Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79rqxvigN0g5cw_IVnlXCeGO2RY.cer
File: 79rqxvigN0g5cw_IVnlXCeGO2RY.cer (raw, json)
Hash identifier: ZG6Z8byhw6+j4KOVCYiCdmEtc5tLi+4uHFvL6ek9jBg=
Subject key identifier: EF:DA:EA:C6:F8:A0:37:48:39:73:0F:C8:56:79:57:09:E1:8E:D9:16
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BC1BD30894F78344C0AE4D6E14162C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:17 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 192.92.146.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:1b:d3:08:94:f7:83:44:c0:ae:4d:6e:14:16:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=efdaeac6f8a0374839730fc856795709e18ed916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:26:6e:1e:f3:ef:02:68:57:aa:1e:03:7c:84:
4a:06:f2:53:8c:b2:87:9d:c3:95:92:8b:ca:4d:a8:
c9:07:86:79:ef:da:20:7c:91:81:3b:50:52:7a:8e:
a7:68:ec:39:3c:6c:4c:f0:16:09:e8:d5:59:26:bc:
f2:49:b1:38:5f:2c:e3:08:59:50:e6:3d:cf:8a:6b:
82:20:53:7e:4d:ae:05:77:df:4c:ed:66:2f:99:4a:
8c:db:15:18:bf:35:33:7b:9c:4d:7d:00:87:ce:fd:
17:d2:2f:af:6a:e8:fb:37:4c:f5:c7:20:38:03:0a:
84:b9:25:5a:32:2b:9b:fc:de:89:23:bd:b5:c2:16:
1c:5d:6f:10:e0:94:b9:1a:6f:45:0d:9d:5e:39:b3:
a3:e8:1f:e3:f9:29:b4:38:e4:a3:f8:c7:53:49:eb:
ef:94:59:be:e2:3a:4f:1a:47:8f:ed:28:2a:67:c9:
8b:b8:38:36:d3:9d:fa:5e:fe:ed:c8:83:af:3f:39:
4b:f2:d8:98:6f:ef:4e:ef:28:93:ee:08:a0:2d:cf:
3e:a7:05:40:05:58:e8:a6:e2:30:28:fb:53:57:76:
3d:aa:9c:9a:67:69:07:29:7e:16:a5:55:4f:29:f4:
22:e6:02:a8:28:2f:a8:b9:3d:e5:ec:d7:ab:9d:22:
0e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:DA:EA:C6:F8:A0:37:48:39:73:0F:C8:56:79:57:09:E1:8E:D9:16
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.92.146.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:ec:11:a4:a3:c5:de:55:d3:be:76:5d:fd:bb:a4:ee:fa:83:
1d:75:18:79:3c:5c:b4:18:cb:42:14:25:f2:56:d1:c1:9e:e8:
00:45:01:83:ac:8d:e9:76:d7:d2:8f:e5:cf:42:7e:b5:8a:2b:
bd:8a:a6:ab:2b:7b:f8:a6:d3:25:7a:ba:a7:a0:40:8a:75:c0:
e2:f6:38:16:25:6d:b2:1c:ff:f3:c5:8f:fe:fa:84:78:ed:ef:
53:77:dd:d9:11:dd:a5:18:db:19:02:06:15:44:ae:07:f7:22:
52:4d:f1:a6:80:df:d7:a0:be:7d:33:84:2e:80:86:9e:eb:c7:
a1:ea:3e:99:7f:49:c4:3a:65:a1:dc:f9:f0:8f:a1:89:c6:a8:
63:bc:06:f0:6b:d8:41:5f:90:4c:6a:b0:31:7e:33:79:8b:d5:
f8:33:b7:71:63:13:82:cf:89:ee:cf:86:40:70:ca:d8:a7:f7:
ac:32:08:d4:48:71:d7:40:a5:a8:05:cf:76:b7:1e:a2:91:69:
2c:da:1d:a9:3f:a8:08:32:81:3a:a9:2a:f2:91:3e:5e:57:d8:
fd:c1:4a:c5:a1:f7:88:b7:91:6f:37:87:ee:e5:20:62:0a:42:
58:96:76:ac:14:9e:68:35:46:59:f7:65:2d:88:62:11:13:34:
df:0b:87:1c
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzJvBvTCJT3g0TArk1uFBYsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTAzMzE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZmRhZWFjNmY4YTAzNzQ4Mzk3MzBmYzg1Njc5NTcwOWUxOGVkOTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiZuHvPvAmhXqh4DfIRKBvJTjLKH
ncOVkovKTajJB4Z579ogfJGBO1BSeo6naOw5PGxM8BYJ6NVZJrzySbE4XyzjCFlQ
5j3PimuCIFN+Ta4Fd99M7WYvmUqM2xUYvzUze5xNfQCHzv0X0i+vauj7N0z1xyA4
AwqEuSVaMiub/N6JI721whYcXW8Q4JS5Gm9FDZ1eObOj6B/j+Sm0OOSj+MdTSevv
lFm+4jpPGkeP7SgqZ8mLuDg20536Xv7tyIOvPzlL8tiYb+9O7yiT7gigLc8+pwVA
BVjopuIwKPtTV3Y9qpyaZ2kHKX4WpVVPKfQi5gKoKC+ouT3l7NernSIORwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFO/a6sb4oDdIOXMPyFZ5VwnhjtkWMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc0LzZkM2Ez
ZS0wMDUzLTQzNTctYjFiNC1mOTkyYmEwNThlMzEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQvNmQzYTNl
LTAwNTMtNDM1Ny1iMWI0LWY5OTJiYTA1OGUzMS8xLzc5cnF4dmlnTjBnNWN3X0lW
bmxYQ2VHTzJSWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwFySMA0GCSqGSIb3DQEBCwUAA4IBAQBM7BGk
o8XeVdO+dl39u6Tu+oMddRh5PFy0GMtCFCXyVtHBnugARQGDrI3pdtfSj+XPQn61
iiu9iqarK3v4ptMlerqnoECKdcDi9jgWJW2yHP/zxY/++oR47e9Td93ZEd2lGNsZ
AgYVRK4H9yJSTfGmgN/XoL59M4QugIae68eh6j6Zf0nEOmWh3Pnwj6GJxqhjvAbw
a9hBX5BMarAxfjN5i9X4M7dxYxOCz4nuz4ZAcMrYp/esMgjUSHHXQKWoBc92tx6i
kWks2h2pP6gIMoE6qSrykT5eV9j9wUrFofeIt5FvN4fu5SBiCkJYlnasFJ5oNUZZ
92UtiGIREzTfC4cc
-----END CERTIFICATE-----
Generated at Sat Apr 20 10:12:17 2024 by rpki-client on console-ams.rpki-client.org