Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
File: 2-arjgxG6EG0TSucawO7ZfViHbE.cer (raw, json)
Hash identifier: NEqypBjAikBilUQDZv6B/AFwEYQF14XX6HeBLWERhnE=
Subject key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94DA29E514B15CBF8DB10EF367BCB20
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:32:37 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.142.58.0/23
IP: 193.142.146.0/23
IP: 2a0f:ca80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 13:25:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:a2:9e:51:4b:15:cb:f8:db:10:ef:36:7b:cb:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:32:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:03:c8:29:a0:88:c2:b3:5c:d6:ac:ab:1e:3a:
2b:3d:6f:f2:f9:3a:05:0e:1b:4f:0a:e1:ea:da:96:
bd:26:1f:a7:dc:61:ce:0a:82:13:ef:59:cc:a4:45:
b0:11:6c:5e:bb:97:be:01:f9:79:a5:9e:9a:16:52:
77:b9:34:7e:d3:7e:10:4a:53:18:5a:40:eb:9e:92:
1b:c6:30:f5:7d:01:5e:cb:5a:eb:6d:1a:7e:66:e8:
43:7d:d4:b5:45:b4:0f:03:76:4b:49:99:fd:be:cd:
e1:41:9e:14:44:3d:12:27:f1:e0:ed:da:fe:65:81:
d7:0d:a7:f1:d0:fe:4f:2f:1f:c6:52:42:84:bb:53:
58:c1:6f:2f:7b:3e:67:d3:ff:08:b4:c1:bd:1b:c6:
e0:7f:e3:45:6f:6f:13:8e:e3:dd:06:d6:1f:a0:df:
66:03:af:e2:dc:42:15:d6:79:aa:b0:05:49:bd:a6:
70:8a:19:4c:48:5f:1d:3f:87:7a:d1:46:4d:74:bb:
bf:ad:c2:5b:36:f1:09:55:bb:ed:b0:fc:92:fe:08:
13:07:bd:3e:97:d6:e7:f8:d9:c0:71:94:ce:ee:25:
46:3d:5d:0b:b6:5e:42:19:b0:0b:4c:08:48:f0:2c:
e2:f6:b2:80:b3:57:46:55:a6:34:55:cd:84:54:4e:
ea:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.58.0/23
193.142.146.0/23
IPv6:
2a0f:ca80::/29
Signature Algorithm: sha256WithRSAEncryption
76:05:d7:a9:42:b0:71:f6:b3:7c:68:ad:38:f9:4d:f9:2d:b5:
d1:f5:1b:0b:7c:9c:a9:3b:ec:80:d5:80:1a:40:87:7a:75:19:
23:34:bd:52:ee:29:45:6f:78:7f:90:66:ea:59:df:5b:2b:91:
49:bf:6e:a2:83:4e:d2:be:2d:74:03:12:87:23:0e:ec:fe:b6:
00:e3:43:62:1e:d4:0a:9c:09:41:aa:16:6b:50:73:1a:af:39:
59:d4:66:65:35:12:07:69:c5:33:9c:6e:be:0a:15:c8:cd:e4:
ba:21:ff:13:9a:62:c6:aa:dd:57:37:66:f6:6e:2f:6d:ce:99:
a0:0c:39:27:60:45:a5:bb:f9:21:5f:4e:63:36:44:b2:70:df:
ed:da:b8:34:37:53:0a:e0:55:95:34:df:29:40:80:82:ad:d3:
fc:01:60:04:93:66:e1:65:2f:64:f8:9b:35:ce:2a:b0:1f:d1:
f2:e3:b1:e1:5d:a6:61:7d:6a:09:35:4b:e7:ac:56:2d:c1:e0:
39:a2:d0:a6:6f:7f:ce:67:bb:a9:83:99:bf:6e:87:20:5e:53:
9c:7e:c6:aa:6c:5b:cb:24:9f:eb:ec:d3:96:31:46:ec:c3:e6:
ca:9e:75:d6:11:f9:a6:e4:84:2e:14:4e:bc:ef:38:59:25:15:
ad:a1:78:b7
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgISAYzJTaKeUUsVy/jbEO82e8sgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDgzMjM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYmU2YWI4ZTBjNDZlODQxYjQ0ZDJiOWM2YjAzYmI2NWY1NjIxZGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQPIKaCIwrNc1qyrHjorPW/y+ToF
DhtPCuHq2pa9Jh+n3GHOCoIT71nMpEWwEWxeu5e+Afl5pZ6aFlJ3uTR+034QSlMY
WkDrnpIbxjD1fQFey1rrbRp+ZuhDfdS1RbQPA3ZLSZn9vs3hQZ4URD0SJ/Hg7dr+
ZYHXDafx0P5PLx/GUkKEu1NYwW8vez5n0/8ItMG9G8bgf+NFb28TjuPdBtYfoN9m
A6/i3EIV1nmqsAVJvaZwihlMSF8dP4d60UZNdLu/rcJbNvEJVbvtsPyS/ggTB70+
l9bn+NnAcZTO7iVGPV0Ltl5CGbALTAhI8Czi9rKAs1dGVaY0Vc2EVE7qlQIDAQAB
o4ICmTCCApUwHQYDVR0OBBYEFNvmq44MRuhBtE0rnGsDu2X1Yh2xMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QxLzk2NDM2
Yy1mNmZhLTQwYmEtYTI3Yy1mYjEwMzA2NTEwNjcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDEvOTY0MzZj
LWY2ZmEtNDBiYS1hMjdjLWZiMTAzMDY1MTA2Ny8xLzItYXJqZ3hHNkVHMFRTdWNh
d083WmZWaUhiRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQBwY46AwQBwY6SMA0EAgACMAcDBQMqD8qAMA0G
CSqGSIb3DQEBCwUAA4IBAQB2BdepQrBx9rN8aK04+U35LbXR9RsLfJypO+yA1YAa
QId6dRkjNL1S7ilFb3h/kGbqWd9bK5FJv26ig07Svi10AxKHIw7s/rYA40NiHtQK
nAlBqhZrUHMarzlZ1GZlNRIHacUznG6+ChXIzeS6If8TmmLGqt1XN2b2bi9tzpmg
DDknYEWlu/khX05jNkSycN/t2rg0N1MK4FWVNN8pQICCrdP8AWAEk2bhZS9k+Js1
ziqwH9Hy47HhXaZhfWoJNUvnrFYtweA5otCmb3/OZ7upg5m/bocgXlOcfsaqbFvL
JJ/r7NOWMUbsw+bKnnXWEfmm5IQuFE687zhZJRWtoXi3
-----END CERTIFICATE-----
Generated at Thu Apr 25 14:33:52 2024 by rpki-client on console-fra.rpki-client.org