Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2RTaVuGpNGSdoClkrBLro0xcuE8.cer
File: 2RTaVuGpNGSdoClkrBLro0xcuE8.cer (raw, json)
Hash identifier: lye06evAnV62M03jlxjFuihG9NcmO/N5Ph5NC6q3BaQ=
Subject key identifier: D9:14:DA:56:E1:A9:34:64:9D:A0:29:64:AC:12:EB:A3:4C:5C:B8:4F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0193208E00D8CE3F85207209FA2B1E09B4B9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 12 Nov 2024 13:26:37 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 214019
IP: 79.174.0.0/22
IP: 2a13:e3c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:20:8e:00:d8:ce:3f:85:20:72:09:fa:2b:1e:09:b4:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 12 13:26:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d914da56e1a934649da02964ac12eba34c5cb84f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e6:bd:36:d3:ce:1e:5e:77:36:1f:ce:aa:24:
57:6b:b9:07:fc:db:01:a9:c8:80:63:c9:e4:26:8a:
ff:25:c9:7c:22:f4:ec:28:fc:a9:e9:85:85:a2:02:
f1:f4:91:48:1c:64:07:6d:9a:2d:5d:e9:23:40:f6:
96:eb:38:da:04:ec:62:b3:9a:aa:52:33:13:85:ae:
8e:07:96:22:55:23:11:7d:8e:30:72:92:6d:5d:b0:
b6:69:78:b2:26:9b:57:cd:87:61:f3:7f:b1:34:3b:
1b:c0:22:14:a2:3b:e5:b0:7c:7e:15:81:7b:48:7f:
9c:3d:71:4b:8b:78:18:d6:5f:1b:d7:f8:bf:83:de:
8f:98:48:5d:38:96:a4:62:74:1d:0b:7a:32:61:39:
e5:36:29:04:fa:c5:f5:f7:02:01:c0:d6:93:e6:39:
0f:de:ba:cd:40:4c:74:b4:e3:2a:0c:4e:b6:6a:ba:
c4:3c:dd:01:bd:35:e4:63:09:57:fb:3c:22:5b:1a:
93:3c:fa:5d:4d:31:8e:92:1c:be:8b:30:49:30:5f:
9e:32:65:96:ca:6a:d0:36:71:7a:45:4a:6b:b5:3e:
3a:42:74:a8:b0:18:e0:7f:42:a9:67:de:b1:61:d1:
31:5d:32:7d:31:1d:cb:b1:6a:eb:62:6e:3c:93:a7:
2b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:14:DA:56:E1:A9:34:64:9D:A0:29:64:AC:12:EB:A3:4C:5C:B8:4F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.174.0.0/22
IPv6:
2a13:e3c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214019
Signature Algorithm: sha256WithRSAEncryption
7c:0a:ee:31:7e:a7:62:1c:b5:d1:98:e1:3f:e2:80:71:43:5b:
1f:e3:f4:a9:73:44:71:12:f0:ec:43:78:73:80:c5:8f:02:b4:
e0:e3:f8:5a:d4:f1:fd:35:7e:cf:0f:0d:92:6e:30:81:55:70:
80:e8:60:62:44:74:c7:74:59:64:bc:f5:0d:75:e5:a2:e7:ca:
21:5c:9c:4a:f0:07:4f:ca:17:78:29:81:a9:a3:0d:29:b0:d1:
d0:f2:cb:92:7b:e7:d2:7b:b4:17:dc:d6:44:f0:41:e0:b1:ac:
5b:58:af:18:bc:c6:8e:1f:c7:66:ce:c7:e2:76:34:d1:20:35:
eb:e1:f8:65:8f:fd:be:7b:d0:e2:eb:60:f3:0d:c5:06:10:4c:
08:93:21:f4:29:9a:fb:78:92:2e:8d:46:3b:fc:98:8e:a8:ae:
0e:4c:83:49:af:8e:1f:0b:91:e0:49:7e:97:ce:2b:59:4b:ca:
ae:3f:41:66:2f:02:ae:16:32:a2:28:db:4d:e5:be:5d:7c:7a:
b5:e7:19:05:94:42:dc:3b:d9:4e:02:70:e1:52:90:42:74:86:
bf:ea:ca:12:f9:de:07:9b:bb:4c:58:d1:94:2e:8c:12:d0:46:
a1:7f:0e:76:48:8c:ff:bd:1f:d5:38:f9:cd:6b:79:a2:64:a4:
52:32:96:ba
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZMgjgDYzj+FIHIJ+iseCbS5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQxMTEyMTMyNjM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTE0ZGE1NmUxYTkzNDY0OWRhMDI5NjRhYzEyZWJhMzRjNWNiODRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ea9NtPOHl53Nh/OqiRXa7kH/NsB
qciAY8nkJor/Jcl8IvTsKPyp6YWFogLx9JFIHGQHbZotXekjQPaW6zjaBOxis5qq
UjMTha6OB5YiVSMRfY4wcpJtXbC2aXiyJptXzYdh83+xNDsbwCIUojvlsHx+FYF7
SH+cPXFLi3gY1l8b1/i/g96PmEhdOJakYnQdC3oyYTnlNikE+sX19wIBwNaT5jkP
3rrNQEx0tOMqDE62arrEPN0BvTXkYwlX+zwiWxqTPPpdTTGOkhy+izBJMF+eMmWW
ymrQNnF6RUprtT46QnSosBjgf0KpZ96xYdExXTJ9MR3LsWrrYm48k6cr0QIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFNkU2lbhqTRknaApZKwS66NMXLhPMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU1LzdhMTFi
NS1hNDA1LTQxY2ItODFjYi1mNmJjY2YxZTUzMWYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTUvN2ExMWI1
LWE0MDUtNDFjYi04MWNiLWY2YmNjZjFlNTMxZi8xLzJSVGFWdUdwTkdTZG9DbGty
QkxybzB4Y3VFOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCT64AMA0EAgACMAcDBQMqE+PAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNEAzANBgkqhkiG9w0BAQsFAAOCAQEAfAruMX6nYhy1
0ZjhP+KAcUNbH+P0qXNEcRLw7EN4c4DFjwK04OP4WtTx/TV+zw8Nkm4wgVVwgOhg
YkR0x3RZZLz1DXXloufKIVycSvAHT8oXeCmBqaMNKbDR0PLLknvn0nu0F9zWRPBB
4LGsW1ivGLzGjh/HZs7H4nY00SA16+H4ZY/9vnvQ4utg8w3FBhBMCJMh9Cma+3iS
Lo1GO/yYjqiuDkyDSa+OHwuR4El+l84rWUvKrj9BZi8CrhYyoijbTeW+XXx6tecZ
BZRC3DvZTgJw4VKQQnSGv+rKEvneB5u7TFjRlC6MEtBGoX8OdkiM/70f1Tj5zWt5
omSkUjKWug==
-----END CERTIFICATE-----
Generated at Fri Nov 22 20:03:06 2024 by rpki-client on console-ams.rpki-client.org