Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36aNFIY6RUuJVHtZtcw0Fc0tjzc.cer
File: 36aNFIY6RUuJVHtZtcw0Fc0tjzc.cer (raw, json)
Hash identifier: s01azpdWFwRvOzak91LuP9xZ7dse+u7X/CEz6V4CjBU=
Subject key identifier: DF:A6:8D:14:86:3A:45:4B:89:54:7B:59:B5:CC:34:15:CD:2D:8F:37
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC49373D906CB77B6686E11032CFCE1DD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/17/a146c7-81e9-4862-974f-e0ecd5342ed8/1/36aNFIY6RUuJVHtZtcw0Fc0tjzc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/17/a146c7-81e9-4862-974f-e0ecd5342ed8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:46 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 60940
IP: 185.23.92.0/22
IP: 2a04:2500::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:73:d9:06:cb:77:b6:68:6e:11:03:2c:fc:e1:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dfa68d14863a454b89547b59b5cc3415cd2d8f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:14:c3:aa:c6:55:88:ab:43:2a:a7:07:cb:39:
0c:a8:9f:53:9c:42:7c:21:a1:e8:a9:10:38:f6:ec:
c0:e0:18:77:40:72:31:8d:ee:ed:d2:4c:a3:33:68:
ad:e2:2f:ae:95:30:cc:3f:2a:7d:ea:4a:d1:2b:39:
44:7a:8d:18:e5:cf:5a:71:b9:a3:c2:4a:6f:b4:0f:
9d:5a:b1:85:30:e2:57:c7:02:25:17:fc:cb:1a:86:
f8:22:14:1f:90:b5:18:28:79:62:74:85:6a:b2:f6:
47:81:93:40:98:bc:30:30:4c:eb:2e:f8:4c:1e:31:
aa:7b:87:32:85:ba:d4:64:b9:2e:b4:45:81:7e:28:
ae:86:30:bb:28:ec:dc:ce:8f:66:3f:85:e7:21:67:
22:64:b6:67:99:a9:95:1c:78:7d:32:b2:15:da:cd:
8e:ca:86:7c:23:16:04:ee:cc:5a:c2:9b:53:14:d5:
43:a1:68:cd:a7:f7:ec:0f:5f:66:1c:14:42:4f:32:
c1:45:ab:03:e8:8d:6e:83:20:f1:cf:e5:08:6e:ef:
8c:ae:ad:d9:b6:90:b0:d5:e2:3f:a2:1e:4b:84:fa:
c9:94:ec:17:b9:e0:83:d8:a0:93:81:64:cf:36:e2:
19:7e:d8:c4:0a:1c:52:e1:8d:75:2e:41:47:a6:45:
9f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A6:8D:14:86:3A:45:4B:89:54:7B:59:B5:CC:34:15:CD:2D:8F:37
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a146c7-81e9-4862-974f-e0ecd5342ed8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a146c7-81e9-4862-974f-e0ecd5342ed8/1/36aNFIY6RUuJVHtZtcw0Fc0tjzc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.92.0/22
IPv6:
2a04:2500::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60940
Signature Algorithm: sha256WithRSAEncryption
1e:b5:01:b9:5e:95:12:b1:ca:70:4f:83:7d:93:c1:42:f6:de:
37:23:40:9b:70:69:19:bc:f5:58:be:57:8e:e0:99:08:7d:4a:
79:93:30:14:ed:19:49:a4:54:bc:b4:96:84:0c:26:a5:d0:b3:
94:50:f6:f5:50:18:3d:af:44:9a:50:ca:1e:ab:56:4d:38:83:
af:1a:19:de:60:6b:d3:9a:7c:8e:08:e1:67:37:ea:7a:73:f8:
14:df:35:a7:6b:f2:51:bf:dc:ec:e7:b6:51:5d:dc:dc:b8:a5:
57:63:0c:07:c8:c5:2a:e3:04:1b:e6:46:74:e9:d1:5c:95:85:
74:c5:c8:ee:86:e0:1c:fd:1b:41:76:92:d8:27:f7:77:17:af:
bb:c9:e1:90:f3:39:80:3e:37:49:ce:e1:04:69:55:df:1f:c3:
39:73:d1:dc:a0:84:1c:62:ca:9a:06:56:53:ef:11:6b:ff:86:
d9:45:31:8d:3f:0a:9b:86:b1:71:e2:18:b6:dd:68:3b:39:30:
93:73:a5:b2:0b:58:a7:22:d6:ac:f4:4a:7d:be:4b:34:60:d5:
32:44:84:95:df:3f:35:47:49:b7:94:06:da:4a:05:02:e9:92:
6d:63:39:83:e0:09:67:07:6b:2e:20:e4:34:92:de:0b:33:c5:
57:8c:d7:aa
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzEk3PZBst3tmhuEQMs/OHdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTAzMDQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZmE2OGQxNDg2M2E0NTRiODk1NDdiNTliNWNjMzQxNWNkMmQ4ZjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxTDqsZViKtDKqcHyzkMqJ9TnEJ8
IaHoqRA49uzA4Bh3QHIxje7t0kyjM2it4i+ulTDMPyp96krRKzlEeo0Y5c9acbmj
wkpvtA+dWrGFMOJXxwIlF/zLGob4IhQfkLUYKHlidIVqsvZHgZNAmLwwMEzrLvhM
HjGqe4cyhbrUZLkutEWBfiiuhjC7KOzczo9mP4XnIWciZLZnmamVHHh9MrIV2s2O
yoZ8IxYE7sxawptTFNVDoWjNp/fsD19mHBRCTzLBRasD6I1ugyDxz+UIbu+Mrq3Z
tpCw1eI/oh5LhPrJlOwXueCD2KCTgWTPNuIZftjEChxS4Y11LkFHpkWftwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFN+mjRSGOkVLiVR7WbXMNBXNLY83MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE3L2ExNDZj
Ny04MWU5LTQ4NjItOTc0Zi1lMGVjZDUzNDJlZDgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTcvYTE0NmM3
LTgxZTktNDg2Mi05NzRmLWUwZWNkNTM0MmVkOC8xLzM2YU5GSVk2UlV1SlZIdFp0
Y3cwRmMwdGp6Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuRdcMA0EAgACMAcDBQMqBCUAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDuDDANBgkqhkiG9w0BAQsFAAOCAQEAHrUBuV6VErHK
cE+DfZPBQvbeNyNAm3BpGbz1WL5XjuCZCH1KeZMwFO0ZSaRUvLSWhAwmpdCzlFD2
9VAYPa9EmlDKHqtWTTiDrxoZ3mBr05p8jgjhZzfqenP4FN81p2vyUb/c7Oe2UV3c
3LilV2MMB8jFKuMEG+ZGdOnRXJWFdMXI7obgHP0bQXaS2Cf3dxevu8nhkPM5gD43
Sc7hBGlV3x/DOXPR3KCEHGLKmgZWU+8Ra/+G2UUxjT8Km4axceIYtt1oOzkwk3Ol
sgtYpyLWrPRKfb5LNGDVMkSEld8/NUdJt5QG2koFAumSbWM5g+AJZwdrLiDkNJLe
CzPFV4zXqg==
-----END CERTIFICATE-----
Generated at Thu Apr 25 04:18:56 2024 by rpki-client on console-ams.rpki-client.org