Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
File: 7FOM3K-fkkZJfceuRYRTef5qcXQ.cer (raw, json)
Hash identifier: A3QjfOtqA7hgrVuQPqkARU7KfOVbuvZ6N0AVdWDvTgE=
Subject key identifier: EC:53:8C:DC:AF:9F:92:46:49:7D:C7:AE:45:84:53:79:FE:6A:71:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D0D7F37767ACD85FD47BD91CFA75B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 92.118.16.0/22
IP: 2a09:a340::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 00:45:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:0d:7f:37:76:7a:cd:85:fd:47:bd:91:cf:a7:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec538cdcaf9f9246497dc7ae45845379fe6a7174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:47:a6:5e:be:62:d1:8e:1d:e8:b3:94:1b:5f:
0f:66:b1:11:e7:62:f2:9b:ca:81:36:30:dc:dc:b2:
37:c5:d5:79:6e:96:09:d6:a7:90:88:49:ca:d9:c8:
7d:60:88:fc:54:84:4e:e3:a1:c9:b3:af:d5:1c:ac:
88:98:98:e3:e3:76:11:23:cd:2f:08:a6:91:0f:e0:
93:ea:c4:b7:a4:e8:a8:b2:e0:95:f6:69:1d:29:db:
ca:d1:c5:1d:a7:a8:8c:5b:e9:1c:37:42:e6:19:2f:
8e:b6:81:38:7d:2f:64:41:75:7c:44:e2:c7:6a:49:
7c:d2:c2:a7:31:27:c5:96:73:29:ef:36:e9:eb:81:
50:8a:75:8d:4c:bb:1e:ed:0f:ad:09:ca:36:5f:d1:
53:45:61:65:ee:13:38:6f:99:38:5d:cc:c2:ac:21:
7e:93:43:2d:9a:91:6b:1a:5e:9d:3d:21:cf:16:21:
59:ae:a2:c2:41:8f:37:74:5c:e1:ee:b7:8c:63:0a:
84:9b:96:a1:bb:ef:61:f2:6c:43:6e:51:c0:8e:c5:
14:e5:15:7e:b7:10:9d:8b:dd:4f:ba:4c:4d:f9:c8:
43:6e:da:70:8e:8a:1c:51:01:2b:d5:6f:71:68:15:
5c:57:8d:91:72:07:93:8d:66:c5:5e:ae:32:c8:90:
8e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:53:8C:DC:AF:9F:92:46:49:7D:C7:AE:45:84:53:79:FE:6A:71:74
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.16.0/22
IPv6:
2a09:a340::/29
Signature Algorithm: sha256WithRSAEncryption
70:da:f7:61:65:58:bb:22:8f:85:31:56:ef:31:07:5f:70:64:
20:15:2b:bf:2c:1f:a7:82:f4:de:ea:12:4c:25:18:69:bd:8a:
6a:32:bb:84:13:df:af:c2:db:5e:b5:1a:78:d6:25:05:46:c6:
48:9f:9d:43:c2:02:c2:d2:21:eb:0b:43:ed:6e:08:f1:be:f0:
61:17:cb:59:6f:08:6e:29:fe:c6:62:7a:77:04:72:c6:63:37:
79:37:de:f6:0f:30:5e:a7:b5:c5:22:6c:f4:e1:a3:ba:28:d1:
38:9b:ab:de:d4:21:f5:9d:9b:00:5c:ba:f8:21:9b:a7:0f:ab:
63:d0:b6:39:6c:8d:cd:36:a5:41:72:cd:b9:3d:f7:14:33:3d:
18:0c:3a:97:5a:3e:76:e0:6d:97:48:b0:68:fb:13:17:83:76:
2f:24:44:35:a0:7a:4e:6d:c0:e8:1b:50:fb:d1:e0:58:29:96:
47:34:fc:63:ce:e1:7d:27:c1:f1:27:2e:75:a4:1e:5f:bf:a5:
86:67:60:d3:53:56:c4:f0:19:74:80:8c:17:68:59:4c:46:6f:
40:cc:f1:37:d1:3d:2e:cb:f8:fe:f4:e4:50:37:43:f3:3f:dc:
1f:b7:9d:26:3c:af:b9:68:60:89:f2:c8:a9:ef:75:05:cb:e1:
9e:56:0f:d9
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzCbQ1/N3Z6zYX9R72Rz6dbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDAyOTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzUzOGNkY2FmOWY5MjQ2NDk3ZGM3YWU0NTg0NTM3OWZlNmE3MTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkemXr5i0Y4d6LOUG18PZrER52Ly
m8qBNjDc3LI3xdV5bpYJ1qeQiEnK2ch9YIj8VIRO46HJs6/VHKyImJjj43YRI80v
CKaRD+CT6sS3pOiosuCV9mkdKdvK0cUdp6iMW+kcN0LmGS+OtoE4fS9kQXV8ROLH
akl80sKnMSfFlnMp7zbp64FQinWNTLse7Q+tCco2X9FTRWFl7hM4b5k4XczCrCF+
k0MtmpFrGl6dPSHPFiFZrqLCQY83dFzh7reMYwqEm5ahu+9h8mxDblHAjsUU5RV+
txCdi91PukxN+chDbtpwjoocUQEr1W9xaBVcV42RcgeTjWbFXq4yyJCOswIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFOxTjNyvn5JGSX3HrkWEU3n+anF0MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhlLzdkNjRm
OC1kZGUyLTRhN2YtOTUxYS1jMDZjNjJhZjlkYTUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGUvN2Q2NGY4
LWRkZTItNGE3Zi05NTFhLWMwNmM2MmFmOWRhNS8xLzdGT00zSy1ma2taSmZjZXVS
WVJUZWY1cWNYUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCXHYQMA0EAgACMAcDBQMqCaNAMA0GCSqGSIb3
DQEBCwUAA4IBAQBw2vdhZVi7Io+FMVbvMQdfcGQgFSu/LB+ngvTe6hJMJRhpvYpq
MruEE9+vwttetRp41iUFRsZIn51DwgLC0iHrC0PtbgjxvvBhF8tZbwhuKf7GYnp3
BHLGYzd5N972DzBep7XFImz04aO6KNE4m6ve1CH1nZsAXLr4IZunD6tj0LY5bI3N
NqVBcs25PfcUMz0YDDqXWj524G2XSLBo+xMXg3YvJEQ1oHpObcDoG1D70eBYKZZH
NPxjzuF9J8HxJy51pB5fv6WGZ2DTU1bE8Bl0gIwXaFlMRm9AzPE30T0uy/j+9ORQ
N0PzP9wft50mPK+5aGCJ8sip73UFy+GeVg/Z
-----END CERTIFICATE-----
Generated at Sat Apr 20 03:30:16 2024 by rpki-client on console-ams.rpki-client.org