Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
File: 20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer (raw, json)
Hash identifier: HaI206GS45U8eurJ8fZZKJmKVApDSbMHhaD9oZUxa68=
Subject key identifier: DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC726E6CAA8FE87C744D3DFE2F059ABA6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:04 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.63.228.0/22
IP: 2a03:1060::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Apr 2024 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:e6:ca:a8:fe:87:c7:44:d3:df:e2:f0:59:ab:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db489fbe98994cbc098c876ba63e560ac17e5b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0e:89:2c:b5:73:83:fc:22:34:5b:fe:28:89:
2b:ba:d8:8b:1e:b6:79:d6:0b:6f:a3:4f:1c:94:d1:
b2:ac:95:60:1d:f4:d6:ec:e4:6e:a8:f9:af:00:25:
3f:50:b1:ed:2b:47:b9:34:c5:0b:bd:bf:63:8c:28:
72:0f:05:03:f7:c1:3a:19:fe:99:46:81:75:7b:10:
2b:59:b2:a3:25:79:e6:48:e3:1d:15:e9:15:1b:f8:
45:d4:8e:68:27:f4:51:16:da:44:1a:5f:0c:04:83:
f0:c0:ab:13:d0:16:fe:5b:81:ba:d3:ec:d5:1b:e5:
a0:53:5c:dc:82:9d:ae:ee:3f:1d:dc:37:c5:ac:8e:
ab:35:f9:87:22:69:f8:71:69:42:31:50:df:06:5c:
fe:39:1e:7d:42:a4:dc:f4:e1:d1:0e:e1:4e:d9:56:
39:da:62:4a:cd:2e:e7:49:96:85:e4:5d:22:2f:72:
5d:f2:dc:83:05:2a:3b:28:15:c9:8c:c1:50:7b:fe:
ab:b6:e7:13:a6:5d:0b:ce:f1:af:3c:39:39:a9:7e:
79:b6:e6:ce:eb:5a:b0:09:0e:2b:e8:9c:6f:f4:9f:
ce:59:ea:3c:e9:20:c3:17:3f:73:3c:97:2c:40:69:
18:13:32:53:7b:39:61:e4:30:f8:ad:c7:51:a4:30:
86:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.228.0/22
IPv6:
2a03:1060::/32
Signature Algorithm: sha256WithRSAEncryption
09:b4:7d:aa:4a:0d:a5:a3:f1:2c:70:a0:a5:58:43:94:4a:0c:
09:8e:55:a9:92:22:0e:2a:e2:3b:97:ac:f5:05:aa:de:c3:5f:
b2:9a:01:a7:0d:4e:ab:83:e7:0e:4e:ba:c4:11:47:62:17:ae:
26:e6:13:f1:e3:17:e1:e3:4e:a9:fa:44:38:db:b4:a2:b4:61:
48:31:23:89:04:24:1d:4a:48:ec:fd:68:8c:0e:0c:cc:dc:c6:
00:56:e3:8e:31:c1:01:2d:f4:b5:bd:3c:94:14:a9:4b:68:68:
79:74:b7:55:44:bc:fe:e3:fc:31:e8:c2:65:60:f3:4d:2d:d1:
fc:87:2c:98:cf:75:7a:0a:83:04:3d:25:51:fc:97:5f:cb:26:
61:4a:df:cc:db:03:f4:56:a9:3b:ec:b3:c5:6e:f4:50:4a:d2:
ab:a5:c8:d2:ca:91:ed:7e:00:37:eb:57:e0:aa:5f:c0:93:a4:
a3:12:9c:b5:24:ac:e8:4c:08:87:e3:23:1e:8d:4c:a2:15:c9:
46:81:39:48:14:4c:95:7a:8a:17:01:59:24:61:9c:3a:af:be:
f2:4f:cf:75:f1:7f:90:7a:08:14:07:a8:26:81:32:6a:8f:b0:
6c:2e:0c:59:ba:87:19:6d:28:65:f3:8f:cc:81:70:03:86:2f:
9e:af:c6:42
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzHJubKqP6Hx0TT3+LwWaumMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMjIzMTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjQ4OWZiZTk4OTk0Y2JjMDk4Yzg3NmJhNjNlNTYwYWMxN2U1YjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQ6JLLVzg/wiNFv+KIkrutiLHrZ5
1gtvo08clNGyrJVgHfTW7ORuqPmvACU/ULHtK0e5NMULvb9jjChyDwUD98E6Gf6Z
RoF1exArWbKjJXnmSOMdFekVG/hF1I5oJ/RRFtpEGl8MBIPwwKsT0Bb+W4G60+zV
G+WgU1zcgp2u7j8d3DfFrI6rNfmHImn4cWlCMVDfBlz+OR59QqTc9OHRDuFO2VY5
2mJKzS7nSZaF5F0iL3Jd8tyDBSo7KBXJjMFQe/6rtucTpl0LzvGvPDk5qX55tubO
61qwCQ4r6Jxv9J/OWeo86SDDFz9zPJcsQGkYEzJTezlh5DD4rcdRpDCG5wIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFNtIn76YmUy8CYyHa6Y+VgrBflsvMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QxLzZjYWM1
MC0zZjEzLTRlZjktOGI2ZC1kZWNlYzQxYTcxZDEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDEvNmNhYzUw
LTNmMTMtNGVmOS04YjZkLWRlY2VjNDFhNzFkMS8xLzIwaWZ2cGlaVEx3SmpJZHJw
ajVXQ3NGLVd5OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuT/kMA0EAgACMAcDBQAqAxBgMA0GCSqGSIb3
DQEBCwUAA4IBAQAJtH2qSg2lo/EscKClWEOUSgwJjlWpkiIOKuI7l6z1Barew1+y
mgGnDU6rg+cOTrrEEUdiF64m5hPx4xfh406p+kQ427SitGFIMSOJBCQdSkjs/WiM
DgzM3MYAVuOOMcEBLfS1vTyUFKlLaGh5dLdVRLz+4/wx6MJlYPNNLdH8hyyYz3V6
CoMEPSVR/JdfyyZhSt/M2wP0Vqk77LPFbvRQStKrpcjSypHtfgA361fgql/Ak6Sj
Epy1JKzoTAiH4yMejUyiFclGgTlIFEyVeooXAVkkYZw6r77yT8918X+QeggUB6gm
gTJqj7BsLgxZuocZbShl84/MgXADhi+er8ZC
-----END CERTIFICATE-----
Generated at Fri Apr 19 03:44:13 2024 by rpki-client on console-ams.rpki-client.org