Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer
File: 8DqRN3TbyeYF3BerI6BaFoA5jeU.cer (raw, json)
Hash identifier: tNSbxWd1oHt5zgYruPanlHFZzNa5XpMKMzvH0//xZMk=
Subject key identifier: F0:3A:91:37:74:DB:C9:E6:05:DC:17:AB:23:A0:5A:16:80:39:8D:E5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC726D26B37D4B5F1CC76842E52B2727E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:30:59 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211283
IP: 37.44.213.0/24
IP: 87.120.162.0/23
IP: 92.243.89.0/24
IP: 185.242.28.0/23
IP: 2a06:680::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 13:25:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:d2:6b:37:d4:b5:f1:cc:76:84:2e:52:b2:72:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:30:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f03a913774dbc9e605dc17ab23a05a1680398de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e8:8e:8d:28:1e:33:34:ec:14:f0:e8:bf:08:
1e:49:19:82:19:88:86:e7:4b:59:7b:04:ba:b4:6e:
fb:b7:9e:3f:4f:45:4d:db:05:aa:6a:65:a5:ab:47:
ec:6f:e3:9b:3e:8c:1d:8b:80:f1:33:a9:9b:6e:e0:
dc:4a:b2:2b:5d:cc:21:79:a5:73:91:9f:21:49:03:
94:0a:fd:e9:f3:08:c9:62:3d:dd:36:76:5d:7a:0b:
db:59:fe:22:79:8e:b3:6e:26:f9:90:64:43:98:c3:
05:43:8f:ed:66:8b:d8:3f:ab:6a:d0:fc:ed:7f:b9:
52:32:3c:08:d2:e1:4c:bd:a0:36:09:b9:ba:89:3f:
6b:22:b3:ee:c1:33:06:a7:23:b5:81:fe:0e:a1:06:
0e:e2:49:e8:9f:33:76:1f:6d:28:b3:03:fb:65:78:
9c:16:71:44:d3:62:ad:41:98:69:fb:f0:6c:73:69:
f1:fa:b1:44:2f:06:72:13:cb:61:96:12:26:d6:5f:
21:98:37:b7:6e:82:5d:97:fb:61:fa:c2:c3:64:7b:
e7:49:2c:0f:02:01:ad:aa:fc:21:cd:c5:12:1e:fb:
e4:ee:b9:1b:6d:7b:dd:05:94:ef:70:01:8a:20:20:
6d:c0:2b:77:88:2e:b8:f4:2a:6c:16:07:b5:06:d0:
06:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:3A:91:37:74:DB:C9:E6:05:DC:17:AB:23:A0:5A:16:80:39:8D:E5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.213.0/24
87.120.162.0/23
92.243.89.0/24
185.242.28.0/23
IPv6:
2a06:680::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211283
Signature Algorithm: sha256WithRSAEncryption
2d:04:5c:0a:f2:03:23:dc:70:59:0b:3f:dc:74:45:05:a5:46:
91:09:02:a6:90:f7:78:d3:53:5a:73:58:a5:8a:8e:c1:67:a9:
b7:30:53:97:af:2c:d1:2a:49:76:00:c2:4d:33:b5:3e:10:3f:
59:b1:4a:75:4c:98:bc:9b:a4:34:fa:4f:93:ac:1d:12:ca:41:
28:26:ff:d7:1d:d7:e0:ab:09:cf:38:4b:bc:8a:19:0d:a5:c9:
0c:9b:de:de:ca:52:f0:cf:af:f3:32:c8:2a:2f:9a:37:e3:ca:
cc:9b:64:03:72:3e:6b:58:3f:47:95:84:46:ef:1f:43:f1:57:
f0:a5:60:aa:3d:4a:79:c9:3a:36:96:eb:90:43:8e:e9:8f:c9:
f8:3c:a0:c4:ed:e1:19:94:b2:44:88:a7:39:25:b5:4d:35:30:
ba:af:08:a8:5b:2b:ab:e0:d5:13:c1:d6:0f:29:b5:bf:c7:32:
64:b1:62:2b:9f:eb:fc:e5:40:fe:b1:e8:5a:96:1b:de:33:0f:
e6:66:8f:6a:01:1a:04:3a:28:34:de:5e:60:16:cb:ed:22:12:
4d:61:f5:7f:64:27:21:35:3c:9f:39:1a:e9:29:87:c0:63:1d:
3c:cd:2c:c7:01:66:a0:fc:cc:1a:2a:ae:57:94:38:d5:44:d7:
31:90:56:6d
-----BEGIN CERTIFICATE-----
MIIFtTCCBJ2gAwIBAgISAYzHJtJrN9S18cx2hC5SsnJ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMjIzMDU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDNhOTEzNzc0ZGJjOWU2MDVkYzE3YWIyM2EwNWExNjgwMzk4ZGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuiOjSgeMzTsFPDovwgeSRmCGYiG
50tZewS6tG77t54/T0VN2wWqamWlq0fsb+ObPowdi4DxM6mbbuDcSrIrXcwheaVz
kZ8hSQOUCv3p8wjJYj3dNnZdegvbWf4ieY6zbib5kGRDmMMFQ4/tZovYP6tq0Pzt
f7lSMjwI0uFMvaA2Cbm6iT9rIrPuwTMGpyO1gf4OoQYO4knonzN2H20oswP7ZXic
FnFE02KtQZhp+/Bsc2nx+rFELwZyE8thlhIm1l8hmDe3boJdl/th+sLDZHvnSSwP
AgGtqvwhzcUSHvvk7rkbbXvdBZTvcAGKICBtwCt3iC649CpsFge1BtAG4wIDAQAB
o4ICwTCCAr0wHQYDVR0OBBYEFPA6kTd028nmBdwXqyOgWhaAOY3lMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY0L2Y4MjQy
Ni03ZWIwLTQ3NjUtOGRlOS1lMDA2MzI2OWU0NjkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjQvZjgyNDI2
LTdlYjAtNDc2NS04ZGU5LWUwMDYzMjY5ZTQ2OS8xLzhEcVJOM1RieWVZRjNCZXJJ
NkJhRm9BNWplVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF
BwEHAQH/BDEwLzAeBAIAATAYAwQAJSzVAwQBV3iiAwQAXPNZAwQBufIcMA0EAgAC
MAcDBQMqBgaAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM5UzANBgkqhkiG9w0B
AQsFAAOCAQEALQRcCvIDI9xwWQs/3HRFBaVGkQkCppD3eNNTWnNYpYqOwWeptzBT
l68s0SpJdgDCTTO1PhA/WbFKdUyYvJukNPpPk6wdEspBKCb/1x3X4KsJzzhLvIoZ
DaXJDJve3spS8M+v8zLIKi+aN+PKzJtkA3I+a1g/R5WERu8fQ/FX8KVgqj1Keck6
NpbrkEOO6Y/J+DygxO3hGZSyRIinOSW1TTUwuq8IqFsrq+DVE8HWDym1v8cyZLFi
K5/r/OVA/rHoWpYb3jMP5maPagEaBDooNN5eYBbL7SISTWH1f2QnITU8nzka6SmH
wGMdPM0sxwFmoPzMGiquV5Q41UTXMZBWbQ==
-----END CERTIFICATE-----
Generated at Thu Apr 25 14:53:37 2024 by rpki-client on console-fra.rpki-client.org