Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4oPErS_YckqMfV6vQxgUyz0VEn4.cer
File: 4oPErS_YckqMfV6vQxgUyz0VEn4.cer (raw, json)
Hash identifier: QOzpWB1nkWwvFbRI0q281hOtnEn0YFeLRj6XRwUtG0U=
Subject key identifier: E2:83:C4:AD:2F:D8:72:4A:8C:7D:5E:AF:43:18:14:CB:3D:15:12:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01901D4D45AC801E93D59D83DFDD4DFE7918
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 15 Jun 2024 19:08:41 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 200849
IP: 185.92.200.0/22
IP: 2a03:8d20::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:4d:45:ac:80:1e:93:d5:9d:83:df:dd:4d:fe:79:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 15 19:08:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e283c4ad2fd8724a8c7d5eaf431814cb3d15127e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1b:21:33:9b:b0:04:0d:b5:ea:30:ee:6f:1f:
ce:1f:a4:39:32:7e:f8:23:96:35:50:e1:9f:05:cf:
8b:0d:1c:51:3a:1c:dd:01:d2:43:4b:7a:ab:e0:74:
23:3a:af:61:a4:19:d1:48:b6:88:c4:dc:c0:05:63:
c4:0c:78:cf:34:b6:b3:a8:43:5c:1b:14:a5:b6:2c:
18:94:6b:79:ef:a0:df:0c:d0:2c:e1:1e:a0:b0:16:
7a:b1:38:3f:74:5b:a6:b1:d5:df:cc:20:cb:8d:30:
1e:59:75:6b:7c:cb:f5:56:9d:b8:79:e0:2f:ae:45:
e9:31:bd:30:87:2b:a5:6a:44:f4:67:32:8d:6c:d9:
68:a4:1e:a8:d9:be:84:7d:66:0c:c9:6c:ab:92:63:
9a:1e:a9:b2:6f:52:ff:fe:03:88:56:08:52:b6:16:
e0:f3:d4:48:d3:30:64:55:44:eb:4e:f3:91:0c:84:
fd:f5:69:d4:a6:06:3a:09:14:5f:d5:ba:c2:e1:1c:
4d:06:b8:e2:fe:14:e5:e3:f2:9f:ca:70:c1:d4:c3:
0c:d3:3f:b6:9e:03:1e:8b:01:06:fb:62:96:8e:17:
1c:00:24:cf:5d:81:43:d2:ca:65:a8:82:75:8c:27:
e6:30:b1:a0:d7:51:3c:96:a5:8f:aa:6b:3f:91:d2:
f1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:83:C4:AD:2F:D8:72:4A:8C:7D:5E:AF:43:18:14:CB:3D:15:12:7E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.200.0/22
IPv6:
2a03:8d20::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200849
Signature Algorithm: sha256WithRSAEncryption
a1:b9:c4:ae:c2:98:72:44:14:39:a9:9c:b7:8e:ff:d9:1c:35:
bb:43:e2:b4:38:27:19:56:43:d5:12:db:8b:ba:f1:32:3a:d1:
2b:05:4b:cb:ad:45:16:38:65:97:6f:ad:b4:63:ad:14:bf:e2:
8c:2b:45:87:e9:05:e0:9a:53:6e:6d:0d:b1:a9:81:fe:c4:cd:
63:3c:06:5e:37:5c:78:a8:30:f3:ca:ad:e1:f8:1c:f5:db:2b:
da:04:03:f5:c6:19:04:6f:b6:25:c3:f2:97:a6:33:fe:b2:69:
40:54:2b:ce:88:dc:ce:b1:94:ee:fc:b2:cd:3d:11:c5:ce:a3:
a1:90:04:0c:25:48:9f:5c:e9:f4:76:dd:fb:a2:09:60:ce:af:
97:4a:97:17:1a:8e:3b:4b:bf:3d:38:ee:9d:d7:52:26:61:4c:
c2:88:ad:73:00:46:ee:f5:84:01:26:9c:52:8c:4e:a8:64:fc:
c6:f7:11:b6:a1:da:17:f7:5b:09:d6:32:54:46:50:33:20:9e:
2c:2b:2e:48:90:95:6c:29:82:6e:33:bc:96:16:2c:81:c9:6e:
e2:ca:9c:95:01:23:0b:86:4d:f7:35:7b:01:f8:98:e3:7d:17:
64:05:6d:24:de:22:62:3c:d3:4e:c1:b1:d0:13:c9:cb:4a:af:
f4:df:1b:51
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZAdTUWsgB6T1Z2D391N/nkYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNjE1MTkwODQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjgzYzRhZDJmZDg3MjRhOGM3ZDVlYWY0MzE4MTRjYjNkMTUxMjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RshM5uwBA216jDubx/OH6Q5Mn74
I5Y1UOGfBc+LDRxROhzdAdJDS3qr4HQjOq9hpBnRSLaIxNzABWPEDHjPNLazqENc
GxSltiwYlGt576DfDNAs4R6gsBZ6sTg/dFumsdXfzCDLjTAeWXVrfMv1Vp24eeAv
rkXpMb0whyulakT0ZzKNbNlopB6o2b6EfWYMyWyrkmOaHqmyb1L//gOIVghSthbg
89RI0zBkVUTrTvORDIT99WnUpgY6CRRf1brC4RxNBrji/hTl4/KfynDB1MMM0z+2
ngMeiwEG+2KWjhccACTPXYFD0splqIJ1jCfmMLGg11E8lqWPqms/kdLx0QIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFOKDxK0v2HJKjH1er0MYFMs9FRJ+MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY2L2I4Y2M2
Ni1jYzY1LTRkYzItYWU4Ni02MWMxZWNhYWI1NWYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYvYjhjYzY2
LWNjNjUtNGRjMi1hZTg2LTYxYzFlY2FhYjU1Zi8xLzRvUEVyU19ZY2txTWZWNnZR
eGdVeXowVkVuNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuVzIMA0EAgACMAcDBQAqA40gMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMQkTANBgkqhkiG9w0BAQsFAAOCAQEAobnErsKYckQU
Oamct47/2Rw1u0PitDgnGVZD1RLbi7rxMjrRKwVLy61FFjhll2+ttGOtFL/ijCtF
h+kF4JpTbm0NsamB/sTNYzwGXjdceKgw88qt4fgc9dsr2gQD9cYZBG+2JcPyl6Yz
/rJpQFQrzojczrGU7vyyzT0Rxc6joZAEDCVIn1zp9Hbd+6IJYM6vl0qXFxqOO0u/
PTjunddSJmFMwoitcwBG7vWEASacUoxOqGT8xvcRtqHaF/dbCdYyVEZQMyCeLCsu
SJCVbCmCbjO8lhYsgclu4sqclQEjC4ZN9zV7AfiY430XZAVtJN4iYjzTTsGx0BPJ
y0qv9N8bUQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:57:45 2024 by rpki-client on console-fra.rpki-client.org