Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7BXxO3xu9GOa8P4P4XBFlDw08q8.cer
File: 7BXxO3xu9GOa8P4P4XBFlDw08q8.cer (raw, json)
Hash identifier: FzccfTIkD1htFDBAknY0pZ+T2R4KqMlEbq4wgs3Ohk4=
Subject key identifier: EC:15:F1:3B:7C:6E:F4:63:9A:F0:FE:0F:E1:70:45:94:3C:34:F2:AF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DBED814CC9E84DCD7BBA0B46D6FB1C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/fc13a7-09a7-46c2-80f7-5124c67cdbac/1/7BXxO3xu9GOa8P4P4XBFlDw08q8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/fc13a7-09a7-46c2-80f7-5124c67cdbac/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.150.104.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:ed:81:4c:c9:e8:4d:cd:7b:ba:0b:46:d6:fb:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec15f13b7c6ef4639af0fe0fe17045943c34f2af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f6:a1:ec:d9:24:84:b7:ea:bd:be:83:d0:44:
1d:c1:84:04:da:9f:6d:5b:0e:58:4b:1d:e6:8e:80:
0e:43:3d:25:2e:6e:e0:d0:92:84:5d:f8:35:c0:1c:
7f:da:d4:c9:39:9d:cd:54:40:08:6e:94:c8:b4:e0:
d4:c4:21:fa:2f:b5:36:c8:ab:12:bf:48:43:da:03:
35:61:e5:09:4a:af:82:f5:1d:81:83:9d:2b:eb:b6:
40:c1:af:ac:b3:3b:6a:2d:d7:bb:bd:d4:4b:36:ee:
98:f4:64:df:17:ee:06:f7:0f:00:95:f0:f9:20:a1:
d3:f7:6f:26:ee:24:b3:24:49:78:85:3d:35:c2:86:
33:59:e9:ac:5a:7a:e7:f8:1b:27:e9:68:6b:52:c3:
3a:4d:e0:15:0f:67:87:a6:76:d4:6b:87:4f:78:70:
ec:46:c5:4a:bd:13:83:c4:85:30:70:83:d0:d8:d4:
c9:70:92:15:e5:2d:e2:f7:6b:2f:8d:c6:ae:e4:38:
f3:92:cb:43:04:d6:4b:35:b9:94:9b:b6:33:12:b7:
23:a7:5f:bb:ca:52:c6:23:bf:bb:4d:a4:53:6e:b8:
0b:76:62:b0:88:3d:e4:74:b3:1d:41:bd:a0:76:f5:
b8:00:46:8d:d2:08:18:d6:9e:6c:6b:7b:49:7a:b3:
a1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:15:F1:3B:7C:6E:F4:63:9A:F0:FE:0F:E1:70:45:94:3C:34:F2:AF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fc13a7-09a7-46c2-80f7-5124c67cdbac/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fc13a7-09a7-46c2-80f7-5124c67cdbac/1/7BXxO3xu9GOa8P4P4XBFlDw08q8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.150.104.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:d8:72:07:32:b1:29:d5:04:61:68:9e:ab:d2:97:92:e6:ff:
2a:eb:5a:55:57:a3:e8:fc:84:4a:e1:32:80:a1:2d:95:06:58:
6c:2a:20:0a:b3:84:e4:18:85:e3:73:b7:5b:76:9d:d5:36:7b:
1c:6e:98:ba:cd:e7:62:f1:68:e7:6e:ad:6c:44:02:3b:0d:80:
47:1f:23:45:67:54:3e:6b:aa:6b:51:ce:45:73:7a:12:a4:e7:
58:89:3f:6b:9a:b4:70:dd:c8:ca:4f:1d:93:ab:83:27:b6:59:
b8:4f:06:56:c5:16:20:93:45:a0:1f:b5:38:d1:7a:bb:97:b8:
8e:f7:cf:c9:dd:91:e6:ea:3a:13:42:42:ab:17:de:af:55:2c:
77:e4:3b:fd:77:22:59:31:a0:68:20:f2:61:ec:ed:cd:53:7e:
4a:68:4b:78:74:1d:26:c8:b3:d5:38:be:5b:58:46:68:db:6a:
19:c5:22:65:17:f8:70:7b:46:d4:1d:80:14:a5:5e:e5:e6:b6:
d7:34:eb:ee:92:08:ba:52:41:6c:b6:7d:8f:8b:70:d5:63:02:
47:c0:8c:83:da:ac:b7:00:96:cc:69:94:d5:82:6a:07:2e:b7:
97:ce:51:fa:8a:06:34:c8:3b:ca:ec:3e:4f:e3:f0:3d:ed:65:
85:82:9b:03
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzF2+2BTMnoTc17ugtG1vscMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTYyOTMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzE1ZjEzYjdjNmVmNDYzOWFmMGZlMGZlMTcwNDU5NDNjMzRmMmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfah7NkkhLfqvb6D0EQdwYQE2p9t
Ww5YSx3mjoAOQz0lLm7g0JKEXfg1wBx/2tTJOZ3NVEAIbpTItODUxCH6L7U2yKsS
v0hD2gM1YeUJSq+C9R2Bg50r67ZAwa+ssztqLde7vdRLNu6Y9GTfF+4G9w8AlfD5
IKHT928m7iSzJEl4hT01woYzWemsWnrn+Bsn6WhrUsM6TeAVD2eHpnbUa4dPeHDs
RsVKvRODxIUwcIPQ2NTJcJIV5S3i92svjcau5DjzkstDBNZLNbmUm7YzErcjp1+7
ylLGI7+7TaRTbrgLdmKwiD3kdLMdQb2gdvW4AEaN0ggY1p5sa3tJerOhewIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFOwV8Tt8bvRjmvD+D+FwRZQ8NPKvMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgwL2ZjMTNh
Ny0wOWE3LTQ2YzItODBmNy01MTI0YzY3Y2RiYWMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAvZmMxM2E3
LTA5YTctNDZjMi04MGY3LTUxMjRjNjdjZGJhYy8xLzdCWHhPM3h1OUdPYThQNFA0
WEJGbER3MDhxOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwZZoMA0GCSqGSIb3DQEBCwUAA4IBAQCK2HIH
MrEp1QRhaJ6r0peS5v8q61pVV6Po/IRK4TKAoS2VBlhsKiAKs4TkGIXjc7dbdp3V
Nnscbpi6zedi8Wjnbq1sRAI7DYBHHyNFZ1Q+a6prUc5Fc3oSpOdYiT9rmrRw3cjK
Tx2Tq4Mntlm4TwZWxRYgk0WgH7U40Xq7l7iO98/J3ZHm6joTQkKrF96vVSx35Dv9
dyJZMaBoIPJh7O3NU35KaEt4dB0myLPVOL5bWEZo22oZxSJlF/hwe0bUHYAUpV7l
5rbXNOvukgi6UkFstn2Pi3DVYwJHwIyD2qy3AJbMaZTVgmoHLreXzlH6igY0yDvK
7D5P4/A97WWFgpsD
-----END CERTIFICATE-----
Generated at Fri Apr 19 23:02:07 2024 by rpki-client on console-ams.rpki-client.org