Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
File: 3EPqLNB5l-zf4XGIhycIZS4XLfI.cer (raw, json)
Hash identifier: m4E9uUq+lEcKLh75WR0foAsVYMWF2SCBOf/JuhwpmMw=
Subject key identifier: DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94D836594C72AF32BF4E5C346193BBB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:32:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.220.21.0/24
IP: 2001:678:2f0::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:83:65:94:c7:2a:f3:2b:f4:e5:c3:46:19:3b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:32:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc43ea2cd07997ecdfe17188872708652e172df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:05:bd:0b:32:a3:8e:dc:40:a9:76:51:0b:d1:
7b:cf:07:08:99:15:82:f8:0d:37:60:20:2a:ee:f7:
6e:cf:50:9d:89:fb:62:2a:93:bc:7a:8e:07:e8:90:
f3:a7:e5:49:09:cd:13:01:80:f6:15:2f:3e:51:db:
bf:1b:62:a3:2a:f9:de:ea:5c:62:f6:5d:17:01:be:
e2:13:14:22:fd:18:69:e7:cd:06:aa:24:0d:65:89:
a8:b7:00:7a:23:b5:e8:27:51:03:8d:ef:46:c6:a6:
35:bd:fd:25:11:c0:a9:51:0a:5e:08:27:5b:e6:56:
4d:c5:18:ee:ff:70:89:7e:0e:01:68:62:3c:57:0e:
db:bc:85:03:e0:f3:64:5a:50:8b:b1:64:35:4e:c8:
32:e2:99:3c:cf:81:40:47:c9:c5:b0:d7:37:f8:9b:
e3:85:42:04:26:ad:7e:7f:8e:95:df:70:85:3f:6e:
ca:08:60:1b:6d:c3:29:82:b0:19:be:0c:10:c3:66:
38:92:27:57:00:00:14:32:d0:a8:1c:c1:cd:05:60:
d4:b9:0e:3d:3f:19:37:45:dc:f5:33:f7:f5:44:ec:
82:d6:98:71:c6:b0:5f:af:d1:75:66:c6:fc:42:15:
2b:51:d3:3e:44:e9:29:51:6e:be:8a:58:f0:7c:41:
59:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.21.0/24
IPv6:
2001:678:2f0::/48
Signature Algorithm: sha256WithRSAEncryption
82:c4:ba:01:fd:86:7a:3d:46:f4:76:7e:07:9f:78:01:ed:a2:
0b:35:c9:ea:75:be:a2:da:db:51:2d:00:11:a9:81:80:b4:d6:
8b:55:ec:e1:99:0f:f6:98:b3:da:ef:35:7b:6a:e6:2b:a4:13:
56:d3:11:23:9c:4c:38:70:9b:9d:c3:11:1e:cb:6b:47:50:6f:
ed:46:80:aa:c8:b3:6d:7b:a5:6d:30:32:8b:ea:13:4b:a1:7a:
14:69:5c:64:b2:7b:e3:d4:5d:8e:8e:b0:4e:1f:a9:83:d4:d3:
88:a1:3c:03:5b:7e:cf:8a:d4:c9:d0:04:65:fe:87:06:7f:43:
84:29:24:3b:23:e1:fe:f6:69:0a:f5:a8:5d:2d:36:a3:d6:3e:
08:98:76:23:39:f8:88:be:13:a8:d3:03:fe:9b:4c:99:6f:d3:
a9:9f:90:00:58:8e:1c:2a:b5:6d:0b:ec:cf:23:da:71:36:88:
d4:e1:4f:d3:e9:42:25:7f:52:dd:5d:0b:73:5d:bb:54:99:cc:
ab:ab:f1:56:20:29:ae:dc:d4:d6:77:c5:a0:12:c7:c2:61:79:
96:55:78:35:ba:2c:be:5b:58:2b:44:93:67:d3:6b:7e:a3:4d:
3c:81:b3:94:43:81:55:65:47:0c:4e:7f:ec:23:a7:d6:f0:21:
8f:af:46:db
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgISAYzJTYNllMcq8yv05cNGGTu7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDgzMjI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzQzZWEyY2QwNzk5N2VjZGZlMTcxODg4NzI3MDg2NTJlMTcyZGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwW9CzKjjtxAqXZRC9F7zwcImRWC
+A03YCAq7vduz1CdiftiKpO8eo4H6JDzp+VJCc0TAYD2FS8+Udu/G2KjKvne6lxi
9l0XAb7iExQi/Rhp580GqiQNZYmotwB6I7XoJ1EDje9GxqY1vf0lEcCpUQpeCCdb
5lZNxRju/3CJfg4BaGI8Vw7bvIUD4PNkWlCLsWQ1Tsgy4pk8z4FAR8nFsNc3+Jvj
hUIEJq1+f46V33CFP27KCGAbbcMpgrAZvgwQw2Y4kidXAAAUMtCoHMHNBWDUuQ49
Pxk3Rdz1M/f1ROyC1phxxrBfr9F1Zsb8QhUrUdM+ROkpUW6+iljwfEFZxwIDAQAB
o4IClTCCApEwHQYDVR0OBBYEFNxD6izQeZfs3+FxiIcnCGUuFy3yMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M1LzRmZTc2
YS1hYjgxLTQyYTQtYWVjZi00NDY0NGRkNWVkNDQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUvNGZlNzZh
LWFiODEtNDJhNC1hZWNmLTQ0NjQ0ZGQ1ZWQ0NC8xLzNFUHFMTkI1bC16ZjRYR0lo
eWNJWlM0WExmSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF
BwEHAQH/BCEwHzAMBAIAATAGAwQAW9wVMA8EAgACMAkDBwAgAQZ4AvAwDQYJKoZI
hvcNAQELBQADggEBAILEugH9hno9RvR2fgefeAHtogs1yep1vqLa21EtABGpgYC0
1otV7OGZD/aYs9rvNXtq5iukE1bTESOcTDhwm53DER7La0dQb+1GgKrIs217pW0w
MovqE0uhehRpXGSye+PUXY6OsE4fqYPU04ihPANbfs+K1MnQBGX+hwZ/Q4QpJDsj
4f72aQr1qF0tNqPWPgiYdiM5+Ii+E6jTA/6bTJlv06mfkABYjhwqtW0L7M8j2nE2
iNThT9PpQiV/Ut1dC3Ndu1SZzKur8VYgKa7c1NZ3xaASx8JheZZVeDW6LL5bWCtE
k2fTa36jTTyBs5RDgVVlRwxOf+wjp9bwIY+vRts=
-----END CERTIFICATE-----
Generated at Fri May 3 09:30:12 2024 by rpki-client on console-fra.rpki-client.org