Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/352lG6cnhKBORBIPne1HhWd5TBs.cer
File: 352lG6cnhKBORBIPne1HhWd5TBs.cer (raw, json)
Hash identifier: MPivpv9WcvI6aW5paYAsm3nJvaKj8TdC9V5giVmYnq8=
Subject key identifier: DF:9D:A5:1B:A7:27:84:A0:4E:44:12:0F:9D:ED:47:85:67:79:4C:1B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94E2ACC0779FA0AD6F43A7F695CE634
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/88/bf8eca-bcf9-4536-88bf-bc6975561078/1/352lG6cnhKBORBIPne1HhWd5TBs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/88/bf8eca-bcf9-4536-88bf-bc6975561078/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:33:12 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208450
IP: 45.136.56.0/22
IP: 2a0e:9340::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Apr 2024 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:2a:cc:07:79:fa:0a:d6:f4:3a:7f:69:5c:e6:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:33:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df9da51ba72784a04e44120f9ded478567794c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3f:53:72:fe:71:89:88:7e:58:4c:cd:90:cd:
45:8a:16:9c:ee:82:cc:cf:42:1a:57:57:83:ee:d8:
7b:db:93:06:d4:5e:c9:6d:de:47:c5:d3:1b:a4:d9:
9a:8a:b6:dd:b5:bd:7a:83:ea:a8:80:7e:a7:d4:a9:
90:d5:e6:6b:1b:3c:36:cf:df:d0:e9:8b:e7:7a:26:
57:32:f5:5e:84:ec:ea:6f:3c:ee:28:2b:8f:59:09:
4e:f6:7c:0e:13:ad:cf:fe:7b:d9:ab:5e:a9:7e:01:
f2:10:05:ee:2a:23:0f:0f:0f:20:df:9a:34:c6:e1:
c2:6f:b7:aa:45:46:d3:1a:33:86:bd:af:c8:06:f8:
c2:6a:df:ac:34:43:2b:f2:50:da:d9:ed:ed:27:20:
d9:d1:99:f9:18:98:bd:fc:53:0e:d7:3a:68:34:b2:
f3:b6:18:af:c6:b9:6f:09:5b:41:a0:af:10:c1:36:
25:a7:a0:bb:72:f9:33:0d:51:28:92:58:21:47:08:
cb:cb:ea:b8:64:cd:82:05:1c:82:c7:1c:d3:eb:16:
44:1b:5b:7a:04:14:6a:b7:52:fd:64:0d:4a:33:41:
cc:82:51:a9:fe:b1:1e:1d:68:cb:2e:a5:33:9c:35:
e6:64:c2:25:09:7e:21:b6:20:5f:27:7d:d8:ee:fd:
eb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:9D:A5:1B:A7:27:84:A0:4E:44:12:0F:9D:ED:47:85:67:79:4C:1B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bf8eca-bcf9-4536-88bf-bc6975561078/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bf8eca-bcf9-4536-88bf-bc6975561078/1/352lG6cnhKBORBIPne1HhWd5TBs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.56.0/22
IPv6:
2a0e:9340::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208450
Signature Algorithm: sha256WithRSAEncryption
72:4c:db:43:1f:36:14:01:df:ec:95:9b:47:5a:60:3b:d8:b7:
55:a0:d6:84:48:ec:fc:31:fe:78:7e:51:57:cd:96:20:7c:ac:
45:56:b8:82:49:45:38:5e:bc:bf:06:6d:9c:41:50:ea:29:1c:
e5:f8:f3:0f:e0:cf:83:98:11:25:94:42:98:a6:e2:37:a6:b5:
16:46:63:d5:26:9d:e1:82:b2:3b:f3:73:95:1f:f0:6b:64:e9:
63:bc:fb:ec:bc:cf:e9:a9:80:d4:ba:d8:16:ef:e3:f9:b9:0b:
bb:92:b0:5d:24:ae:5f:5e:24:3a:3d:b9:7e:29:a8:33:fd:34:
49:71:b1:96:8e:21:42:6b:76:67:38:6d:e5:fd:66:84:2c:82:
2d:1e:52:dc:fd:c7:78:f4:c1:e0:c0:e5:d3:4c:b2:6d:16:c9:
50:b5:94:d7:c1:01:ec:23:76:52:7c:7a:f2:ee:fa:87:f5:9f:
a0:22:ad:05:91:ff:32:b9:77:ba:ee:78:8e:06:e2:4e:6d:b8:
1d:d6:c7:3f:02:21:9b:04:0d:d8:63:ef:9b:6b:d3:6e:97:f5:
07:17:fd:c6:cd:57:4a:89:3b:ad:14:6f:f2:26:a2:7b:f2:58:
b0:e5:45:ca:ce:37:47:9d:83:5b:3c:03:2d:3c:69:26:c4:b9:
9d:ba:2e:dc
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzJTirMB3n6Ctb0On9pXOY0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDgzMzEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjlkYTUxYmE3Mjc4NGEwNGU0NDEyMGY5ZGVkNDc4NTY3Nzk0YzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzD9Tcv5xiYh+WEzNkM1Fihac7oLM
z0IaV1eD7th725MG1F7Jbd5HxdMbpNmairbdtb16g+qogH6n1KmQ1eZrGzw2z9/Q
6YvneiZXMvVehOzqbzzuKCuPWQlO9nwOE63P/nvZq16pfgHyEAXuKiMPDw8g35o0
xuHCb7eqRUbTGjOGva/IBvjCat+sNEMr8lDa2e3tJyDZ0Zn5GJi9/FMO1zpoNLLz
thivxrlvCVtBoK8QwTYlp6C7cvkzDVEoklghRwjLy+q4ZM2CBRyCxxzT6xZEG1t6
BBRqt1L9ZA1KM0HMglGp/rEeHWjLLqUznDXmZMIlCX4htiBfJ33Y7v3ruQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFN+dpRunJ4SgTkQSD53tR4VneUwbMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg4L2JmOGVj
YS1iY2Y5LTQ1MzYtODhiZi1iYzY5NzU1NjEwNzgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODgvYmY4ZWNh
LWJjZjktNDUzNi04OGJmLWJjNjk3NTU2MTA3OC8xLzM1MmxHNmNuaEtCT1JCSVBu
ZTFIaFdkNVRCcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCLYg4MA0EAgACMAcDBQMqDpNAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMuQjANBgkqhkiG9w0BAQsFAAOCAQEAckzbQx82FAHf
7JWbR1pgO9i3VaDWhEjs/DH+eH5RV82WIHysRVa4gklFOF68vwZtnEFQ6ikc5fjz
D+DPg5gRJZRCmKbiN6a1FkZj1Sad4YKyO/NzlR/wa2TpY7z77LzP6amA1LrYFu/j
+bkLu5KwXSSuX14kOj25fimoM/00SXGxlo4hQmt2Zzht5f1mhCyCLR5S3P3HePTB
4MDl00yybRbJULWU18EB7CN2Unx68u76h/WfoCKtBZH/Mrl3uu54jgbiTm24HdbH
PwIhmwQN2GPvm2vTbpf1Bxf9xs1XSok7rRRv8iaie/JYsOVFys43R52DWzwDLTxp
JsS5nbou3A==
-----END CERTIFICATE-----
Generated at Thu Apr 18 18:28:33 2024 by rpki-client on console-fra.rpki-client.org