Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
File: 8NREvH1TNNoU3oBRcrJiXpgwdj8.cer (raw, json)
Hash identifier: ow07DYyww+x3WmKnYgLuC8WxCualSnP5UfWsZDkhyBE=
Subject key identifier: F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DACAFE6B6EDBDAC60E1EC65DC20BC6212
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 15 Feb 2024 12:13:45 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215573
IP: 185.246.176.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ac:af:e6:b6:ed:bd:ac:60:e1:ec:65:dc:20:bc:62:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 15 12:13:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f0d444bc7d5334da14de805172b2625e9830763f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:01:ce:b0:c7:8d:d9:de:3b:91:db:7a:32:02:
52:88:3e:86:87:9f:be:f6:29:ad:77:86:12:ad:ac:
7b:60:23:a0:cc:91:d9:d0:39:d0:b4:3a:7e:59:ef:
ad:7a:6a:58:6d:85:c4:92:19:39:21:6a:b3:ef:1c:
90:e3:c4:b8:53:27:67:cf:18:e4:77:34:b2:b2:24:
73:1e:70:d6:04:d3:91:fc:7e:b3:ed:a8:78:f3:ee:
e6:3f:fb:1f:31:19:47:23:b3:71:4b:49:21:1b:1c:
fb:8b:d4:95:ad:9a:fa:f8:14:98:ee:73:9f:c5:e7:
71:6f:b7:48:c0:4e:ad:71:f8:5b:30:af:97:d1:a0:
fb:39:cb:39:cb:d8:80:50:4d:da:10:d3:fd:bd:77:
91:98:ef:30:c1:ae:d2:79:29:45:68:76:90:ea:e5:
9a:71:2b:6b:83:02:1e:66:ca:f1:77:99:3b:3c:0b:
87:0a:f1:f1:fe:dd:22:87:c0:dc:8e:51:8a:9d:8e:
84:10:1a:12:10:a4:0a:3b:53:96:54:1d:a2:e1:d3:
b6:cf:3e:17:69:4c:be:13:dc:4a:11:80:10:16:89:
c3:e6:45:80:9d:d5:fb:38:a1:5b:80:66:51:97:14:
3c:aa:d4:a7:45:85:9a:10:3a:f9:ba:da:ff:a5:40:
64:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.176.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215573
Signature Algorithm: sha256WithRSAEncryption
79:95:ad:1d:3c:e8:de:2a:29:82:ca:4f:36:02:42:90:db:a7:
bb:c9:6c:4c:bd:fb:83:fe:1c:0f:51:af:04:76:95:fd:e2:68:
05:36:72:e7:c7:b6:b1:22:7a:a9:5b:12:63:65:ac:59:99:f7:
8e:81:84:58:52:ca:a7:46:8d:a6:46:a9:d4:a9:47:9b:d1:82:
92:a8:03:c5:16:ab:08:f3:7f:24:36:9f:5e:ce:1a:c1:22:2d:
70:5d:a7:e2:e7:44:82:c7:70:4d:b3:60:c6:f2:b2:f2:f2:fd:
4f:c5:07:ac:a5:5c:94:ca:5d:56:65:c6:f2:a1:7f:30:a7:e2:
c8:83:2e:fa:e5:6c:d9:5e:a2:e7:25:d9:43:fb:93:01:ce:3d:
76:1c:ee:af:2a:7a:51:62:d7:13:e0:e7:af:a3:a2:9f:de:ba:
7b:b7:4c:99:7f:88:4e:fc:21:3e:bc:de:69:68:43:12:e0:7f:
d0:37:4b:b4:0c:b9:14:44:b0:ba:72:92:cb:4d:ed:60:ae:b0:
b0:89:4a:c8:54:b2:22:72:bb:eb:bd:46:ce:4d:05:9f:c5:c8:
33:7a:76:90:df:27:90:00:9a:e6:8e:3e:1b:25:dd:c2:a3:d4:
d2:89:b0:69:1f:f5:c6:dc:67:49:5e:70:1d:67:bd:1d:94:7b:
79:48:4f:79
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAY2sr+a27b2sYOHsZdwgvGISMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMjE1MTIxMzQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMGQ0NDRiYzdkNTMzNGRhMTRkZTgwNTE3MmIyNjI1ZTk4MzA3NjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wHOsMeN2d47kdt6MgJSiD6Gh5++
9imtd4YSrax7YCOgzJHZ0DnQtDp+We+tempYbYXEkhk5IWqz7xyQ48S4Uydnzxjk
dzSysiRzHnDWBNOR/H6z7ah48+7mP/sfMRlHI7NxS0khGxz7i9SVrZr6+BSY7nOf
xedxb7dIwE6tcfhbMK+X0aD7Ocs5y9iAUE3aENP9vXeRmO8wwa7SeSlFaHaQ6uWa
cStrgwIeZsrxd5k7PAuHCvHx/t0ih8DcjlGKnY6EEBoSEKQKO1OWVB2i4dO2zz4X
aUy+E9xKEYAQFonD5kWAndX7OKFbgGZRlxQ8qtSnRYWaEDr5utr/pUBkJQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFPDURLx9UzTaFN6AUXKyYl6YMHY/MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U3LzVkYzI3
ZC01YWRiLTRkZjMtOTljMi05OGQ5YzQyNTdmYzYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcvNWRjMjdk
LTVhZGItNGRmMy05OWMyLTk4ZDljNDI1N2ZjNi8xLzhOUkV2SDFUTk5vVTNvQlJj
ckppWHBnd2RqOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCufawMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwNKFTANBgkqhkiG9w0BAQsFAAOCAQEAeZWtHTzo3iopgspPNgJCkNunu8lsTL37
g/4cD1GvBHaV/eJoBTZy58e2sSJ6qVsSY2WsWZn3joGEWFLKp0aNpkap1KlHm9GC
kqgDxRarCPN/JDafXs4awSItcF2n4udEgsdwTbNgxvKy8vL9T8UHrKVclMpdVmXG
8qF/MKfiyIMu+uVs2V6i5yXZQ/uTAc49dhzuryp6UWLXE+Dnr6Oin966e7dMmX+I
TvwhPrzeaWhDEuB/0DdLtAy5FESwunKSy03tYK6wsIlKyFSyInK7671Gzk0Fn8XI
M3p2kN8nkACa5o4+GyXdwqPU0omwaR/1xtxnSV5wHWe9HZR7eUhPeQ==
-----END CERTIFICATE-----
Generated at Fri May 3 12:55:10 2024 by rpki-client on console-fra.rpki-client.org