Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
File: 2xhkIiednYtOaOabEpblMtTaDD8.cer (raw, json)
Hash identifier: ZWAJaJGc0Qd7Exqi234vn9/mgmjgPZCrJJN04CwHMoQ=
Subject key identifier: DB:18:64:22:27:9D:9D:8B:4E:68:E6:9B:12:96:E5:32:D4:DA:0C:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94E1F60269F90BF868E80D460209F1C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:33:09 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 203441
IP: 185.132.224.0/22
IP: 193.105.103.0/24
IP: 2a03:a660::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 24 Apr 2024 17:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:1f:60:26:9f:90:bf:86:8e:80:d4:60:20:9f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:33:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db186422279d9d8b4e68e69b1296e532d4da0c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:87:c5:99:e2:f4:99:ce:f8:9c:15:84:5c:e9:
fc:d7:63:a4:d5:da:d9:ec:c9:d6:4b:4b:67:02:85:
a8:40:54:ba:79:ed:53:95:70:93:df:2b:ef:20:17:
d6:e4:da:b8:ea:a8:58:66:b6:a4:23:b8:a0:2b:7e:
21:d0:3f:38:ad:28:c6:6f:f3:92:4c:f5:ed:27:a9:
ae:0f:a9:8e:08:53:87:44:e8:15:0f:5d:2e:88:73:
8a:97:99:98:4e:08:d2:fe:43:bf:af:75:6e:e7:d3:
45:65:1d:48:c5:65:03:10:4a:30:75:d9:d9:18:cb:
75:78:19:5d:72:6a:cd:ab:59:b2:2c:5e:27:8e:26:
aa:29:ed:ac:09:91:01:2d:ec:76:8d:b8:34:c6:3d:
4e:21:94:f1:4f:d5:19:6c:59:95:a5:7f:55:58:d9:
06:cf:a6:25:02:ce:c9:12:76:05:cc:b6:a3:a9:70:
bf:00:3b:9e:55:88:c9:3f:b7:08:86:c9:43:00:eb:
17:37:61:67:c5:36:1c:7e:53:b5:87:2d:6f:75:44:
16:a3:d1:31:e2:da:03:5f:3a:e6:40:ad:a1:15:49:
89:38:65:08:ab:7a:d0:00:67:89:f0:ba:96:9e:51:
6f:11:aa:93:0f:b8:7a:7c:67:22:0b:50:df:52:8f:
28:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:18:64:22:27:9D:9D:8B:4E:68:E6:9B:12:96:E5:32:D4:DA:0C:3F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.132.224.0/22
193.105.103.0/24
IPv6:
2a03:a660::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203441
Signature Algorithm: sha256WithRSAEncryption
60:f4:a2:70:e5:c0:35:92:e8:92:68:76:bd:d7:c2:cb:00:c5:
d4:3d:f7:fd:4e:33:ed:25:2f:e8:73:5f:46:55:58:d1:c8:13:
8f:ee:c1:6b:c0:3a:10:d5:72:45:b8:aa:fa:b7:e2:ec:7b:82:
fa:d6:85:d3:ac:6a:5f:fa:37:b8:44:07:ca:96:6e:b9:0e:44:
49:9a:04:e4:f5:9e:cc:dd:31:65:ac:b7:d7:bc:4b:6c:7c:9f:
e9:3b:9a:27:b8:92:c9:1b:09:97:16:1a:b4:b4:1f:df:d9:ec:
f0:65:38:9b:ff:80:41:b7:81:ef:b6:15:62:45:c2:cd:f6:be:
d8:40:b4:53:53:5a:7c:63:85:06:14:0d:6e:bd:a6:6f:e6:8c:
8d:64:d1:9a:92:98:11:47:12:08:6d:b0:db:bb:75:15:02:7a:
44:9f:07:88:f7:c3:d2:0b:23:6f:07:10:7c:ee:21:e9:1b:76:
57:11:f6:40:0b:28:a0:64:08:41:07:06:75:f2:2e:c3:9c:17:
31:e9:eb:38:75:b1:94:52:28:78:12:ad:95:5e:90:83:44:1b:
f4:b3:39:90:af:1d:69:54:22:89:4c:75:af:b4:32:cf:8b:1e:
5d:fd:13:a4:e0:6e:c0:5f:82:88:76:a6:27:f9:95:04:d1:ad:
80:a4:93:31
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAYzJTh9gJp+Qv4aOgNRgIJ8cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDgzMzA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjE4NjQyMjI3OWQ5ZDhiNGU2OGU2OWIxMjk2ZTUzMmQ0ZGEwYzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YfFmeL0mc74nBWEXOn812Ok1drZ
7MnWS0tnAoWoQFS6ee1TlXCT3yvvIBfW5Nq46qhYZrakI7igK34h0D84rSjGb/OS
TPXtJ6muD6mOCFOHROgVD10uiHOKl5mYTgjS/kO/r3Vu59NFZR1IxWUDEEowddnZ
GMt1eBldcmrNq1myLF4njiaqKe2sCZEBLex2jbg0xj1OIZTxT9UZbFmVpX9VWNkG
z6YlAs7JEnYFzLajqXC/ADueVYjJP7cIhslDAOsXN2FnxTYcflO1hy1vdUQWo9Ex
4toDXzrmQK2hFUmJOGUIq3rQAGeJ8LqWnlFvEaqTD7h6fGciC1DfUo8oMQIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFNsYZCInnZ2LTmjmmxKW5TLU2gw/MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhkLzBjMDFj
NS0xNTdkLTQwYTctOGZjYy01Yzc3MjM0NjAyMjMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGQvMGMwMWM1
LTE1N2QtNDBhNy04ZmNjLTVjNzcyMzQ2MDIyMy8xLzJ4aGtJaWVkbll0T2FPYWJF
cGJsTXRUYUREOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQCuYTgAwQAwWlnMA0EAgACMAcDBQAqA6ZgMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMasTANBgkqhkiG9w0BAQsFAAOCAQEAYPSi
cOXANZLokmh2vdfCywDF1D33/U4z7SUv6HNfRlVY0cgTj+7Ba8A6ENVyRbiq+rfi
7HuC+taF06xqX/o3uEQHypZuuQ5ESZoE5PWezN0xZay317xLbHyf6TuaJ7iSyRsJ
lxYatLQf39ns8GU4m/+AQbeB77YVYkXCzfa+2EC0U1NafGOFBhQNbr2mb+aMjWTR
mpKYEUcSCG2w27t1FQJ6RJ8HiPfD0gsjbwcQfO4h6Rt2VxH2QAsooGQIQQcGdfIu
w5wXMenrOHWxlFIoeBKtlV6Qg0Qb9LM5kK8daVQiiUx1r7Qyz4seXf0TpOBuwF+C
iHamJ/mVBNGtgKSTMQ==
-----END CERTIFICATE-----
Generated at Wed Apr 24 00:04:39 2024 by rpki-client on console-fra.rpki-client.org