Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5O1pU2eK57p6GKHHssEXFxeJy3Y.cer
File: 5O1pU2eK57p6GKHHssEXFxeJy3Y.cer (raw, json)
Hash identifier: 9NLk7Yzaqvpjeexrymu9z2mBKDMNMkFLvkNPwyjoi08=
Subject key identifier: E4:ED:69:53:67:8A:E7:BA:7A:18:A1:C7:B2:C1:17:17:17:89:CB:76
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B8A6DA1277DBB8CC73BB091ED53079
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0b/f44a7c-f023-4955-b0ce-5a94246eaa92/1/5O1pU2eK57p6GKHHssEXFxeJy3Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0b/f44a7c-f023-4955-b0ce-5a94246eaa92/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:30:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 43605
IP: 193.46.77.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:a6:da:12:77:db:b8:cc:73:bb:09:1e:d5:30:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:30:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e4ed6953678ae7ba7a18a1c7b2c117171789cb76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:de:83:c0:df:e3:13:ca:05:d4:46:1d:7e:94:
bf:b3:e1:17:af:7d:a6:e4:78:26:8d:7b:be:c5:87:
6a:7c:94:65:af:f2:04:3b:ac:0e:95:b9:53:75:66:
f7:e0:95:69:5f:51:55:fd:30:1b:8c:19:00:d1:52:
4c:ab:4d:e5:d7:15:a3:1f:69:44:b1:fd:19:de:14:
c4:69:c4:63:a0:c2:b5:fc:5e:f0:76:50:0a:87:c5:
49:ff:34:3c:e4:84:fe:36:a5:cc:26:60:0b:94:b3:
46:9d:77:a2:da:1d:e8:9f:98:28:11:f0:82:5f:79:
3a:6a:bc:bc:8e:d8:37:30:4a:72:8b:c2:02:0e:0c:
b6:e5:79:e6:72:04:df:54:99:af:92:28:f3:5f:ed:
a5:5a:46:83:0c:91:63:f9:8d:65:0c:9e:ad:be:ff:
1b:0a:7c:60:09:88:98:91:8a:f7:a0:38:1e:f2:76:
dd:e1:02:85:90:c1:00:e8:23:d3:66:c6:3c:c1:ca:
ba:e9:63:2b:8c:39:46:51:0a:92:92:cd:46:63:50:
51:59:77:2a:70:62:9f:c8:a1:56:bf:18:c9:69:3b:
f5:8c:01:bf:26:b5:33:63:68:45:b8:6d:76:69:8e:
d5:dc:c3:d9:a1:30:fe:4d:67:ee:1d:77:15:80:ce:
60:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:ED:69:53:67:8A:E7:BA:7A:18:A1:C7:B2:C1:17:17:17:89:CB:76
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f44a7c-f023-4955-b0ce-5a94246eaa92/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f44a7c-f023-4955-b0ce-5a94246eaa92/1/5O1pU2eK57p6GKHHssEXFxeJy3Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.77.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43605
Signature Algorithm: sha256WithRSAEncryption
82:38:71:f2:f4:15:1d:a7:92:85:94:20:1e:2e:4f:5d:a8:8f:
66:83:33:20:1d:07:b9:69:5d:51:1e:b5:a9:42:6d:39:e7:9f:
ea:87:08:79:ff:bd:72:69:9f:33:a9:4e:a7:1e:c3:0f:d6:d4:
13:04:cc:85:dd:26:2b:de:2e:fa:6e:2b:7d:47:4e:74:fa:82:
ba:fc:1b:97:51:30:af:5c:20:6d:73:fd:ae:93:f7:1e:ae:08:
58:9b:01:9b:2e:af:3b:5d:79:a6:bd:f0:08:a4:b3:61:f3:00:
dd:7c:53:eb:09:ba:f1:b6:e9:59:b0:69:86:9d:ea:5c:d5:01:
ad:1b:ac:f2:be:84:e4:b7:15:60:2a:31:9b:a4:31:c9:12:de:
59:b5:b7:f1:f2:9f:92:03:cc:9f:b7:a3:1c:a8:13:b9:cd:be:
36:b7:cf:ac:a6:2c:f7:5a:68:2d:fb:ae:59:4a:04:41:5a:43:
88:a3:1e:1a:1d:ea:46:15:8c:a2:70:52:ee:fb:9c:57:d5:8a:
6a:96:68:e4:da:27:8b:d2:de:8c:e9:70:e9:54:c4:69:45:a0:
fa:79:c6:29:0c:85:77:3e:46:f2:49:49:ae:9f:9d:fd:a8:60:
5f:bc:4a:94:fa:d2:0a:3f:2d:25:bc:fe:f2:1d:2d:29:5d:86:
7d:d2:af:23
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYzGuKbaEnfbuMxzuwke1TB5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMjAzMDM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNGVkNjk1MzY3OGFlN2JhN2ExOGExYzdiMmMxMTcxNzE3ODljYjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnt6DwN/jE8oF1EYdfpS/s+EXr32m
5HgmjXu+xYdqfJRlr/IEO6wOlblTdWb34JVpX1FV/TAbjBkA0VJMq03l1xWjH2lE
sf0Z3hTEacRjoMK1/F7wdlAKh8VJ/zQ85IT+NqXMJmALlLNGnXei2h3on5goEfCC
X3k6ary8jtg3MEpyi8ICDgy25XnmcgTfVJmvkijzX+2lWkaDDJFj+Y1lDJ6tvv8b
CnxgCYiYkYr3oDge8nbd4QKFkMEA6CPTZsY8wcq66WMrjDlGUQqSks1GY1BRWXcq
cGKfyKFWvxjJaTv1jAG/JrUzY2hFuG12aY7V3MPZoTD+TWfuHXcVgM5gPwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFOTtaVNniue6ehihx7LBFxcXict2MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBiL2Y0NGE3
Yy1mMDIzLTQ5NTUtYjBjZS01YTk0MjQ2ZWFhOTIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGIvZjQ0YTdj
LWYwMjMtNDk1NS1iMGNlLTVhOTQyNDZlYWE5Mi8xLzVPMXBVMmVLNTdwNkdLSEhz
c0VYRnhlSnkzWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwS5NMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwCqVTANBgkqhkiG9w0BAQsFAAOCAQEAgjhx8vQVHaeShZQgHi5PXaiPZoMzIB0H
uWldUR61qUJtOeef6ocIef+9cmmfM6lOpx7DD9bUEwTMhd0mK94u+m4rfUdOdPqC
uvwbl1Ewr1wgbXP9rpP3Hq4IWJsBmy6vO115pr3wCKSzYfMA3XxT6wm68bbpWbBp
hp3qXNUBrRus8r6E5LcVYCoxm6QxyRLeWbW38fKfkgPMn7ejHKgTuc2+NrfPrKYs
91poLfuuWUoEQVpDiKMeGh3qRhWMonBS7vucV9WKapZo5Noni9LejOlw6VTEaUWg
+nnGKQyFdz5G8klJrp+d/ahgX7xKlPrSCj8tJbz+8h0tKV2GfdKvIw==
-----END CERTIFICATE-----
Generated at Sat Apr 20 02:18:13 2024 by rpki-client on console-fra.rpki-client.org