwHQYDVR0OBBYEFPjP3A5e2xzDI/k0T+KCfHk+laxvMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE3L2VkYThl
Zi0zNmQzLTQ1ZDQtOTExZS01ZmE5MGMxM2UxYjcvMS8wfQYIKwYBBQUHMAqGcXJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTcvZWRhOGVm
LTM2ZDMtNDVkNC05MTFlLTVmYTkwYzEzZTFiNy8xLzEtTV9jRGw3YkhNTWotVFJQ
NG9KOGVUNlZyRzgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u
ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD
MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEF
BQcBBwEB/wQhMB8wDAQCAAEwBgMEAcJxFDAPBAIAAjAJAwcAIAEGeAs4MA0GCSqG
SIb3DQEBCwUAA4IBAQASYFjek2jGyIr89Puwn76nvS2q53zfhlUMvXEkFzJGUcNF
jTV6FZ0/s0RBGqgOBdWFqsEGjOaUm1OGL2cmqCwx8NEFKAuwM1bYjUIZWEmzMGtm
zMNULD20665nR4Fi3BoMUcTWHWIIsHENTzdv4kzdJdhIJgEVh59gjCTz14uDa+ip
MhVHgeS9XJlQp/tMeBztfqQfGZfZ7bMBf3SPqlCvwolCgjgbv65jDQOZpBPD45mU
rcQi337Q2HcmQ42qhD2GJEVHqizqhKGy++78Oj9Sc8USdC06LrH94Xv5EPsOmSAw
tyDXEOiwi10API619ksTFlLvvh3p3XRpoWzJa6Hj
-----END CERTIFICATE-----
Generated at Thu Apr 18 18:04:45 2024 by rpki-client on console-ams.rpki-client.org