Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8G37T34-N0VYDoyPxHAj_7H6kW0.cer
File: 8G37T34-N0VYDoyPxHAj_7H6kW0.cer (raw, json)
Hash identifier: BMU5RXNLI9QVOwY5SDIvmAm1MfLRo+HnQArR3DF6tjc=
Subject key identifier: F0:6D:FB:4F:7E:3E:37:45:58:0E:8C:8F:C4:70:23:FF:B1:FA:91:6D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E371DDDAF687F853DA1729B7D967B2826
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 13 Mar 2024 09:21:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 42506
IP: 152.89.156.0/22
IP: 195.3.188.0/22
IP: 2a06:5540::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:37:1d:dd:af:68:7f:85:3d:a1:72:9b:7d:96:7b:28:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 13 09:21:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f06dfb4f7e3e3745580e8c8fc47023ffb1fa916d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:a5:30:95:8e:34:3c:2b:31:b8:55:77:71:6c:
06:db:d7:00:70:a3:db:ac:88:62:77:c5:15:ea:40:
f5:ee:e7:d8:e1:42:18:88:0c:2d:de:f8:aa:08:7c:
74:90:05:02:65:34:8f:d1:f7:d7:8b:81:2c:8d:77:
bf:23:10:2a:c2:ca:f5:f0:a8:1c:a0:7f:b4:5c:64:
62:7e:07:b5:3d:ea:af:cb:b8:c2:21:78:07:fe:4e:
4c:67:aa:9f:c1:68:3f:8c:e3:43:cb:2e:65:a5:43:
f0:e8:95:97:64:61:ed:16:fc:ce:40:67:bb:d9:ca:
ce:dc:c9:be:0f:82:e5:9f:41:15:b4:98:5a:90:f4:
c4:fc:00:51:e2:5b:0f:2c:60:1f:1c:93:04:37:1c:
0e:07:69:af:d5:59:09:b0:9d:35:b8:16:35:cc:c7:
8e:dc:8e:8e:c2:7a:58:68:6d:0d:b9:ff:7d:68:9c:
c8:44:67:f3:02:c6:ba:b4:31:74:39:8f:c2:11:97:
ec:65:19:42:81:92:66:b1:4a:28:bf:04:5d:5e:7a:
56:d3:cb:bf:84:96:5c:c3:eb:6b:8f:79:d7:07:8e:
10:a3:5f:e3:40:24:36:e9:bd:23:41:09:c7:ab:85:
21:2a:65:7d:59:a9:18:9d:7f:9c:39:9e:da:5a:93:
0c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:6D:FB:4F:7E:3E:37:45:58:0E:8C:8F:C4:70:23:FF:B1:FA:91:6D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.156.0/22
195.3.188.0/22
IPv6:
2a06:5540::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42506
Signature Algorithm: sha256WithRSAEncryption
99:82:21:e2:a2:02:dc:ad:42:63:7d:67:9d:2d:8e:5e:dc:5a:
c9:88:a3:c7:e9:66:95:42:1b:f7:b7:f9:07:e2:ce:0f:25:d0:
c1:84:c8:8a:01:be:f4:4f:5f:ed:1e:a5:6c:66:75:14:0f:83:
84:c4:68:c6:91:88:f5:c7:93:a7:f4:51:15:46:f7:d5:38:8f:
4e:0b:99:48:0c:c7:3c:98:1a:36:fd:f7:3c:5d:b8:28:41:42:
e6:8b:02:08:9f:9c:41:9d:e7:a4:13:86:62:42:a9:d3:4d:9b:
e9:b2:8e:94:b4:a6:6c:47:b6:94:16:d2:ef:ef:15:b6:cd:b0:
7b:9f:cd:91:70:48:b0:15:2c:1b:2d:c7:29:08:e3:12:7a:bc:
e0:63:1c:c1:32:3a:7d:9a:ae:27:37:84:d5:72:c0:46:22:6d:
9b:ae:d7:ef:98:39:5e:e3:cc:08:58:0c:0b:3b:5d:d4:d3:f4:
b2:c6:cc:a3:ea:0a:d7:72:15:56:0c:63:53:d9:b1:25:94:43:
c3:75:ef:f1:53:0c:dc:e1:8d:12:8a:b7:ed:de:33:b1:db:1d:
62:4a:75:67:bf:4b:90:25:60:40:a7:4f:90:e3:cf:6f:5a:55:
80:57:d1:f9:38:21:65:cf:a1:5d:0c:c6:48:1c:7a:e5:23:b2:
f4:dc:78:83
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAY43Hd2vaH+FPaFym32WeygmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMzEzMDkyMTI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDZkZmI0ZjdlM2UzNzQ1NTgwZThjOGZjNDcwMjNmZmIxZmE5MTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9aUwlY40PCsxuFV3cWwG29cAcKPb
rIhid8UV6kD17ufY4UIYiAwt3viqCHx0kAUCZTSP0ffXi4EsjXe/IxAqwsr18Kgc
oH+0XGRifge1Peqvy7jCIXgH/k5MZ6qfwWg/jONDyy5lpUPw6JWXZGHtFvzOQGe7
2crO3Mm+D4Lln0EVtJhakPTE/ABR4lsPLGAfHJMENxwOB2mv1VkJsJ01uBY1zMeO
3I6OwnpYaG0Nuf99aJzIRGfzAsa6tDF0OY/CEZfsZRlCgZJmsUoovwRdXnpW08u/
hJZcw+trj3nXB44Qo1/jQCQ26b0jQQnHq4UhKmV9WakYnX+cOZ7aWpMMgwIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFPBt+09+PjdFWA6Mj8RwI/+x+pFtMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgwLzZlMWRm
OC02ZWJjLTRiMmUtOTFiNC1iMDNmOTQ4ODA0YmUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAvNmUxZGY4
LTZlYmMtNGIyZS05MWI0LWIwM2Y5NDg4MDRiZS8xLzhHMzdUMzQtTjBWWURveVB4
SEFqXzdINmtXMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQCmFmcAwQCwwO8MA0EAgACMAcDBQMqBlVAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCmCjANBgkqhkiG9w0BAQsFAAOCAQEAmYIh
4qIC3K1CY31nnS2OXtxayYijx+lmlUIb97f5B+LODyXQwYTIigG+9E9f7R6lbGZ1
FA+DhMRoxpGI9ceTp/RRFUb31TiPTguZSAzHPJgaNv33PF24KEFC5osCCJ+cQZ3n
pBOGYkKp002b6bKOlLSmbEe2lBbS7+8Vts2we5/NkXBIsBUsGy3HKQjjEnq84GMc
wTI6fZquJzeE1XLARiJtm67X75g5XuPMCFgMCztd1NP0ssbMo+oK13IVVgxjU9mx
JZRDw3Xv8VMM3OGNEoq37d4zsdsdYkp1Z79LkCVgQKdPkOPPb1pVgFfR+TghZc+h
XQzGSBx65SOy9Nx4gw==
-----END CERTIFICATE-----
Generated at Fri May 3 01:30:18 2024 by rpki-client on console-ams.rpki-client.org