Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer
File: 7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer (raw, json)
Hash identifier: AJLo5Rf4BUm183+aq/WSiUpEFK076YjprLZHABhvmDw=
Subject key identifier: ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DA782F80610AB3256620F5B14525F4ADF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 14 Feb 2024 12:06:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 50689
IP: 195.191.222.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a7:82:f8:06:10:ab:32:56:62:0f:5b:14:52:5f:4a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 14 12:06:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed89298644ed486ded509d946a6d6d839589ce11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d9:48:5d:05:b5:dc:36:60:9f:98:67:00:b5:
f1:e0:70:fb:4c:5c:82:c3:4f:7b:7f:7f:12:62:7c:
c6:71:97:ee:02:ed:61:16:21:49:d6:e5:dd:6c:44:
e1:24:45:32:55:9e:8d:dd:b1:d1:e0:73:86:82:97:
20:c4:9f:62:02:c0:cf:60:02:bd:90:eb:c3:15:58:
a7:f1:23:2e:59:e4:5e:4b:fe:f0:49:85:70:4c:77:
62:0f:04:28:90:e1:ed:d2:b3:28:fd:60:f0:de:94:
58:ad:0e:de:68:02:b1:5a:bb:29:6d:69:1b:e5:32:
07:b7:2c:6e:a1:ea:1e:56:fd:d4:fa:36:fe:52:6d:
7b:99:9a:c6:b7:2a:a7:fa:a9:b1:16:c9:5b:b8:73:
ef:ea:a6:f0:ac:2f:23:e4:c8:fc:45:1e:1a:84:9a:
b8:e2:f1:06:fa:84:af:a7:cc:5f:f6:a9:43:4f:40:
cd:9a:58:d7:22:43:c7:34:cf:54:81:88:96:24:81:
5b:2f:d4:2d:25:c2:a1:3f:36:eb:54:5c:2e:bf:34:
b8:70:bb:cf:f7:3f:0a:27:cb:00:b4:e2:4b:14:f8:
75:1e:35:7f:a3:9d:d1:cc:c7:96:05:a5:a3:4f:b7:
bc:c1:62:63:c1:e0:cd:6e:dc:e4:37:5f:6a:4d:1f:
de:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.222.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50689
Signature Algorithm: sha256WithRSAEncryption
a1:c7:20:a4:a0:a8:ef:22:47:0e:05:4f:17:d2:d0:47:e4:51:
df:c0:b2:c0:b9:30:02:e9:57:ae:bc:ba:8d:5b:19:7d:9f:fb:
66:5c:75:b2:c1:65:d5:52:b8:37:59:71:71:ec:e6:63:7a:6f:
6d:24:e7:16:42:33:4a:ce:e2:d0:72:b0:bd:55:0e:26:2f:34:
f3:a2:1f:e8:b9:6e:9a:a4:3e:bf:08:f6:4d:d5:d1:a5:6d:b9:
4a:a0:de:e2:ef:10:c2:e2:46:d0:89:30:5e:c6:e8:e9:e2:26:
ca:12:35:4d:6d:bf:a7:d2:bc:b6:40:19:65:5d:d2:b5:20:37:
5b:8d:56:85:b6:02:9d:58:fe:9d:6e:12:21:7e:58:01:4b:29:
e2:ac:e4:43:7c:96:97:3b:49:af:50:76:30:d4:27:6e:7f:a3:
85:6f:90:7a:c9:e6:61:2e:eb:e1:0e:9f:b5:3f:91:91:23:1a:
12:6e:cd:e9:b6:50:c4:9b:50:67:c8:33:78:64:6a:84:02:61:
48:d1:77:8f:dd:5a:45:60:c8:49:a2:80:e6:4f:59:53:29:a8:
57:d6:49:f8:fb:ef:44:9d:df:27:c9:30:ad:f5:72:50:b2:f0:
5b:21:03:6c:03:85:c8:d4:50:0d:44:32:19:67:51:90:f0:63:
6b:a8:63:02
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAY2ngvgGEKsyVmIPWxRSX0rfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMjE0MTIwNjM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDg5Mjk4NjQ0ZWQ0ODZkZWQ1MDlkOTQ2YTZkNmQ4Mzk1ODljZTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNlIXQW13DZgn5hnALXx4HD7TFyC
w097f38SYnzGcZfuAu1hFiFJ1uXdbEThJEUyVZ6N3bHR4HOGgpcgxJ9iAsDPYAK9
kOvDFVin8SMuWeReS/7wSYVwTHdiDwQokOHt0rMo/WDw3pRYrQ7eaAKxWrspbWkb
5TIHtyxuoeoeVv3U+jb+Um17mZrGtyqn+qmxFslbuHPv6qbwrC8j5Mj8RR4ahJq4
4vEG+oSvp8xf9qlDT0DNmljXIkPHNM9UgYiWJIFbL9QtJcKhPzbrVFwuvzS4cLvP
9z8KJ8sAtOJLFPh1HjV/o53RzMeWBaWjT7e8wWJjweDNbtzkN19qTR/e7QIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFO2JKYZE7Uht7VCdlGptbYOVic4RMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQyLzE0MTg4
Ny01NTA3LTQ1YTUtOGIwYS01N2ExZjBiMzJmMDEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDIvMTQxODg3
LTU1MDctNDVhNS04YjBhLTU3YTFmMGIzMmYwMS8xLzdZa3Boa1R0U0czdFVKMlVh
bTF0ZzVXSnpoRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQBw7/eMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwDGATANBgkqhkiG9w0BAQsFAAOCAQEAoccgpKCo7yJHDgVPF9LQR+RR38CywLkw
AulXrry6jVsZfZ/7Zlx1ssFl1VK4N1lxcezmY3pvbSTnFkIzSs7i0HKwvVUOJi80
86If6LlumqQ+vwj2TdXRpW25SqDe4u8QwuJG0IkwXsbo6eImyhI1TW2/p9K8tkAZ
ZV3StSA3W41WhbYCnVj+nW4SIX5YAUsp4qzkQ3yWlztJr1B2MNQnbn+jhW+Qesnm
YS7r4Q6ftT+RkSMaEm7N6bZQxJtQZ8gzeGRqhAJhSNF3j91aRWDISaKA5k9ZUymo
V9ZJ+PvvRJ3fJ8kwrfVyULLwWyEDbAOFyNRQDUQyGWdRkPBja6hjAg==
-----END CERTIFICATE-----
Generated at Fri May 3 06:42:44 2024 by rpki-client on console-ams.rpki-client.org