Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer
File: 4GK7krvun23ndX0lbUj2biB_RK8.cer (raw, json)
Hash identifier: syzYjjK3f97qyC50aONBTH6wq60PHaKfeP7/l4hNDOo=
Subject key identifier: E0:62:BB:92:BB:EE:9F:6D:E7:75:7D:25:6D:48:F6:6E:20:7F:44:AF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E5C113D3CAE0C4E2763EA3B312B567637
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 20 Mar 2024 13:33:37 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 202333
IP: 194.156.212.0/22
IP: 2a07:e880::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:5c:11:3d:3c:ae:0c:4e:27:63:ea:3b:31:2b:56:76:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 20 13:33:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e062bb92bbee9f6de7757d256d48f66e207f44af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:58:4c:c7:a1:3e:26:c5:ae:9e:f5:3f:d8:4f:
2e:77:28:1f:b7:4e:d6:a1:33:e3:44:36:2a:10:39:
b3:0f:43:30:9d:de:7f:54:1f:9f:2a:46:04:de:b3:
17:8f:0e:5f:93:3e:1f:f8:77:f8:bf:43:59:16:d4:
21:71:3c:91:ed:04:5b:9c:59:f1:2a:7f:c4:22:11:
50:e5:ac:e0:c1:dd:69:e3:d8:d1:17:1b:54:6e:8b:
a0:50:8f:d2:3f:1f:89:e3:74:43:e6:ca:61:ce:8d:
eb:49:2f:9d:08:1e:9b:9a:9e:52:eb:76:35:f0:ce:
bf:a1:b8:22:0b:b3:29:a7:41:69:c0:39:df:a6:ac:
4d:80:51:5f:fd:58:d3:a4:8d:b8:2b:39:ac:60:b8:
0b:e7:6d:0e:96:7a:d5:9b:ed:e6:5b:f8:1a:71:56:
02:6c:8d:cf:87:3d:1d:53:ec:20:57:1d:ef:f3:3d:
80:9d:71:80:9e:0c:f2:ef:af:9b:70:c2:38:93:17:
58:a5:5a:82:23:15:79:44:ba:94:ec:af:d4:a8:2d:
ab:67:e7:14:fe:19:d2:c5:ff:69:58:3e:6d:58:f4:
e7:1b:cd:1d:6b:cf:f2:61:39:f5:2c:4f:c7:31:8c:
ad:f6:74:14:c0:b0:e1:02:af:7f:2a:cf:ae:9f:2a:
b5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:62:BB:92:BB:EE:9F:6D:E7:75:7D:25:6D:48:F6:6E:20:7F:44:AF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.212.0/22
IPv6:
2a07:e880::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202333
Signature Algorithm: sha256WithRSAEncryption
59:66:39:22:8b:eb:1b:f9:29:c6:88:c2:52:06:0f:8e:cd:7e:
ae:12:14:aa:5b:57:3a:44:0d:b1:1d:a8:ef:60:0e:79:b9:be:
06:b3:d9:55:60:e3:9d:78:b1:fd:ab:ac:16:23:17:f9:f8:10:
d5:3e:26:20:56:46:a7:9b:b5:ca:26:fa:15:a4:74:5a:8e:45:
89:a6:6f:b3:70:4d:33:5a:df:49:75:04:e2:d8:4a:87:ec:d7:
71:ea:76:2c:58:b4:b9:eb:1e:83:5f:43:87:9f:da:48:eb:9b:
a3:01:26:c6:89:29:03:9a:6e:47:92:55:8d:ee:7f:be:60:ea:
36:e1:68:3e:96:e8:fd:64:da:9b:b4:b2:f9:0d:e5:8f:00:74:
4e:18:7d:4a:bc:d1:61:1e:1e:e4:64:c2:86:db:87:6f:0b:ed:
c0:16:21:fb:ba:54:94:b0:c0:90:f0:35:5f:76:7f:52:23:5e:
56:4a:41:64:a5:9d:8a:db:ea:40:03:d4:cc:c7:a7:9c:9b:8b:
5a:c0:14:d1:11:92:c9:96:3a:f6:a4:61:24:88:80:26:2d:29:
f1:ec:e3:fb:d4:99:e5:a1:03:d4:ad:b2:80:b6:f4:d6:58:8e:
51:8b:6d:88:5c:ac:d3:56:a0:94:ec:16:c8:88:c3:95:ef:15:
94:bb:c7:99
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAY5cET08rgxOJ2PqOzErVnY3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMzIwMTMzMzM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDYyYmI5MmJiZWU5ZjZkZTc3NTdkMjU2ZDQ4ZjY2ZTIwN2Y0NGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFhMx6E+JsWunvU/2E8udygft07W
oTPjRDYqEDmzD0Mwnd5/VB+fKkYE3rMXjw5fkz4f+Hf4v0NZFtQhcTyR7QRbnFnx
Kn/EIhFQ5azgwd1p49jRFxtUbougUI/SPx+J43RD5sphzo3rSS+dCB6bmp5S63Y1
8M6/obgiC7Mpp0FpwDnfpqxNgFFf/VjTpI24KzmsYLgL520OlnrVm+3mW/gacVYC
bI3Phz0dU+wgVx3v8z2AnXGAngzy76+bcMI4kxdYpVqCIxV5RLqU7K/UqC2rZ+cU
/hnSxf9pWD5tWPTnG80da8/yYTn1LE/HMYyt9nQUwLDhAq9/Ks+unyq1jQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFOBiu5K77p9t53V9JW1I9m4gf0SvMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYyLzhhZjUx
OC0xNTY2LTRhNmItODA0Yi0xYWI1ZDYyMDlmNTcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIvOGFmNTE4
LTE1NjYtNGE2Yi04MDRiLTFhYjVkNjIwOWY1Ny8xLzRHSzdrcnZ1bjIzbmRYMGxi
VWoyYmlCX1JLOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCwpzUMA0EAgACMAcDBQMqB+iAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMWXTANBgkqhkiG9w0BAQsFAAOCAQEAWWY5IovrG/kp
xojCUgYPjs1+rhIUqltXOkQNsR2o72AOebm+BrPZVWDjnXix/ausFiMX+fgQ1T4m
IFZGp5u1yib6FaR0Wo5FiaZvs3BNM1rfSXUE4thKh+zXcep2LFi0ueseg19Dh5/a
SOubowEmxokpA5puR5JVje5/vmDqNuFoPpbo/WTam7Sy+Q3ljwB0Thh9SrzRYR4e
5GTChtuHbwvtwBYh+7pUlLDAkPA1X3Z/UiNeVkpBZKWditvqQAPUzMennJuLWsAU
0RGSyZY69qRhJIiAJi0p8ezj+9SZ5aED1K2ygLb01liOUYttiFys01aglOwWyIjD
le8VlLvHmQ==
-----END CERTIFICATE-----
Generated at Fri May 3 06:33:22 2024 by rpki-client on console-ams.rpki-client.org