Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4LVOM0Iq091sqToY7dguC2jIWlw.cer
File: 4LVOM0Iq091sqToY7dguC2jIWlw.cer (raw, json)
Hash identifier: 4LonhQv89i3YkYE352CEtNNxuwEHzXsTW3ew/OsofZw=
Subject key identifier: E0:B5:4E:33:42:2A:D3:DD:6C:A9:3A:18:ED:D8:2E:0B:68:C8:5A:5C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB316E9E294D12B50CDF36A7695623
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/4LVOM0Iq091sqToY7dguC2jIWlw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:54 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.105.44.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 08:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:31:6e:9e:29:4d:12:b5:0c:df:36:a7:69:56:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0b54e33422ad3dd6ca93a18edd82e0b68c85a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7d:2c:2a:a6:76:46:85:bc:25:a6:62:39:82:
b8:73:7d:a6:62:2a:c3:d7:61:3d:a1:c1:33:9c:9b:
1c:30:81:eb:1c:01:7d:0b:d6:bb:1f:e4:91:15:c6:
47:8d:a0:38:fb:5c:d8:b2:a8:6c:dd:fd:37:1f:4e:
91:1b:63:bc:00:62:de:ac:59:d1:31:43:b4:32:ad:
db:10:a4:77:6c:97:5d:98:dd:8c:eb:50:1c:af:35:
29:75:d6:f9:9f:a7:d4:c0:fa:81:f9:e7:6c:b3:59:
4c:14:93:9c:f6:41:77:66:01:9b:91:1f:54:bf:83:
e6:ae:79:23:95:06:85:c5:30:d4:03:e7:00:86:2f:
06:c2:ef:95:02:ac:ef:c7:27:41:c4:8e:5f:35:a9:
f7:5f:8e:f5:9e:81:f0:b8:8e:6e:fb:53:19:f1:30:
a1:f6:46:13:a6:e5:f1:99:2b:9a:2a:34:2e:ef:38:
91:7f:4b:82:1b:bb:9a:1c:93:e0:d6:67:f1:7c:47:
7f:89:7d:88:aa:d9:f9:cf:30:12:6f:15:07:9a:b5:
f4:a4:37:df:2b:c0:41:8c:b2:36:ab:2c:2f:f6:0d:
4d:3d:5d:15:b0:d8:5e:c1:8f:f5:b4:91:b8:b7:6d:
9b:3b:99:86:63:4f:29:e5:97:ee:be:76:b3:98:0b:
5c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B5:4E:33:42:2A:D3:DD:6C:A9:3A:18:ED:D8:2E:0B:68:C8:5A:5C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/4LVOM0Iq091sqToY7dguC2jIWlw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.44.0/24
Signature Algorithm: sha256WithRSAEncryption
43:a5:4e:50:fc:63:09:68:77:8f:40:fe:7d:b7:19:94:5d:f5:
b6:61:c3:64:80:aa:9f:78:60:5e:8c:b2:15:df:a2:c4:34:4b:
0c:e8:a2:47:08:e3:0c:52:f8:10:49:f7:29:98:fc:21:40:03:
94:7a:42:c7:98:71:c5:37:c1:41:fb:d6:d5:cd:88:f9:31:b5:
af:04:56:c0:d2:07:09:92:f8:cd:4a:57:b0:4b:27:f7:43:33:
be:c8:51:38:0d:c3:86:4f:5c:26:fe:14:3b:41:87:c4:32:38:
57:0d:e4:8b:e1:4b:9f:ea:72:ec:d3:fb:37:50:a5:a8:e1:91:
cc:a8:4f:41:b2:3f:0a:dd:56:01:2c:64:85:cd:66:51:a2:32:
8b:99:46:1b:48:69:97:f2:17:d3:77:be:c5:7d:48:b1:ad:88:
93:cc:39:3b:0f:34:5d:02:ed:86:4a:45:89:97:d4:d7:a8:6c:
14:73:11:ea:ed:be:7e:9f:08:9f:ee:bd:d4:33:29:5a:3a:90:
dc:46:c6:25:6f:96:e6:b9:dd:31:fd:ea:79:ee:1a:33:0d:13:
f4:9f:5d:7a:51:cf:23:6a:9f:24:d3:2e:96:f0:b1:08:c6:98:
13:31:c5:c8:90:1a:24:2f:58:42:b1:c4:e7:a7:9f:7d:66:84:
d9:fc:81:24
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzC2zFunilNErUM3zanaVYjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDIyOTU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMGI1NGUzMzQyMmFkM2RkNmNhOTNhMThlZGQ4MmUwYjY4Yzg1YTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0X0sKqZ2RoW8JaZiOYK4c32mYirD
12E9ocEznJscMIHrHAF9C9a7H+SRFcZHjaA4+1zYsqhs3f03H06RG2O8AGLerFnR
MUO0Mq3bEKR3bJddmN2M61AcrzUpddb5n6fUwPqB+edss1lMFJOc9kF3ZgGbkR9U
v4PmrnkjlQaFxTDUA+cAhi8Gwu+VAqzvxydBxI5fNan3X471noHwuI5u+1MZ8TCh
9kYTpuXxmSuaKjQu7ziRf0uCG7uaHJPg1mfxfEd/iX2Iqtn5zzASbxUHmrX0pDff
K8BBjLI2qywv9g1NPV0VsNhewY/1tJG4t22bO5mGY08p5ZfuvnazmAtcbwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFOC1TjNCKtPdbKk6GO3YLgtoyFpcMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEwLzQ5NmJi
YS1hNmEzLTRkZDMtOGY4Ni0zY2JiNWU4Nzc3OTEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTAvNDk2YmJh
LWE2YTMtNGRkMy04Zjg2LTNjYmI1ZTg3Nzc5MS8xLzRMVk9NMElxMDkxc3FUb1k3
ZGd1QzJqSVdsdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwWksMA0GCSqGSIb3DQEBCwUAA4IBAQBDpU5Q
/GMJaHePQP59txmUXfW2YcNkgKqfeGBejLIV36LENEsM6KJHCOMMUvgQSfcpmPwh
QAOUekLHmHHFN8FB+9bVzYj5MbWvBFbA0gcJkvjNSlewSyf3QzO+yFE4DcOGT1wm
/hQ7QYfEMjhXDeSL4Uuf6nLs0/s3UKWo4ZHMqE9Bsj8K3VYBLGSFzWZRojKLmUYb
SGmX8hfTd77FfUixrYiTzDk7DzRdAu2GSkWJl9TXqGwUcxHq7b5+nwif7r3UMyla
OpDcRsYlb5bmud0x/ep57hozDRP0n116Uc8jap8k0y6W8LEIxpgTMcXIkBokL1hC
scTnp599ZoTZ/IEk
-----END CERTIFICATE-----
Generated at Thu Apr 25 09:34:25 2024 by rpki-client on console-ams.rpki-client.org