Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
File: 14rBdOhStxwxFj7B2GSf_2sHunk.cer (raw, json)
Hash identifier: 00XCZtlX1uASSDOlPdtpxduQuq+QMD0kyNBhS3Sn6t0=
Subject key identifier: D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8017C92D53E44576559B26D7326AFED
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:49 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 8822
AS: 58039
IP: 88.214.44.0/22
IP: 185.104.116.0/22
IP: 195.182.224.0/19
IP: 2a0f:4c00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:7c:92:d5:3e:44:57:65:59:b2:6d:73:26:af:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d78ac174e852b71c31163ec1d8649fff6b07ba79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:56:b7:5c:0e:27:28:d7:84:02:0f:ae:83:d1:
4e:51:54:2f:7e:b9:8a:f1:01:2d:77:7b:73:9f:85:
95:1a:57:87:74:c7:9b:98:aa:15:72:d4:15:75:60:
8f:0e:e2:39:46:69:cf:22:2a:ba:95:01:49:f4:e4:
fb:85:c0:86:46:0e:cd:f7:d1:05:3d:f8:82:c9:63:
4e:46:d9:58:91:37:a9:d8:59:df:44:5e:d3:db:41:
82:12:a8:54:3c:9a:40:48:78:78:91:f6:a5:03:61:
d6:dd:c6:bc:c8:62:79:1c:37:5a:69:9e:8a:5e:ca:
a6:1d:f9:83:3e:92:12:10:df:dc:5a:d0:18:be:d3:
dc:22:d8:b1:03:bf:68:b2:8b:a0:76:b8:84:de:6e:
dc:1e:80:47:c3:af:97:bd:17:a9:87:9d:78:d1:a4:
5d:a2:23:7c:2c:45:a4:91:db:d4:f6:e5:2d:34:af:
67:7f:8e:e9:31:21:dd:0c:b2:41:6b:c3:0e:6c:06:
3e:ac:c5:0a:98:58:bc:79:2c:1e:5c:58:1e:26:d3:
ef:51:68:72:17:07:40:8e:b7:08:4f:0a:e7:5f:09:
88:c5:c5:b0:b1:31:39:15:ba:70:32:ca:a2:66:26:
de:95:96:15:2c:8d:3e:78:c5:6a:09:bd:aa:b1:b4:
cb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.44.0/22
185.104.116.0/22
195.182.224.0/19
IPv6:
2a0f:4c00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8822
58039
Signature Algorithm: sha256WithRSAEncryption
64:9a:9c:09:f3:b5:38:b2:08:1c:01:22:a5:c6:84:0a:d7:4d:
32:09:a8:17:e6:bf:4c:b5:b8:1e:f5:f3:ef:31:30:28:6b:54:
8f:dc:7e:cc:48:f3:80:94:2d:aa:38:01:a7:d0:94:2a:87:06:
54:26:c4:78:68:e5:21:1f:76:31:39:12:df:c6:29:be:88:50:
aa:65:b0:83:92:58:5e:15:9b:b0:7a:31:7b:1a:6e:d9:aa:b8:
90:d3:8d:41:e4:d7:1f:07:3a:58:e3:85:4d:42:59:a3:f6:a7:
30:f6:da:ca:cf:5d:f6:9f:5d:ca:f6:df:73:d4:0c:85:86:6a:
36:e0:92:f2:df:d4:9f:ee:40:be:f6:b8:94:e8:25:03:a2:10:
20:f9:90:f4:57:5b:ad:76:37:97:cf:98:3a:8c:ad:5e:75:e1:
dc:d1:d6:10:5e:b2:ab:b6:a1:67:e3:60:d9:77:a5:5f:1f:6d:
e9:c4:a5:00:f9:c1:1c:d6:37:b7:1b:98:b1:a1:ce:30:dd:73:
dd:5d:ec:9a:b0:c3:36:11:0f:9e:39:f0:91:27:c8:94:13:4a:
8b:50:b7:75:87:34:29:49:a7:e0:15:74:ca:e6:99:47:a2:b7:
7e:f6:f6:67:68:7a:0a:6c:e4:12:f3:8c:20:9e:77:61:0e:10:
8d:af:ee:8e
-----BEGIN CERTIFICATE-----
MIIFszCCBJugAwIBAgISAYzIAXyS1T5EV2VZsm1zJq/tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDIyOTQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzhhYzE3NGU4NTJiNzFjMzExNjNlYzFkODY0OWZmZjZiMDdiYTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVa3XA4nKNeEAg+ug9FOUVQvfrmK
8QEtd3tzn4WVGleHdMebmKoVctQVdWCPDuI5RmnPIiq6lQFJ9OT7hcCGRg7N99EF
PfiCyWNORtlYkTep2FnfRF7T20GCEqhUPJpASHh4kfalA2HW3ca8yGJ5HDdaaZ6K
XsqmHfmDPpISEN/cWtAYvtPcItixA79osougdriE3m7cHoBHw6+XvReph5140aRd
oiN8LEWkkdvU9uUtNK9nf47pMSHdDLJBa8MObAY+rMUKmFi8eSweXFgeJtPvUWhy
FwdAjrcITwrnXwmIxcWwsTE5FbpwMsqiZibelZYVLI0+eMVqCb2qsbTL/wIDAQAB
o4ICvzCCArswHQYDVR0OBBYEFNeKwXToUrccMRY+wdhkn/9rB7p5MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY5L2U4MDIz
MS01M2I4LTQyMjUtODUyMy05NDdkZTM4NjhjZDUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkvZTgwMjMx
LTUzYjgtNDIyNS04NTIzLTk0N2RlMzg2OGNkNS8xLzE0ckJkT2hTdHh3eEZqN0Iy
R1NmXzJzSHVuay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF
BwEHAQH/BCswKTAYBAIAATASAwQCWNYsAwQCuWh0AwQFw7bgMA0EAgACMAcDBQMq
D0wAMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAiJ2AgMA4rcwDQYJKoZIhvcNAQEL
BQADggEBAGSanAnztTiyCBwBIqXGhArXTTIJqBfmv0y1uB718+8xMChrVI/cfsxI
84CULao4AafQlCqHBlQmxHho5SEfdjE5Et/GKb6IUKplsIOSWF4Vm7B6MXsabtmq
uJDTjUHk1x8HOljjhU1CWaP2pzD22srPXfafXcr233PUDIWGajbgkvLf1J/uQL72
uJToJQOiECD5kPRXW612N5fPmDqMrV514dzR1hBesqu2oWfjYNl3pV8fbenEpQD5
wRzWN7cbmLGhzjDdc91d7JqwwzYRD5458JEnyJQTSotQt3WHNClJp+AVdMrmmUei
t3729mdoegps5BLzjCCed2EOEI2v7o4=
-----END CERTIFICATE-----
Generated at Sat Apr 20 09:53:02 2024 by rpki-client on console-ams.rpki-client.org