Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer
File: 2huf6PGjORf-5-Tb6fq5JeuGJak.cer (raw, json)
Hash identifier: 8ey8mATLos59a2Rt788sPSYgc+0ndfkenSwe5LIWu/s=
Subject key identifier: DA:1B:9F:E8:F1:A3:39:17:FE:E7:E4:DB:E9:FA:B9:25:EB:86:25:A9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC794E899E23A55C65ADA036F90794549
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:31:14 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.211.86.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:e8:99:e2:3a:55:c6:5a:da:03:6f:90:79:45:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da1b9fe8f1a33917fee7e4dbe9fab925eb8625a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e1:82:7b:e0:d2:6d:4d:bc:bb:0c:3c:1b:7e:
08:a0:fa:82:48:4b:4d:b0:10:c6:65:ac:03:4e:16:
b9:cd:f0:5d:77:85:55:1f:f9:ca:cd:b0:b5:1b:15:
01:c1:d6:ba:d3:21:a4:89:02:82:42:c8:7c:33:f2:
0d:89:23:ad:ab:75:ea:0f:d8:f1:32:84:45:b7:35:
0b:26:82:0b:5d:74:05:c7:13:4a:35:e9:2f:29:10:
19:22:df:d5:a0:38:76:ed:98:43:ee:f2:bd:d8:82:
35:94:01:b9:93:14:99:d8:49:7f:d5:02:81:54:37:
32:25:0d:e4:95:76:ac:41:f5:bf:d2:67:bb:a7:4f:
a3:cd:f7:19:7c:de:52:b6:72:db:de:f2:64:e5:e5:
73:b5:1e:00:dc:d5:5b:2f:f6:03:46:bb:74:52:fd:
5d:25:21:9e:6c:02:f2:ce:41:6e:af:68:8b:ec:e9:
03:8f:68:fe:ae:14:53:58:fa:4a:be:d5:f5:10:e8:
bb:5a:b0:5a:22:91:97:5a:10:eb:5a:c1:18:c7:ac:
17:05:53:d4:ab:60:5d:86:82:1a:03:47:5f:39:15:
b3:25:a3:0b:c2:62:bb:18:c1:98:32:ac:29:3b:c5:
c2:5e:71:a4:bd:6a:4b:02:14:98:ad:09:80:a6:07:
c2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:1B:9F:E8:F1:A3:39:17:FE:E7:E4:DB:E9:FA:B9:25:EB:86:25:A9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.86.0/24
Signature Algorithm: sha256WithRSAEncryption
40:b1:e3:9c:1f:8a:55:0e:4b:dd:2e:1d:00:16:65:f7:77:b5:
1c:e0:92:76:12:2d:5f:fa:06:f7:1c:96:9e:97:90:62:df:84:
5a:be:08:ec:d8:5f:6f:6f:93:31:23:1d:ec:e0:b6:a3:5d:82:
90:d2:d5:8e:47:73:00:80:03:bd:88:8c:75:40:bd:c1:b7:6c:
9e:91:73:a6:42:dc:63:66:b2:ee:fc:ca:11:4d:c8:af:50:d9:
3c:5b:73:5d:8f:c8:d3:24:80:85:b2:94:b9:45:c3:96:ec:9c:
2b:dd:79:09:9f:84:71:d7:dc:9e:87:b9:f8:92:6f:27:89:b9:
ba:71:a5:ea:e8:e5:40:8d:8c:7b:16:38:81:82:7f:31:b5:eb:
a5:ae:ce:34:ec:26:77:0b:88:7b:81:7b:eb:f5:10:3c:02:32:
55:ba:cc:0f:14:97:e8:d8:35:a4:10:33:a1:72:2d:89:a9:5e:
af:f3:d7:71:13:fd:2b:29:ea:0b:1b:63:62:6f:4a:48:41:1f:
82:5a:0b:cb:95:be:7b:9f:69:d5:d4:4e:9b:10:0c:08:8f:49:
ec:36:eb:83:66:a5:d4:61:c2:20:6d:82:49:55:ae:23:3d:b9:
72:ce:0c:98:46:0a:1b:20:98:0b:11:a4:04:df:73:9f:b6:1b:
0e:f9:66:62
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzHlOiZ4jpVxlraA2+QeUVJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDAzMTE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTFiOWZlOGYxYTMzOTE3ZmVlN2U0ZGJlOWZhYjkyNWViODYyNWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeGCe+DSbU28uww8G34IoPqCSEtN
sBDGZawDTha5zfBdd4VVH/nKzbC1GxUBwda60yGkiQKCQsh8M/INiSOtq3XqD9jx
MoRFtzULJoILXXQFxxNKNekvKRAZIt/VoDh27ZhD7vK92II1lAG5kxSZ2El/1QKB
VDcyJQ3klXasQfW/0me7p0+jzfcZfN5StnLb3vJk5eVztR4A3NVbL/YDRrt0Uv1d
JSGebALyzkFur2iL7OkDj2j+rhRTWPpKvtX1EOi7WrBaIpGXWhDrWsEYx6wXBVPU
q2BdhoIaA0dfORWzJaMLwmK7GMGYMqwpO8XCXnGkvWpLAhSYrQmApgfCDwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFNobn+jxozkX/ufk2+n6uSXrhiWpMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjLzQyYTE2
Ni04YTg2LTQ4ZGEtYmI5Ni03OWZkNTAyM2RlMzYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMvNDJhMTY2
LThhODYtNDhkYS1iYjk2LTc5ZmQ1MDIzZGUzNi8xLzJodWY2UEdqT1JmLTUtVGI2
ZnE1SmV1R0phay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW9NWMA0GCSqGSIb3DQEBCwUAA4IBAQBAseOc
H4pVDkvdLh0AFmX3d7Uc4JJ2Ei1f+gb3HJael5Bi34Ravgjs2F9vb5MxIx3s4Laj
XYKQ0tWOR3MAgAO9iIx1QL3Bt2yekXOmQtxjZrLu/MoRTcivUNk8W3Ndj8jTJICF
spS5RcOW7Jwr3XkJn4Rx19yeh7n4km8nibm6caXq6OVAjYx7FjiBgn8xteulrs40
7CZ3C4h7gXvr9RA8AjJVuswPFJfo2DWkEDOhci2JqV6v89dxE/0rKeoLG2Nib0pI
QR+CWgvLlb57n2nV1E6bEAwIj0nsNuuDZqXUYcIgbYJJVa4jPblyzgyYRgobIJgL
EaQE33OfthsO+WZi
-----END CERTIFICATE-----
Generated at Fri May 3 01:13:15 2024 by rpki-client on console-ams.rpki-client.org