Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
File: 4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer (raw, json)
Hash identifier: GkKnPV0JDA10JCac5WYM3eNTz1MD4iY/akOCESRk6TU=
Subject key identifier: E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC79531D2E9EA5AC1BECB67F52C6F03EA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:31:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 48119
IP: 91.207.126.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:31:d2:e9:ea:5a:c1:be:cb:67:f5:2c:6f:03:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e338cd6811dce2ed4f426143c3fc8457b1b434bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f8:e7:7a:b8:5c:e2:14:3c:79:b3:4f:af:66:
64:3a:55:eb:50:fe:35:b9:81:8f:e0:06:89:70:97:
a4:e8:f4:56:fe:64:d6:4d:3e:c1:fa:b2:f6:f3:c4:
01:2d:bc:63:cd:57:87:33:ae:6d:2a:42:23:bc:95:
7d:e6:bb:4b:aa:58:2a:4f:1d:ee:b9:9e:8b:79:d7:
6c:55:ca:41:45:5d:c5:f9:f1:3c:88:33:b4:62:f2:
18:9c:7c:88:9c:93:72:07:6b:78:3d:ec:7a:24:e5:
f8:cd:ff:56:19:47:60:2a:40:e0:5e:39:13:cf:b4:
02:da:4e:79:33:a4:01:86:74:65:36:88:e4:2f:01:
aa:14:8a:34:a8:9a:6c:83:2a:a8:32:59:c3:b3:e9:
5f:74:a7:ce:d7:25:10:07:d5:c9:c1:12:3d:28:a0:
6e:04:ed:a6:cd:dc:13:5e:24:99:a0:53:7d:93:01:
53:6b:0b:e6:25:1f:08:a6:7a:1b:c2:d5:38:b6:84:
7c:97:95:a8:0f:06:4e:95:ca:54:25:c4:9d:1b:6e:
35:a4:cc:aa:4e:f2:33:93:a6:90:8f:4d:bb:16:3d:
ac:81:8d:fe:6f:41:9e:45:f6:06:51:fd:49:bb:01:
20:0c:e5:99:d8:a5:4c:79:86:77:2d:cf:cb:15:8c:
18:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.126.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48119
Signature Algorithm: sha256WithRSAEncryption
3e:cc:ef:f5:26:5e:5d:79:f2:2c:d3:ee:81:e5:ed:83:89:27:
b5:3d:f3:66:ec:c3:46:61:13:75:d3:66:52:5d:6f:b6:10:29:
c9:6b:17:5b:e8:f6:04:5f:cd:71:f4:57:c2:6d:21:a3:4f:6d:
aa:ef:3e:a0:57:9e:b0:9b:95:3b:b1:e1:2b:3a:91:26:fc:e9:
c0:c0:16:ed:32:2a:68:28:fd:ee:bd:62:04:5a:51:00:18:5e:
9a:0f:e3:76:df:71:35:15:24:23:2c:2f:a5:4b:a3:77:58:7f:
b3:d5:b9:48:de:e0:8e:8c:b0:61:17:69:40:22:31:de:aa:37:
17:32:d5:f5:cf:95:8c:49:6b:a2:07:0e:e8:f7:b7:b9:f4:be:
a4:76:9f:5c:1d:00:2b:00:97:9b:26:ad:bd:e1:7b:65:bc:24:
63:11:b0:f5:50:af:31:b1:62:e3:e4:88:c8:f4:20:f2:2c:ad:
f3:ff:78:04:8c:d2:33:97:a5:ef:65:59:9e:f8:ad:13:34:91:
2c:ca:40:70:29:d1:6a:62:6b:f7:e5:d3:88:bc:97:52:bb:d6:
14:83:0a:60:43:66:45:65:04:39:50:8b:34:73:de:e7:4f:2c:
03:fd:fc:c7:e4:19:79:3b:b1:db:32:3b:23:5d:da:87:d8:85:
a2:2f:4c:51
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYzHlTHS6epawb7LZ/UsbwPqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDAzMTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzM4Y2Q2ODExZGNlMmVkNGY0MjYxNDNjM2ZjODQ1N2IxYjQzNGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfjnerhc4hQ8ebNPr2ZkOlXrUP41
uYGP4AaJcJek6PRW/mTWTT7B+rL288QBLbxjzVeHM65tKkIjvJV95rtLqlgqTx3u
uZ6LeddsVcpBRV3F+fE8iDO0YvIYnHyInJNyB2t4Pex6JOX4zf9WGUdgKkDgXjkT
z7QC2k55M6QBhnRlNojkLwGqFIo0qJpsgyqoMlnDs+lfdKfO1yUQB9XJwRI9KKBu
BO2mzdwTXiSZoFN9kwFTawvmJR8IpnobwtU4toR8l5WoDwZOlcpUJcSdG241pMyq
TvIzk6aQj027Fj2sgY3+b0GeRfYGUf1JuwEgDOWZ2KVMeYZ3Lc/LFYwYIQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFOM4zWgR3OLtT0JhQ8P8hFextDS7MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI3LzVlYTRi
NC05ZWQ3LTQ0NGUtODZiZi0yZWIwYWYzYWM3ODEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcvNWVhNGI0
LTllZDctNDQ0ZS04NmJmLTJlYjBhZjNhYzc4MS8xLzR6ak5hQkhjNHUxUFFtRkR3
X3lFVjdHME5Mcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQBW89+MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwC79zANBgkqhkiG9w0BAQsFAAOCAQEAPszv9SZeXXnyLNPugeXtg4kntT3zZuzD
RmETddNmUl1vthApyWsXW+j2BF/NcfRXwm0ho09tqu8+oFeesJuVO7HhKzqRJvzp
wMAW7TIqaCj97r1iBFpRABhemg/jdt9xNRUkIywvpUujd1h/s9W5SN7gjoywYRdp
QCIx3qo3FzLV9c+VjElrogcO6Pe3ufS+pHafXB0AKwCXmyatveF7ZbwkYxGw9VCv
MbFi4+SIyPQg8iyt8/94BIzSM5el72VZnvitEzSRLMpAcCnRamJr9+XTiLyXUrvW
FIMKYENmRWUEOVCLNHPe508sA/38x+QZeTux2zI7I13ah9iFoi9MUQ==
-----END CERTIFICATE-----
Generated at Sat Apr 20 09:40:12 2024 by rpki-client on console-fra.rpki-client.org