Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1GbRcMgQujTELpIOhNQmKEWXf4U.cer
File: 1GbRcMgQujTELpIOhNQmKEWXf4U.cer (raw, json)
Hash identifier: oUwFBncON1p6vMWhNIv5vnwkQuN9IGodClxa/nG9VYA=
Subject key identifier: D4:66:D1:70:C8:10:BA:34:C4:2E:92:0E:84:D4:26:28:45:97:7F:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E7F4945A70B0A237C7C24687C1FE0B073
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 27 Mar 2024 09:41:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.105.172.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7f:49:45:a7:0b:0a:23:7c:7c:24:68:7c:1f:e0:b0:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 27 09:41:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d466d170c810ba34c42e920e84d4262845977f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:95:86:f3:bd:1a:4f:f9:0a:8d:7e:6d:ba:6e:
3d:b3:9e:fd:72:49:06:c0:6b:c0:cd:0e:52:4e:66:
32:93:3e:d9:f5:81:24:92:9b:35:64:f4:99:ed:e8:
90:49:fa:f6:ba:2a:40:3b:6e:f0:90:77:5f:f7:d3:
54:2a:9b:5b:d2:55:4f:9f:e4:16:cf:3b:fd:87:6a:
9d:a4:09:79:d8:ce:b6:0c:87:21:e0:aa:b0:89:31:
6a:8c:a1:26:96:d6:0b:91:48:93:ed:92:79:a2:10:
8a:c4:35:ee:73:52:e6:2b:98:c0:9e:30:ae:ed:5e:
66:50:41:64:bc:9e:68:39:a2:50:42:4d:b7:8c:e2:
96:9c:c3:c8:3e:a8:4d:3b:d0:3d:80:05:97:84:09:
8d:c9:1b:81:95:b2:5b:80:b3:e1:69:57:0d:f0:c7:
38:8c:f9:2f:b0:93:a4:8a:70:8a:b8:ab:07:15:d7:
a8:41:0b:cc:19:7e:72:fd:22:5d:10:41:44:40:cf:
ac:d3:5c:82:57:a1:98:8d:c6:1b:8a:5b:86:46:41:
93:d3:34:87:e5:93:ec:f0:a5:3a:96:b5:77:53:ca:
06:ea:be:6f:80:b4:42:40:7d:01:98:17:ba:29:bd:
af:10:89:f2:ec:02:6d:93:40:39:a3:8c:e6:6b:97:
5f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:66:D1:70:C8:10:BA:34:C4:2E:92:0E:84:D4:26:28:45:97:7F:85
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.172.0/24
Signature Algorithm: sha256WithRSAEncryption
37:e0:c2:18:57:c5:8c:8c:e7:8a:d3:fc:10:1b:b3:86:30:3c:
45:fb:a6:e8:90:f9:19:a6:c2:9f:0d:e5:73:88:f4:5d:82:f7:
8b:ab:b4:27:bd:e9:ff:44:c6:86:35:19:08:83:7d:a5:ac:45:
f9:b8:ee:f4:1f:9c:94:d1:d3:5d:8f:6e:51:8e:97:09:26:99:
26:07:a9:09:c8:db:88:f4:aa:65:a0:f0:82:28:8f:46:b5:d0:
b6:dc:54:f8:55:bd:76:51:db:52:86:30:c6:78:13:27:54:03:
5d:39:c7:03:b6:0f:e7:7c:b1:05:2e:78:db:8a:c9:fa:ca:c9:
ec:c4:6e:02:97:fd:97:4a:7c:fe:cc:ec:36:12:3e:27:4f:2f:
3e:af:49:2e:98:6e:d0:9d:05:20:3b:e5:9d:d7:4a:bb:27:cd:
09:d8:eb:23:e6:81:c0:0a:48:1f:0d:de:ef:63:43:aa:6c:ad:
8f:56:f8:86:fd:1f:6c:3c:3b:b7:22:d2:05:80:72:9a:db:f8:
ca:6a:0f:e0:3a:56:e2:cd:89:84:fd:78:76:fb:52:f6:51:d0:
d3:dd:99:33:07:2e:16:e6:6c:6b:8c:9c:b5:1c:f8:34:2d:3b:
26:19:55:8a:d6:65:ff:a8:39:48:15:34:dd:ce:b9:ba:c4:df:
3a:ba:f7:be
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAY5/SUWnCwojfHwkaHwf4LBzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMzI3MDk0MTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDY2ZDE3MGM4MTBiYTM0YzQyZTkyMGU4NGQ0MjYyODQ1OTc3Zjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpWG870aT/kKjX5tum49s579ckkG
wGvAzQ5STmYykz7Z9YEkkps1ZPSZ7eiQSfr2uipAO27wkHdf99NUKptb0lVPn+QW
zzv9h2qdpAl52M62DIch4KqwiTFqjKEmltYLkUiT7ZJ5ohCKxDXuc1LmK5jAnjCu
7V5mUEFkvJ5oOaJQQk23jOKWnMPIPqhNO9A9gAWXhAmNyRuBlbJbgLPhaVcN8Mc4
jPkvsJOkinCKuKsHFdeoQQvMGX5y/SJdEEFEQM+s01yCV6GYjcYbiluGRkGT0zSH
5ZPs8KU6lrV3U8oG6r5vgLRCQH0BmBe6Kb2vEIny7AJtk0A5o4zma5dfoQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFNRm0XDIELo0xC6SDoTUJihFl3+FMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNjLzIzMDZm
Ni02Y2MwLTQ5ODItYTUyMy0xNjg0MmJkYWQ5MjUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvMjMwNmY2
LTZjYzAtNDk4Mi1hNTIzLTE2ODQyYmRhZDkyNS8xLzFHYlJjTWdRdWpURUxwSU9o
TlFtS0VXWGY0VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwWmsMA0GCSqGSIb3DQEBCwUAA4IBAQA34MIY
V8WMjOeK0/wQG7OGMDxF+6bokPkZpsKfDeVziPRdgveLq7Qnven/RMaGNRkIg32l
rEX5uO70H5yU0dNdj25RjpcJJpkmB6kJyNuI9KploPCCKI9GtdC23FT4Vb12UdtS
hjDGeBMnVANdOccDtg/nfLEFLnjbisn6ysnsxG4Cl/2XSnz+zOw2Ej4nTy8+r0ku
mG7QnQUgO+Wd10q7J80J2Osj5oHACkgfDd7vY0OqbK2PVviG/R9sPDu3ItIFgHKa
2/jKag/gOlbizYmE/Xh2+1L2UdDT3ZkzBy4W5mxrjJy1HPg0LTsmGVWK1mX/qDlI
FTTdzrm6xN86uve+
-----END CERTIFICATE-----
Generated at Fri May 3 02:04:34 2024 by rpki-client on console-fra.rpki-client.org