Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.cer
File: 4jp0YwqEJMzV9bsPYCIIlFJ9cyw.cer (raw, json)
Hash identifier: 4BLG7BazZ/X0KgwKXBEhQPj0AtLjVodTKx8lEV5fE6k=
Subject key identifier: E2:3A:74:63:0A:84:24:CC:D5:F5:BB:0F:60:22:08:94:52:7D:73:2C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC70292386B268CFE528B275970A57
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:30:07 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.199.255.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Apr 2024 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:70:29:23:86:b2:68:cf:e5:28:b2:75:97:0a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e23a74630a8424ccd5f5bb0f60220894527d732c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:19:4c:75:03:bb:58:e6:53:18:63:a8:f9:a0:
c0:9f:fb:91:e3:46:22:54:d1:3b:21:d4:6b:4c:5f:
d5:52:15:51:15:f3:c0:47:f0:e4:28:1b:c6:e2:41:
52:a2:63:80:b3:47:6d:e1:5a:7a:49:94:15:cc:90:
8b:22:b8:f6:87:cf:37:d5:81:4a:08:70:c2:47:80:
85:ef:b4:0e:a4:1a:50:3e:26:90:12:8d:76:24:0e:
19:af:d5:02:40:a5:ea:94:86:98:84:19:fc:4d:57:
be:16:5b:2f:e6:8a:1b:76:5a:c4:dd:3b:13:83:63:
2d:5e:f6:c2:06:35:7c:0b:25:f1:54:ab:76:00:c5:
b6:73:8c:fe:7c:b9:74:da:ac:e9:fd:1d:09:5e:7d:
47:71:8b:fb:04:15:e8:06:d1:fb:a7:fc:54:43:3d:
15:c7:81:df:c3:0a:ea:c9:d3:6d:90:15:35:12:f5:
12:98:d9:49:08:9e:fc:9d:22:3c:41:4a:ac:a2:c3:
c2:07:0e:49:ac:cc:1e:d2:78:b5:5d:8e:e0:40:9d:
65:43:de:da:14:38:76:a5:19:31:07:5d:3a:5e:35:
9f:ba:63:db:d4:03:14:ea:33:b7:97:7d:ec:10:31:
2d:b6:0e:37:82:bf:ce:bc:cf:0a:e1:84:d7:c8:f3:
c9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:3A:74:63:0A:84:24:CC:D5:F5:BB:0F:60:22:08:94:52:7D:73:2C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.255.0/24
Signature Algorithm: sha256WithRSAEncryption
42:4b:27:fd:8e:3e:b8:67:d2:2d:ec:49:fd:bf:b8:6b:73:25:
22:b3:66:0a:f8:0d:72:79:25:8a:13:02:0b:38:f9:0d:b6:c1:
2d:7d:6c:a2:9c:7d:04:75:55:1a:09:41:d5:33:5a:16:cb:fc:
50:57:64:53:e3:5c:8a:a9:26:9f:34:49:24:99:bf:f8:18:71:
49:ee:41:f2:49:37:29:78:2f:42:49:11:57:80:a4:5c:ac:0c:
77:80:1d:68:71:e8:8d:12:7a:cf:d3:ee:a1:71:c2:ba:8d:af:
2f:6e:ab:57:6e:4d:02:51:89:1e:0e:73:dd:5e:7a:ae:06:31:
97:52:38:f8:42:fc:b7:cc:89:7d:53:2e:99:bd:e9:78:53:6b:
8c:cc:b3:b4:53:55:48:45:6b:b9:ca:2c:a7:a9:23:ad:61:1b:
64:ee:d0:d1:71:5d:df:61:4d:ae:ed:c7:ad:b1:25:75:94:4b:
c7:53:1d:56:5f:c2:0f:3f:de:d7:53:48:a9:09:43:45:64:ad:
60:ba:85:4d:24:69:99:64:e2:6d:45:44:19:db:ab:a1:ac:14:
4d:37:5b:59:51:73:76:1b:54:4f:15:b2:26:bc:7f:6f:d5:88:
cd:3f:91:2b:38:f3:91:a7:6c:49:74:96:63:3c:36:84:e2:ad:
5d:97:89:89
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzF3HApI4ayaM/lKLJ1lwpXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTYzMDA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjNhNzQ2MzBhODQyNGNjZDVmNWJiMGY2MDIyMDg5NDUyN2Q3MzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBlMdQO7WOZTGGOo+aDAn/uR40Yi
VNE7IdRrTF/VUhVRFfPAR/DkKBvG4kFSomOAs0dt4Vp6SZQVzJCLIrj2h8831YFK
CHDCR4CF77QOpBpQPiaQEo12JA4Zr9UCQKXqlIaYhBn8TVe+Flsv5oobdlrE3TsT
g2MtXvbCBjV8CyXxVKt2AMW2c4z+fLl02qzp/R0JXn1HcYv7BBXoBtH7p/xUQz0V
x4HfwwrqydNtkBU1EvUSmNlJCJ78nSI8QUqsosPCBw5JrMwe0ni1XY7gQJ1lQ97a
FDh2pRkxB106XjWfumPb1AMU6jO3l33sEDEttg43gr/OvM8K4YTXyPPJsQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFOI6dGMKhCTM1fW7D2AiCJRSfXMsMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E2LzU0MDg5
Ny1mNGI3LTQ4NDgtYjA3Yi05NmFiMjE2OTY5NzQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTYvNTQwODk3
LWY0YjctNDg0OC1iMDdiLTk2YWIyMTY5Njk3NC8xLzRqcDBZd3FFSk16Vjlic1BZ
Q0lJbEZKOWN5dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW8f/MA0GCSqGSIb3DQEBCwUAA4IBAQBCSyf9
jj64Z9It7En9v7hrcyUis2YK+A1yeSWKEwILOPkNtsEtfWyinH0EdVUaCUHVM1oW
y/xQV2RT41yKqSafNEkkmb/4GHFJ7kHySTcpeC9CSRFXgKRcrAx3gB1oceiNEnrP
0+6hccK6ja8vbqtXbk0CUYkeDnPdXnquBjGXUjj4Qvy3zIl9Uy6Zvel4U2uMzLO0
U1VIRWu5yiynqSOtYRtk7tDRcV3fYU2u7cetsSV1lEvHUx1WX8IPP97XU0ipCUNF
ZK1guoVNJGmZZOJtRUQZ26uhrBRNN1tZUXN2G1RPFbImvH9v1YjNP5ErOPORp2xJ
dJZjPDaE4q1dl4mJ
-----END CERTIFICATE-----
Generated at Thu Apr 18 11:53:38 2024 by rpki-client on console-ams.rpki-client.org