Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
File: 1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer (raw, json)
Hash identifier: WWSoqHnz3s7UbGbeRzgL3nByPE45O9QUcZQlJJnZpnI=
Subject key identifier: D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4252C904B5AF0183C0F835EC9D366A9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:19 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.118.160.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:2c:90:4b:5a:f0:18:3c:0f:83:5e:c9:d3:66:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:30:00:0b:60:cd:82:9a:fe:a6:61:f6:f4:f0:
c2:72:f3:5f:b6:3d:3f:7c:df:2b:5f:13:d4:45:6d:
86:d2:f4:f9:29:6e:f1:40:8c:6c:e1:cf:e0:c1:e7:
e1:29:77:38:5e:0f:33:35:4a:ab:aa:7a:01:2b:83:
6f:99:4f:cc:49:bc:f8:b4:86:ef:06:f0:4e:ed:07:
11:74:d6:69:5a:b3:e5:7f:0f:c5:f5:55:66:6a:df:
af:e4:df:05:2c:cb:f3:d0:e6:1c:86:e0:51:f0:93:
86:7a:dd:c3:9a:d4:48:80:88:be:99:01:0c:2e:70:
31:93:2c:09:e5:bb:97:38:d7:a8:17:4c:ef:ef:5f:
a2:c6:0b:88:1c:e6:6c:64:2a:2b:71:ef:a9:4b:31:
e6:cb:9c:a6:fd:3d:71:fc:d2:3f:dd:eb:13:a1:15:
8c:9f:c7:80:72:c6:ca:71:e8:74:20:f1:8a:ff:6a:
b8:c9:22:e6:25:dc:da:b9:53:66:e3:9d:ca:e4:cc:
4b:94:54:3a:1b:0a:54:7c:7b:79:b8:4a:20:74:d3:
b5:3e:a8:91:0e:a2:31:89:f1:c0:ab:52:c7:db:db:
a6:8a:cb:1b:20:f5:ff:00:6d:5a:89:08:bb:ff:a0:
47:51:e6:e6:e5:34:61:a2:b4:0c:06:c5:4c:20:03:
b5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.160.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:dc:d0:33:f9:96:f6:b0:a9:85:7a:a7:58:63:28:26:76:f3:
3a:d2:46:f9:f5:e2:b8:f8:cb:60:02:b8:79:fe:5a:d1:98:56:
ec:0f:fb:7c:b5:73:33:d7:2a:db:b8:bd:1e:ed:8c:04:5e:6e:
f5:64:a6:d9:99:0c:fe:28:71:d7:56:cb:52:c9:a4:e7:c2:92:
74:92:7d:62:46:59:31:d5:11:9a:82:e9:ce:a4:b0:57:1b:2a:
3d:96:ae:1c:3e:5c:7d:b5:fe:99:90:ed:67:92:9a:09:ab:b9:
fb:a5:87:4d:4d:a8:74:35:67:dd:c8:db:3c:d4:a7:2b:4a:75:
f3:c3:25:16:52:2b:08:70:37:a7:b0:0f:b7:27:69:13:ee:88:
2c:1d:50:2e:91:10:a3:c5:e7:21:2c:7d:b4:87:57:66:5c:d1:
ce:48:4f:41:bb:ca:01:97:f2:28:ab:a1:43:0b:c2:ca:3c:a5:
73:53:13:80:e3:e2:31:b0:cf:49:66:a7:fe:31:35:4b:ea:05:
bf:33:ed:d5:e3:15:55:3c:fb:a4:9e:52:b1:ec:8f:80:c2:03:
4b:60:36:52:e4:15:d0:a8:af:b6:b4:60:16:25:40:a4:b3:ba:
5a:76:a9:9b:36:8b:7f:b1:aa:6e:15:3a:0d:cd:94:75:4c:14:
ea:72:1a:29
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzEJSyQS1rwGDwPg17J02apMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDgzMDE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNWQwYmYxYWQ3ZmMzNjlkOGZiZjQzZTYyZGU5N2E0ZmFjZmVmNmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jAAC2DNgpr+pmH29PDCcvNftj0/
fN8rXxPURW2G0vT5KW7xQIxs4c/gwefhKXc4Xg8zNUqrqnoBK4NvmU/MSbz4tIbv
BvBO7QcRdNZpWrPlfw/F9VVmat+v5N8FLMvz0OYchuBR8JOGet3DmtRIgIi+mQEM
LnAxkywJ5buXONeoF0zv71+ixguIHOZsZCorce+pSzHmy5ym/T1x/NI/3esToRWM
n8eAcsbKceh0IPGK/2q4ySLmJdzauVNm453K5MxLlFQ6GwpUfHt5uEogdNO1PqiR
DqIxifHAq1LH29umissbIPX/AG1aiQi7/6BHUebm5TRhorQMBsVMIAO1LQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFNXQvxrX/Dadj79D5i3pek+s/va1MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJiLzU1Mzll
NC1kMTBkLTQ5YzUtYmRjZS1lYjdlOWMwZDM3NDcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIvNTUzOWU0
LWQxMGQtNDljNS1iZGNlLWViN2U5YzBkMzc0Ny8xLzFkQ19HdGY4TnAyUHYwUG1M
ZWw2VDZ6LTlyVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCuXagMA0GCSqGSIb3DQEBCwUAA4IBAQCj3NAz
+Zb2sKmFeqdYYygmdvM60kb59eK4+MtgArh5/lrRmFbsD/t8tXMz1yrbuL0e7YwE
Xm71ZKbZmQz+KHHXVstSyaTnwpJ0kn1iRlkx1RGagunOpLBXGyo9lq4cPlx9tf6Z
kO1nkpoJq7n7pYdNTah0NWfdyNs81KcrSnXzwyUWUisIcDensA+3J2kT7ogsHVAu
kRCjxechLH20h1dmXNHOSE9Bu8oBl/Ioq6FDC8LKPKVzUxOA4+IxsM9JZqf+MTVL
6gW/M+3V4xVVPPuknlKx7I+AwgNLYDZS5BXQqK+2tGAWJUCks7padqmbNot/sapu
FToNzZR1TBTqchop
-----END CERTIFICATE-----
Generated at Sat Apr 20 02:06:37 2024 by rpki-client on console-fra.rpki-client.org