Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
File: 1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer (raw, json)
Hash identifier: nUzD8Td+bo0CNMibOrpTPWf7whjO0vYKl6B8oxh63qk=
Subject key identifier: FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01936D0B72C3357148044D9BE2D8E0EAA0E4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 27 Nov 2024 09:54:47 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 29655
AS: 44990
IP: 93.188.72.0/21
IP: 185.227.164.0/22
IP: 193.16.211.0/24
IP: 194.9.34.0/23
IP: 195.5.171.0/24
IP: 213.173.42.0/23
IP: 2001:67c:94::/48
IP: 2a02:2a8::/29
IP: 2a09:2200::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Dec 2024 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6d:0b:72:c3:35:71:48:04:4d:9b:e2:d8:e0:ea:a0:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 27 09:54:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9c:2e:b8:92:2b:33:f1:89:97:ec:a2:fe:37:
0d:f7:a5:96:7e:76:49:e9:c1:b3:e3:3f:2b:c7:38:
bc:f6:17:1b:96:f8:3f:fc:bd:b5:d6:74:37:0a:02:
2f:b6:a6:1c:83:30:eb:cc:a6:0d:4d:20:de:ba:0a:
01:df:03:48:69:de:8c:e5:db:b6:4e:d2:0a:d2:41:
9b:ec:71:c2:b7:8c:c5:72:09:87:31:a9:90:58:10:
c5:00:e8:56:4a:6b:6b:54:cf:15:f7:13:4a:18:e0:
76:28:04:eb:5d:60:e1:aa:7e:d2:e8:1b:61:0d:d8:
24:fb:35:cd:3a:e5:56:c6:bf:5c:f6:eb:d8:00:9a:
69:7c:fc:54:b5:bc:25:54:8d:fa:b3:98:6d:2a:d0:
66:32:a3:d8:60:33:97:16:b0:d8:c1:20:56:88:6c:
2f:4c:58:9a:19:b0:5f:d3:57:ec:1f:41:b6:a3:98:
6a:e9:26:ba:35:3d:cc:9b:45:dc:fe:8f:f9:aa:da:
63:6b:c9:b0:dd:f1:98:ce:7a:07:d7:80:70:79:c7:
9f:5b:4c:2a:4b:93:c6:2c:4e:e9:f8:56:d5:05:5d:
0f:1d:c8:dc:7e:c3:f3:e6:bc:41:f9:91:3a:32:bf:
d6:37:06:ad:bd:2a:4d:ce:6f:f5:91:c9:99:3f:a9:
f4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.188.72.0/21
185.227.164.0/22
193.16.211.0/24
194.9.34.0/23
195.5.171.0/24
213.173.42.0/23
IPv6:
2001:67c:94::/48
2a02:2a8::/29
2a09:2200::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29655
44990
Signature Algorithm: sha256WithRSAEncryption
6b:c1:4b:39:57:d7:34:5e:64:75:24:34:30:32:bc:98:06:96:
0b:2e:26:0c:20:2e:b8:7f:eb:97:c6:45:c9:6b:f4:e7:f5:ab:
4d:31:a5:96:bd:a3:54:ea:11:15:93:6c:01:b8:22:2e:ab:07:
69:55:62:95:e8:03:90:d6:e4:2b:5a:1a:f8:ea:ad:05:23:a2:
ab:2b:08:2b:f9:14:76:e5:ad:79:7a:65:c3:7c:15:49:fa:54:
20:2d:ca:7f:08:44:5b:00:36:35:76:86:97:d2:0f:7e:c4:fd:
a2:45:ac:24:96:44:a6:98:91:4c:05:75:42:7a:8b:f1:3c:a1:
21:24:ee:04:cb:c3:0b:a1:37:09:c5:92:ac:59:e0:4e:94:86:
03:9a:86:70:21:73:de:51:26:e2:05:43:fc:25:3e:eb:bb:39:
38:f4:a0:27:5d:bc:ce:bd:4c:1e:ae:74:9a:b9:39:da:32:18:
43:10:6c:c9:b4:d0:a8:55:16:00:70:a6:77:32:29:b4:84:89:
b6:8c:de:d0:17:6b:a0:13:2a:50:67:fa:c4:9d:d6:79:24:b1:
3a:d5:1f:50:72:7d:f0:63:2a:e2:36:cd:d2:9f:c6:15:dc:6c:
d0:d4:02:20:f2:80:13:8e:7e:f0:22:cd:bf:36:c1:1b:fe:af:
d4:5e:a1:0c
-----BEGIN CERTIFICATE-----
MIIF1jCCBL6gAwIBAgISAZNtC3LDNXFIBE2b4tjg6qDkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQxMTI3MDk1NDQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWY2NDdkZjIxOGUyYzZmM2ZkMWNmNTQ5ZDI3ZGY0ZTUwY2Q2ZGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5wuuJIrM/GJl+yi/jcN96WWfnZJ
6cGz4z8rxzi89hcblvg//L211nQ3CgIvtqYcgzDrzKYNTSDeugoB3wNIad6M5du2
TtIK0kGb7HHCt4zFcgmHMamQWBDFAOhWSmtrVM8V9xNKGOB2KATrXWDhqn7S6Bth
Ddgk+zXNOuVWxr9c9uvYAJppfPxUtbwlVI36s5htKtBmMqPYYDOXFrDYwSBWiGwv
TFiaGbBf01fsH0G2o5hq6Sa6NT3Mm0Xc/o/5qtpja8mw3fGYznoH14BwecefW0wq
S5PGLE7p+FbVBV0PHcjcfsPz5rxB+ZE6Mr/WNwatvSpNzm/1kcmZP6n0zQIDAQAB
o4IC4jCCAt4wHQYDVR0OBBYEFPr2R98hjixvP9HPVJ0n305QzW2wMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE0LzQ1YTU3
Mi1iODA4LTQwZjUtOGIyNS1kZGNhMTUzYTIwYWIvMS8wfQYIKwYBBQUHMAqGcXJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQvNDVhNTcy
LWI4MDgtNDBmNS04YjI1LWRkY2ExNTNhMjBhYi8xLzEtdlpIM3lHT0xHOF8wYzlV
blNmZlRsRE5iYkEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u
ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD
MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBggrBgEF
BQcBBwEB/wRNMEswKgQCAAEwJAMEA128SAMEArnjpAMEAMEQ0wMEAcIJIgMEAMMF
qwMEAdWtKjAdBAIAAjAXAwcAIAEGfACUAwUDKgICqAMFAyoJIgAwHgYIKwYBBQUH
AQgBAf8EDzANoAswCQICc9cCAwCvvjANBgkqhkiG9w0BAQsFAAOCAQEAa8FLOVfX
NF5kdSQ0MDK8mAaWCy4mDCAuuH/rl8ZFyWv05/WrTTGllr2jVOoRFZNsAbgiLqsH
aVVilegDkNbkK1oa+OqtBSOiqysIK/kUduWteXplw3wVSfpUIC3KfwhEWwA2NXaG
l9IPfsT9okWsJJZEppiRTAV1QnqL8TyhISTuBMvDC6E3CcWSrFngTpSGA5qGcCFz
3lEm4gVD/CU+67s5OPSgJ128zr1MHq50mrk52jIYQxBsybTQqFUWAHCmdzIptISJ
toze0BdroBMqUGf6xJ3WeSSxOtUfUHJ98GMq4jbN0p/GFdxs0NQCIPKAE45+8CLN
vzbBG/6v1F6hDA==
-----END CERTIFICATE-----
Generated at Thu Dec 26 17:13:14 2024 by rpki-client on console-ams.rpki-client.org