Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
File: 4oNEKXdeZVXldCSSKGJUsdqfGQM.cer (raw, json)
Hash identifier: /VKW7qndEVGHUwh+nnj4WgFHvt7wOyEpOiosp+TNFak=
Subject key identifier: E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC34958DFDA425FD6A80FB438B5034300
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:30:13 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 146.19.250.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:58:df:da:42:5f:d6:a8:0f:b4:38:b5:03:43:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e2834429775e6555e5742492286254b1da9f1903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8d:bc:81:83:d4:a1:eb:4e:4f:bb:1d:03:89:
61:03:03:26:a1:de:18:ac:d9:fb:2f:22:da:fc:d2:
1c:14:81:89:5d:76:ab:86:6e:88:49:95:8f:ee:08:
50:ca:44:90:88:cc:f3:c0:99:b9:88:24:f1:a0:54:
53:2c:98:93:65:40:98:84:38:c5:55:55:b7:6d:a7:
85:2f:bc:64:0c:8e:9e:20:5e:a6:9a:6a:b2:26:a7:
98:76:70:55:06:fe:de:a4:77:1b:78:e1:1d:3e:ce:
b6:41:b6:79:44:88:80:bf:3f:25:73:c6:42:f1:3e:
63:6e:9b:6b:5f:c8:e7:21:81:eb:54:d7:1e:42:35:
bc:ca:aa:c1:75:58:c6:ae:fc:75:5f:7e:e5:fe:a7:
a5:c2:c7:d7:68:76:d7:e9:f3:b4:c1:a5:2f:c0:71:
cd:e0:bb:ff:c1:4a:ff:b1:4f:c6:85:99:11:fd:c8:
46:d0:d0:4a:0c:83:e2:cb:56:f7:88:e4:0b:f2:3c:
6d:40:84:6f:b9:34:88:0f:7e:bc:a1:7e:f1:b0:fb:
be:f4:d7:35:10:43:0f:4c:c9:87:bb:b1:ca:4a:ec:
99:85:74:92:2a:1b:c3:fd:d6:9f:47:c5:95:69:37:
d1:59:1b:e9:7d:61:22:d2:90:b2:ac:d5:3a:a0:4e:
e4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.250.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:9d:6c:68:f9:d4:87:45:70:c4:c9:5a:fd:f7:80:b5:c8:fe:
69:86:ca:f5:5d:63:15:8e:2b:ee:70:e5:d1:e3:68:6f:1e:73:
71:3b:05:7a:cb:f3:41:b5:3f:f5:6b:73:a2:df:5d:c2:03:4e:
2c:71:93:df:c8:03:98:2d:8d:de:20:9e:39:43:b7:d0:6b:da:
c5:ce:2d:d5:a6:24:5a:03:6b:37:ed:b2:49:1d:b1:ce:1e:44:
bc:10:ad:af:50:68:af:72:26:46:53:9b:42:ae:d0:47:d3:78:
ea:ce:68:a1:4d:3e:4d:95:b5:b3:3b:0b:98:38:45:e9:52:be:
1b:26:9f:61:e6:dd:53:94:76:7c:fb:4d:38:23:c6:ac:f0:de:
33:4f:29:29:44:87:fa:32:93:3d:93:d8:df:aa:f3:9f:52:07:
ae:37:82:94:68:06:db:fd:7e:31:e8:52:aa:b4:75:73:fa:b7:
d4:9b:c8:47:b2:a9:ea:2f:ac:fb:9a:4b:be:60:66:8b:e0:42:
3f:a8:7c:f9:e7:48:3c:27:4b:48:31:00:8d:85:41:d1:b9:dd:
47:5f:bf:89:88:9c:1f:72:4e:88:1a:cf:ee:f0:3a:88:c6:d4:
96:4e:ad:5d:20:f3:4a:9e:1c:6a:0c:44:d8:3a:59:e0:7a:79:
67:4f:82:de
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzDSVjf2kJf1qgPtDi1A0MAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDQzMDEzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjgzNDQyOTc3NWU2NTU1ZTU3NDI0OTIyODYyNTRiMWRhOWYxOTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwo28gYPUoetOT7sdA4lhAwMmod4Y
rNn7LyLa/NIcFIGJXXarhm6ISZWP7ghQykSQiMzzwJm5iCTxoFRTLJiTZUCYhDjF
VVW3baeFL7xkDI6eIF6mmmqyJqeYdnBVBv7epHcbeOEdPs62QbZ5RIiAvz8lc8ZC
8T5jbptrX8jnIYHrVNceQjW8yqrBdVjGrvx1X37l/qelwsfXaHbX6fO0waUvwHHN
4Lv/wUr/sU/GhZkR/chG0NBKDIPiy1b3iOQL8jxtQIRvuTSID368oX7xsPu+9Nc1
EEMPTMmHu7HKSuyZhXSSKhvD/dafR8WVaTfRWRvpfWEi0pCyrNU6oE7koQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFOKDRCl3XmVV5XQkkihiVLHanxkDMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIxL2I2NDY4
ZC0xMGVkLTRkNDgtODAzYy1lYTk3NjY1YzEzZGYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjEvYjY0Njhk
LTEwZWQtNGQ0OC04MDNjLWVhOTc2NjVjMTNkZi8xLzRvTkVLWGRlWlZYbGRDU1NL
R0pVc2RxZkdRTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAkhP6MA0GCSqGSIb3DQEBCwUAA4IBAQCcnWxo
+dSHRXDEyVr994C1yP5phsr1XWMVjivucOXR42hvHnNxOwV6y/NBtT/1a3Oi313C
A04scZPfyAOYLY3eIJ45Q7fQa9rFzi3VpiRaA2s37bJJHbHOHkS8EK2vUGivciZG
U5tCrtBH03jqzmihTT5NlbWzOwuYOEXpUr4bJp9h5t1TlHZ8+004I8as8N4zTykp
RIf6MpM9k9jfqvOfUgeuN4KUaAbb/X4x6FKqtHVz+rfUm8hHsqnqL6z7mku+YGaL
4EI/qHz550g8J0tIMQCNhUHRud1HX7+JiJwfck6IGs/u8DqIxtSWTq1dIPNKnhxq
DETYOlngenlnT4Le
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:04:54 2024 by rpki-client on console-ams.rpki-client.org