Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8bcZ2eha9EN0SOMErTSnpkwx-fg.cer
File: 8bcZ2eha9EN0SOMErTSnpkwx-fg.cer (raw, json)
Hash identifier: hoMsxgN/GFvaSmNL2U+ym+0jPZa4aPah7TiqIfQjvgw=
Subject key identifier: F1:B7:19:D9:E8:5A:F4:43:74:48:E3:04:AD:34:A7:A6:4C:31:F9:F8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DE31F0E09BC31BADF0E316F8B39B10
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9d/7df1e2-d613-4436-bf95-d36e7480cacd/1/8bcZ2eha9EN0SOMErTSnpkwx-fg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9d/7df1e2-d613-4436-bf95-d36e7480cacd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:30:54 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.231.145.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:31:f0:e0:9b:c3:1b:ad:f0:e3:16:f8:b3:9b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1b719d9e85af4437448e304ad34a7a64c31f9f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:25:ab:46:e5:ca:0b:fe:31:a6:a8:8b:e9:b1:
40:6e:b2:8f:d9:cb:73:ba:4f:82:a6:f6:6d:93:11:
39:28:2a:38:f0:19:30:1f:78:a9:3b:7d:2d:84:f8:
bf:b1:8b:80:59:81:59:a6:9a:47:66:a5:07:ad:c6:
b2:81:53:cf:db:52:65:e5:c9:91:08:75:be:d8:af:
44:2b:aa:48:57:2c:0f:32:b1:06:6d:cc:50:6a:68:
57:11:45:e2:87:3b:4a:7c:ac:01:38:17:0d:c6:43:
04:34:24:76:3a:82:58:1a:bf:5c:2e:d2:38:18:dc:
a0:d2:90:97:41:20:13:f1:10:8e:8c:49:11:05:53:
8a:56:65:31:6c:fb:53:31:f4:7b:f6:2a:3a:b9:7e:
cc:8d:e2:e9:46:96:3a:7b:0e:e5:25:e5:7f:bd:1d:
56:65:db:fb:39:95:c1:34:85:fc:a3:5f:e4:18:e4:
a7:e0:de:d1:02:cf:94:03:18:06:e5:ef:3e:66:58:
02:29:46:e4:d9:83:b6:4a:c8:31:b2:c5:5e:03:c8:
ea:77:0a:be:68:4f:d9:02:97:21:5e:af:8e:c5:1d:
c0:3c:78:7b:16:00:ec:33:b4:47:67:ab:de:a6:a8:
e4:95:c7:7a:51:46:d0:52:fc:cc:55:b6:9e:04:63:
67:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B7:19:D9:E8:5A:F4:43:74:48:E3:04:AD:34:A7:A6:4C:31:F9:F8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7df1e2-d613-4436-bf95-d36e7480cacd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7df1e2-d613-4436-bf95-d36e7480cacd/1/8bcZ2eha9EN0SOMErTSnpkwx-fg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.145.0/24
Signature Algorithm: sha256WithRSAEncryption
93:d4:e5:85:6f:58:ef:c3:69:db:cf:08:ab:49:5e:57:ba:c3:
4a:1f:23:b3:8d:41:b8:d2:5f:8b:19:7c:7a:18:62:03:3a:20:
8d:c5:d6:09:2b:5e:3b:41:28:72:ea:a4:aa:8b:be:6d:66:ef:
c0:a0:ac:9d:3e:a0:fb:49:1b:fb:1b:e9:7b:7c:a0:b2:3f:42:
fe:f1:de:ab:eb:9a:c2:b1:44:14:de:6e:08:45:9b:72:4f:90:
44:59:4b:50:76:35:b1:ee:98:3b:72:61:ff:21:88:30:42:e8:
c0:e8:be:5b:25:8d:d8:88:52:62:29:70:44:17:ee:c1:23:b7:
98:76:37:c3:6b:0f:89:bf:b9:ed:86:38:68:2f:04:d9:5c:9e:
70:b5:42:50:72:7a:6f:b9:b6:48:e0:2c:9b:0c:33:1e:4b:c3:
cf:c8:4f:27:0a:aa:2a:15:dd:c3:8d:55:cb:3b:c1:2b:9b:84:
e6:1a:f7:d1:e4:24:9b:0e:f6:e2:2d:45:50:35:3e:96:c9:7c:
5c:7a:c3:f4:96:26:e3:e2:38:53:0e:46:0b:7a:51:cd:17:39:
ff:e5:32:0e:14:40:52:52:f1:27:62:47:be:34:1f:4e:5f:2a:
d8:8a:7c:ae:2c:ea:e5:e4:7d:cb:67:ef:fd:ef:2c:32:11:21:
f4:65:11:d1
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzI3jHw4JvDG63w4xb4s5sQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDYzMDU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWI3MTlkOWU4NWFmNDQzNzQ0OGUzMDRhZDM0YTdhNjRjMzFmOWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiWrRuXKC/4xpqiL6bFAbrKP2ctz
uk+CpvZtkxE5KCo48BkwH3ipO30thPi/sYuAWYFZpppHZqUHrcaygVPP21Jl5cmR
CHW+2K9EK6pIVywPMrEGbcxQamhXEUXihztKfKwBOBcNxkMENCR2OoJYGr9cLtI4
GNyg0pCXQSAT8RCOjEkRBVOKVmUxbPtTMfR79io6uX7MjeLpRpY6ew7lJeV/vR1W
Zdv7OZXBNIX8o1/kGOSn4N7RAs+UAxgG5e8+ZlgCKUbk2YO2SsgxssVeA8jqdwq+
aE/ZApchXq+OxR3APHh7FgDsM7RHZ6vepqjklcd6UUbQUvzMVbaeBGNn5wIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFPG3GdnoWvRDdEjjBK00p6ZMMfn4MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlkLzdkZjFl
Mi1kNjEzLTQ0MzYtYmY5NS1kMzZlNzQ4MGNhY2QvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWQvN2RmMWUy
LWQ2MTMtNDQzNi1iZjk1LWQzNmU3NDgwY2FjZC8xLzhiY1oyZWhhOUVOMFNPTUVy
VFNucGt3eC1mZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW+eRMA0GCSqGSIb3DQEBCwUAA4IBAQCT1OWF
b1jvw2nbzwirSV5XusNKHyOzjUG40l+LGXx6GGIDOiCNxdYJK147QShy6qSqi75t
Zu/AoKydPqD7SRv7G+l7fKCyP0L+8d6r65rCsUQU3m4IRZtyT5BEWUtQdjWx7pg7
cmH/IYgwQujA6L5bJY3YiFJiKXBEF+7BI7eYdjfDaw+Jv7nthjhoLwTZXJ5wtUJQ
cnpvubZI4CybDDMeS8PPyE8nCqoqFd3DjVXLO8Erm4TmGvfR5CSbDvbiLUVQNT6W
yXxcesP0libj4jhTDkYLelHNFzn/5TIOFEBSUvEnYke+NB9OXyrYinyuLOrl5H3L
Z+/97ywyESH0ZRHR
-----END CERTIFICATE-----
Generated at Sat Apr 20 02:27:51 2024 by rpki-client on console-fra.rpki-client.org