Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88q2j7sMl5R2WUvfxWwZIEK43t8.cer
File: 88q2j7sMl5R2WUvfxWwZIEK43t8.cer (raw, json)
Hash identifier: jR8mukTplB9HcuR2ooBYI+vaowWyZlyaxfzS/H76a1I=
Subject key identifier: F3:CA:B6:8F:BB:0C:97:94:76:59:4B:DF:C5:6C:19:20:42:B8:DE:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4933FFFD5DEC14ACCD5F4B9FC842B92
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 42277
IP: 5.249.192.0/19
IP: 37.188.0.0/18
IP: 46.62.0.0/17
IP: 77.241.16.0/20
IP: 94.247.248.0/21
IP: 176.241.192.0/19
IP: 178.249.240.0/21
IP: 2a02:51c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:3f:ff:d5:de:c1:4a:cc:d5:f4:b9:fc:84:2b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3cab68fbb0c979476594bdfc56c192042b8dedf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4f:e4:1e:c5:07:fc:21:77:29:48:76:2a:b0:
eb:1f:08:cd:52:7f:0e:f2:86:2d:d3:07:7c:ac:81:
6b:60:67:54:a3:3f:f1:f5:82:8b:eb:3b:4f:56:92:
08:f1:7d:83:b2:38:10:75:fc:c7:62:00:85:dc:81:
4f:e5:4d:1e:9e:f7:0f:f2:40:48:d7:1c:24:be:db:
9a:c1:25:52:df:b4:d1:77:c3:f0:c0:50:03:a9:61:
c0:ec:96:8c:f7:de:95:c4:c3:b9:3e:aa:14:80:fc:
0c:20:8b:b9:a8:36:55:cb:b9:5f:37:6c:bb:68:97:
58:65:2d:33:d9:07:1c:5a:96:15:99:ec:95:90:cf:
24:9e:ab:ff:5c:83:38:fd:2c:1d:e2:94:fb:38:6f:
df:36:29:1b:28:84:77:f1:b0:56:77:dc:b3:bc:82:
b1:51:11:20:76:b1:24:ad:ff:b3:b6:9b:b2:29:3f:
e7:01:a9:75:03:75:22:28:54:bc:9f:a8:92:73:e4:
dd:7f:b0:a6:8d:1a:20:9b:1c:62:94:1e:50:de:c6:
32:47:cc:3f:fb:c5:9f:1c:33:45:d5:9f:8d:a1:02:
ad:74:77:71:02:4e:91:b2:19:d9:ee:65:bd:c1:c8:
48:36:c2:10:ee:92:42:44:2b:e5:cb:0c:a1:11:60:
67:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:CA:B6:8F:BB:0C:97:94:76:59:4B:DF:C5:6C:19:20:42:B8:DE:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.249.192.0/19
37.188.0.0/18
46.62.0.0/17
77.241.16.0/20
94.247.248.0/21
176.241.192.0/19
178.249.240.0/21
IPv6:
2a02:51c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42277
Signature Algorithm: sha256WithRSAEncryption
64:d8:00:02:d6:af:22:ab:6b:47:8e:96:04:19:fd:df:e1:e4:
ab:7c:e7:ef:29:39:c4:52:72:5a:40:66:21:7f:e4:4d:ad:6b:
c3:de:a1:f5:df:c6:57:94:33:e1:d7:04:77:aa:c9:a3:55:94:
56:5b:d4:62:92:45:40:b9:f9:cb:46:c6:9d:a6:ab:67:e9:3a:
e7:12:19:08:34:0d:27:0d:25:b4:81:f1:18:f3:62:a0:b0:60:
12:42:94:d7:78:6d:cf:a9:cf:51:61:34:94:35:e8:67:ed:fb:
85:10:20:c8:0b:7a:b8:7e:e0:eb:3a:06:78:da:08:16:0f:45:
d7:64:ff:5b:e6:99:7e:5f:82:b5:78:2f:41:b1:11:42:02:e2:
84:5e:87:dd:71:58:66:f4:48:c7:05:ce:65:a4:0d:96:ac:5b:
c4:78:fb:44:00:0b:01:e6:1b:d9:dc:35:d1:f7:07:53:5e:7e:
a6:25:ef:92:e8:80:b6:03:0b:be:62:5b:d8:94:63:8a:75:61:
9b:6a:77:73:2b:7d:00:6a:e6:d7:d5:fb:27:8b:55:eb:0d:78:
0c:1f:7e:d4:cb:cd:07:7f:50:5e:ca:e3:f4:11:48:1b:10:9b:
1d:32:f7:e1:20:7d:e4:65:67:90:d6:5b:6c:d8:5b:1d:d1:2e:
fa:5c:42:2c
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgISAYzEkz//1d7BSszV9Ln8hCuSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTAzMDMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmM2NhYjY4ZmJiMGM5Nzk0NzY1OTRiZGZjNTZjMTkyMDQyYjhkZWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0/kHsUH/CF3KUh2KrDrHwjNUn8O
8oYt0wd8rIFrYGdUoz/x9YKL6ztPVpII8X2DsjgQdfzHYgCF3IFP5U0envcP8kBI
1xwkvtuawSVS37TRd8PwwFADqWHA7JaM996VxMO5PqoUgPwMIIu5qDZVy7lfN2y7
aJdYZS0z2QccWpYVmeyVkM8knqv/XIM4/Swd4pT7OG/fNikbKIR38bBWd9yzvIKx
UREgdrEkrf+ztpuyKT/nAal1A3UiKFS8n6iSc+Tdf7CmjRogmxxilB5Q3sYyR8w/
+8WfHDNF1Z+NoQKtdHdxAk6RshnZ7mW9wchINsIQ7pJCRCvlywyhEWBn9wIDAQAB
o4IC0zCCAs8wHQYDVR0OBBYEFPPKto+7DJeUdllL38VsGSBCuN7fMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk3L2E0NDMz
NS00MTRmLTQ0NzktYTdmZS1hYTRhODFhMmViMjMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTcvYTQ0MzM1
LTQxNGYtNDQ3OS1hN2ZlLWFhNGE4MWEyZWIyMy8xLzg4cTJqN3NNbDVSMldVdmZ4
V3daSUVLNDN0OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFIGCCsGAQUF
BwEHAQH/BEMwQTAwBAIAATAqAwQFBfnAAwQGJbwAAwQHLj4AAwQETfEQAwQDXvf4
AwQFsPHAAwQDsvnwMA0EAgACMAcDBQAqAlHAMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwClJTANBgkqhkiG9w0BAQsFAAOCAQEAZNgAAtavIqtrR46WBBn93+Hkq3zn
7yk5xFJyWkBmIX/kTa1rw96h9d/GV5Qz4dcEd6rJo1WUVlvUYpJFQLn5y0bGnaar
Z+k65xIZCDQNJw0ltIHxGPNioLBgEkKU13htz6nPUWE0lDXoZ+37hRAgyAt6uH7g
6zoGeNoIFg9F12T/W+aZfl+CtXgvQbERQgLihF6H3XFYZvRIxwXOZaQNlqxbxHj7
RAALAeYb2dw10fcHU15+piXvkuiAtgMLvmJb2JRjinVhm2p3cyt9AGrm19X7J4tV
6w14DB9+1MvNB39QXsrj9BFIGxCbHTL34SB95GVnkNZbbNhbHdEu+lxCLA==
-----END CERTIFICATE-----
Generated at Wed May 8 15:48:31 2024 by rpki-client on console-ams.rpki-client.org