Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
File: 1n8Sg7Yw5YjLA5umUrkCmdcajng.cer (raw, json)
Hash identifier: vMiapibu9LX7wBLRhp3WwBhsIKTO9f9n2K1BejSwHr8=
Subject key identifier: D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CED4D104FCE77EFFA8BB29341303E7E1A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 09 Jan 2024 08:18:19 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 188.92.25.0/24
IP: 212.237.212.0/22
IP: 2a13:2b80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ed:4d:10:4f:ce:77:ef:fa:8b:b2:93:41:30:3e:7e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 9 08:18:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d67f1283b630e588cb039ba652b90299d71a8e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:60:67:4e:8a:bf:dc:18:7d:36:cc:97:86:10:
bb:45:e6:6b:60:b0:80:01:97:1b:03:af:fe:8c:b4:
f7:51:97:e6:4e:f1:cd:84:a6:ed:6a:3b:c2:69:f2:
3f:32:08:2a:27:f8:83:ff:f1:02:8b:8d:88:d7:48:
74:54:50:52:8c:8c:d3:fc:94:c4:aa:3d:ba:f8:2c:
19:75:b8:71:cd:83:8d:cf:72:81:9e:5c:25:41:4c:
da:1c:59:9b:ad:c9:a2:87:f1:73:38:06:e0:2e:ae:
f3:6d:ec:71:be:01:94:86:dc:b2:32:b1:a7:3b:49:
22:8c:17:46:43:87:41:de:ba:14:da:a7:26:a2:5a:
2a:77:92:4b:79:f3:e4:8c:fa:8b:58:96:2e:9d:e4:
f3:72:1d:5d:5d:27:3b:88:67:42:70:9c:91:37:23:
e3:20:c9:f8:02:2b:b8:32:e7:42:47:90:20:45:ed:
04:0d:18:fb:21:33:8b:dd:25:84:a8:f6:23:c8:77:
85:7e:74:0a:3a:a2:8d:35:55:86:24:ab:c0:5e:a3:
7a:27:1b:93:aa:57:67:b8:5e:68:f7:3b:28:9c:9c:
32:ec:76:ce:ef:ce:2c:20:e6:e1:13:7b:b1:29:51:
61:47:76:65:56:4a:32:ce:fb:bb:8f:98:bb:a2:de:
e9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.92.25.0/24
212.237.212.0/22
IPv6:
2a13:2b80::/29
Signature Algorithm: sha256WithRSAEncryption
34:3c:a3:c1:c6:83:5c:6f:0c:17:08:75:22:8f:60:93:c4:2b:
df:6b:6b:04:50:85:79:90:99:bc:8a:53:77:bc:fb:06:2d:cd:
0e:64:8d:65:71:0a:af:dc:8e:ba:06:a2:63:7c:fd:1a:a4:d2:
04:60:bc:6b:10:e2:4f:bd:b3:8a:15:c6:bf:d1:9b:26:87:c5:
90:fb:78:43:8a:63:22:e1:f1:42:56:c0:3e:48:b1:d4:b5:bd:
46:ab:89:41:0c:a7:12:d7:4c:d8:8d:05:a3:50:0a:dc:04:62:
e8:28:0e:63:21:b8:62:cc:dd:65:f9:4c:db:c0:4d:2e:05:51:
a4:04:d6:41:60:5d:b2:7a:2a:31:bd:03:25:cb:40:fb:f4:7a:
93:f1:96:4d:d7:19:74:05:0d:af:93:86:84:dc:0d:d8:c0:c5:
ee:5f:ef:6e:a8:73:a8:d3:cf:3f:e0:61:90:3e:d8:56:da:28:
21:14:1d:5b:84:91:db:41:cb:3a:5d:22:07:ae:93:50:3f:80:
04:6a:2b:5e:f1:b6:c0:0c:d4:1a:37:fe:aa:9f:9e:ca:ef:94:
13:d8:a9:e6:38:62:ab:92:1b:07:82:d1:27:13:3e:21:8c:17:
fa:46:96:1e:67:03:98:1e:7c:e1:8d:0b:41:30:a0:5b:b2:43:
92:ab:1f:cf
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgISAYztTRBPznfv+ouyk0EwPn4aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTA5MDgxODE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjdmMTI4M2I2MzBlNTg4Y2IwMzliYTY1MmI5MDI5OWQ3MWE4ZTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02BnToq/3Bh9NsyXhhC7ReZrYLCA
AZcbA6/+jLT3UZfmTvHNhKbtajvCafI/MggqJ/iD//ECi42I10h0VFBSjIzT/JTE
qj26+CwZdbhxzYONz3KBnlwlQUzaHFmbrcmih/FzOAbgLq7zbexxvgGUhtyyMrGn
O0kijBdGQ4dB3roU2qcmoloqd5JLefPkjPqLWJYuneTzch1dXSc7iGdCcJyRNyPj
IMn4Aiu4MudCR5AgRe0EDRj7ITOL3SWEqPYjyHeFfnQKOqKNNVWGJKvAXqN6JxuT
qldnuF5o9zsonJwy7HbO784sIObhE3uxKVFhR3ZlVkoyzvu7j5i7ot7phQIDAQAB
o4ICmTCCApUwHQYDVR0OBBYEFNZ/EoO2MOWIywObplK5ApnXGo54MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRjLzJhODYw
Yy0xMDA1LTQ0MjMtOTViZC0zMDc5ZDU4OGFhOTkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMvMmE4NjBj
LTEwMDUtNDQyMy05NWJkLTMwNzlkNTg4YWE5OS8xLzFuOFNnN1l3NVlqTEE1dW1V
cmtDbWRjYWpuZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQAvFwZAwQC1O3UMA0EAgACMAcDBQMqEyuAMA0G
CSqGSIb3DQEBCwUAA4IBAQA0PKPBxoNcbwwXCHUij2CTxCvfa2sEUIV5kJm8ilN3
vPsGLc0OZI1lcQqv3I66BqJjfP0apNIEYLxrEOJPvbOKFca/0Zsmh8WQ+3hDimMi
4fFCVsA+SLHUtb1Gq4lBDKcS10zYjQWjUArcBGLoKA5jIbhizN1l+UzbwE0uBVGk
BNZBYF2yeioxvQMly0D79HqT8ZZN1xl0BQ2vk4aE3A3YwMXuX+9uqHOo088/4GGQ
PthW2ighFB1bhJHbQcs6XSIHrpNQP4AEaite8bbADNQaN/6qn57K75QT2KnmOGKr
khsHgtEnEz4hjBf6RpYeZwOYHnzhjQtBMKBbskOSqx/P
-----END CERTIFICATE-----
Generated at Fri May 3 09:23:01 2024 by rpki-client on console-fra.rpki-client.org