Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2oKEhxg4QJk8Aaz51ABSOUhMQqA.cer
File: 2oKEhxg4QJk8Aaz51ABSOUhMQqA.cer (raw, json)
Hash identifier: kpuYkTP5OX9zdR7tVX6Nvpym5dg9oAVrcd/YNnuSHNw=
Subject key identifier: DA:82:84:87:18:38:40:99:3C:01:AC:F9:D4:00:52:39:48:4C:42:A0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB199FDD7BBB5B52D3E0795202F78F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9e/b01513-c61f-47ab-aba5-f77b6d164c72/1/2oKEhxg4QJk8Aaz51ABSOUhMQqA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9e/b01513-c61f-47ab-aba5-f77b6d164c72/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:48 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 176.105.244.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:19:9f:dd:7b:bb:5b:52:d3:e0:79:52:02:f7:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da828487183840993c01acf9d4005239484c42a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2c:ed:4d:da:bd:25:2d:1a:b0:05:af:84:90:
a8:10:1d:6f:e4:17:5e:ce:1c:f4:96:99:6a:f1:81:
a3:41:ba:e4:34:1a:29:bc:4c:80:0a:fb:c8:08:3f:
8c:66:b9:a9:ba:3b:f2:e2:b9:e3:ac:e0:a4:1d:91:
2f:1a:16:7d:e5:2f:1e:63:f1:3e:09:fc:36:0c:0e:
d3:62:8c:89:d6:3a:f0:6e:c0:25:e5:d5:ea:4a:01:
f2:10:f0:bb:21:f1:c5:57:95:8d:a4:57:19:ca:1a:
3c:16:5f:b5:31:d6:d1:ed:80:05:33:52:85:30:12:
dc:fd:fe:fe:ed:2d:0e:12:35:9d:54:c4:91:92:fc:
15:e5:6b:49:15:fe:cd:2a:6a:16:fc:a1:ce:7c:ec:
e0:78:5b:84:5b:98:7f:2b:ec:1c:28:40:27:4e:3a:
e4:b7:9c:d2:f7:5a:3a:04:32:34:42:cd:c7:8b:af:
24:71:2a:8a:45:42:cd:c3:0b:10:51:24:18:e9:2a:
c0:85:eb:88:96:5d:3d:a6:df:b7:15:f8:62:a1:d0:
4e:fc:91:45:c4:47:58:70:ea:f4:9c:83:41:4c:7e:
13:c7:e3:8d:48:60:21:99:f5:24:cf:4a:be:0f:3d:
e4:f7:8e:d6:2c:02:51:40:cc:2c:e7:8e:27:6c:bc:
ed:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:82:84:87:18:38:40:99:3C:01:AC:F9:D4:00:52:39:48:4C:42:A0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/b01513-c61f-47ab-aba5-f77b6d164c72/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/b01513-c61f-47ab-aba5-f77b6d164c72/1/2oKEhxg4QJk8Aaz51ABSOUhMQqA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.244.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:f7:05:a7:e6:07:4c:a4:b6:70:ae:44:49:57:57:b2:ea:e5:
aa:4f:d3:7c:c7:fd:6a:0b:a0:95:98:af:64:42:72:75:f2:d1:
21:4b:c2:53:96:f8:aa:c9:d5:01:2a:77:74:d0:2f:e0:ab:c2:
d2:ce:10:69:ab:ce:21:0b:95:7c:8e:b9:05:a3:63:6f:46:d4:
63:f0:48:8f:3c:09:0e:3a:4c:13:24:29:d1:9c:82:df:3c:be:
1e:90:8e:48:35:2c:50:e2:ed:68:a5:73:7a:70:c4:9d:a2:e7:
de:ac:7b:64:d1:5d:cc:99:5f:17:fa:93:01:85:ed:48:55:92:
03:7f:80:cb:99:e7:be:6d:9a:4e:9f:eb:3e:00:b3:22:79:b9:
dd:e8:7b:1e:b5:b6:4f:d1:ae:47:7d:7d:80:f4:85:47:14:91:
00:69:91:14:42:98:06:8b:74:22:8f:c5:25:17:ff:e7:f3:8b:
c0:8e:7a:9c:c1:37:e0:cf:b3:7a:88:21:72:52:5f:ee:99:c9:
35:ff:d0:e3:e5:24:69:f2:2e:67:2e:b8:d4:d1:07:0f:77:b5:
54:7e:83:0b:f7:58:21:f6:6d:3b:74:58:6f:5e:92:7c:34:83:
f3:1b:88:a8:96:52:0f:e7:da:16:2f:54:f0:f5:c2:4d:ad:3f:
21:59:1b:da
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzC2xmf3Xu7W1LT4HlSAvePMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDIyOTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTgyODQ4NzE4Mzg0MDk5M2MwMWFjZjlkNDAwNTIzOTQ4NGM0MmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiztTdq9JS0asAWvhJCoEB1v5Bde
zhz0lplq8YGjQbrkNBopvEyACvvICD+MZrmpujvy4rnjrOCkHZEvGhZ95S8eY/E+
Cfw2DA7TYoyJ1jrwbsAl5dXqSgHyEPC7IfHFV5WNpFcZyho8Fl+1MdbR7YAFM1KF
MBLc/f7+7S0OEjWdVMSRkvwV5WtJFf7NKmoW/KHOfOzgeFuEW5h/K+wcKEAnTjrk
t5zS91o6BDI0Qs3Hi68kcSqKRULNwwsQUSQY6SrAheuIll09pt+3FfhiodBO/JFF
xEdYcOr0nINBTH4Tx+ONSGAhmfUkz0q+Dz3k947WLAJRQMws544nbLztLQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFNqChIcYOECZPAGs+dQAUjlITEKgMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzllL2IwMTUx
My1jNjFmLTQ3YWItYWJhNS1mNzdiNmQxNjRjNzIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWUvYjAxNTEz
LWM2MWYtNDdhYi1hYmE1LWY3N2I2ZDE2NGM3Mi8xLzJvS0VoeGc0UUprOEFhejUx
QUJTT1VoTVFxQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAsGn0MA0GCSqGSIb3DQEBCwUAA4IBAQCx9wWn
5gdMpLZwrkRJV1ey6uWqT9N8x/1qC6CVmK9kQnJ18tEhS8JTlviqydUBKnd00C/g
q8LSzhBpq84hC5V8jrkFo2NvRtRj8EiPPAkOOkwTJCnRnILfPL4ekI5INSxQ4u1o
pXN6cMSdouferHtk0V3MmV8X+pMBhe1IVZIDf4DLmee+bZpOn+s+ALMiebnd6Hse
tbZP0a5HfX2A9IVHFJEAaZEUQpgGi3Qij8UlF//n84vAjnqcwTfgz7N6iCFyUl/u
mck1/9Dj5SRp8i5nLrjU0QcPd7VUfoML91gh9m07dFhvXpJ8NIPzG4iollIP59oW
L1Tw9cJNrT8hWRva
-----END CERTIFICATE-----
Generated at Fri Apr 19 19:48:24 2024 by rpki-client on console-ams.rpki-client.org