Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94tjVHSP4-hS4GSYKCwhVAB1_GY.cer
File: 94tjVHSP4-hS4GSYKCwhVAB1_GY.cer (raw, json)
Hash identifier: a3bgFh3mvwDke0AbP5ajepzViC+Ad+FjusimyXr2og4=
Subject key identifier: F7:8B:63:54:74:8F:E3:E8:52:E0:64:98:28:2C:21:54:00:75:FC:66
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC793553A310EC5ED0921060DC1BB3C6D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/42710b-65c3-4c0f-ae97-b1f4384313c0/1/94tjVHSP4-hS4GSYKCwhVAB1_GY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/42710b-65c3-4c0f-ae97-b1f4384313c0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:29:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.47.0.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:55:3a:31:0e:c5:ed:09:21:06:0d:c1:bb:3c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f78b6354748fe3e852e06498282c21540075fc66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:14:0c:63:d9:d5:64:ea:2e:84:03:37:37:97:
80:63:fd:06:02:dd:91:ff:34:47:28:2f:fc:61:4d:
a3:8a:55:8e:45:7e:95:a2:14:48:b9:c1:e5:8b:c3:
f6:b0:27:d6:72:c4:10:fe:05:06:5d:1d:a2:ce:c8:
70:74:58:34:af:08:7d:86:44:f6:41:58:bc:be:c9:
0f:21:fb:36:9f:21:0a:02:d2:c3:43:17:0a:0b:df:
5e:3b:68:37:8f:bd:18:c5:06:d9:71:e0:05:aa:c5:
11:c9:9b:79:8b:ac:f3:5c:79:86:88:c5:da:4e:87:
d3:ea:5e:6c:7d:0f:dd:42:74:f8:c4:f5:d8:3b:13:
34:27:4e:54:8f:8b:4a:30:d4:db:20:ad:56:6c:30:
44:66:1d:79:ad:d1:c7:0a:63:f1:29:d0:76:7f:7c:
03:f0:36:a1:d8:f2:3c:b9:14:4c:00:53:e7:90:9e:
02:8f:c5:14:c1:8a:e1:4f:d5:6c:ab:a1:54:e5:33:
1d:47:fb:36:b5:9e:24:0c:b8:5b:1d:6d:51:91:95:
5b:bc:30:65:22:78:bc:13:f5:26:1a:e8:94:c2:e0:
d6:4a:eb:64:ea:94:a7:ea:52:57:4c:dd:b4:11:6e:
15:52:09:a4:21:f6:f3:b1:18:79:06:96:89:6e:b4:
8b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:8B:63:54:74:8F:E3:E8:52:E0:64:98:28:2C:21:54:00:75:FC:66
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/42710b-65c3-4c0f-ae97-b1f4384313c0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/42710b-65c3-4c0f-ae97-b1f4384313c0/1/94tjVHSP4-hS4GSYKCwhVAB1_GY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.0.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:66:c3:77:95:18:66:80:fc:7d:d9:e8:e4:69:0d:52:d4:b0:
d9:02:4d:9e:c2:ee:e6:33:db:ad:e5:83:ba:d6:f6:c7:52:1d:
3d:21:26:f5:4a:22:98:8b:ad:ad:f2:9c:16:f8:c1:d4:7b:fa:
7c:9b:e1:59:ea:82:ec:25:74:69:f8:1d:0e:fe:cd:2b:87:ec:
d5:6a:59:ba:9b:d3:92:84:57:55:a9:79:48:d8:05:ea:de:59:
2f:37:14:51:41:7c:14:ad:5f:34:52:6b:87:77:d8:05:24:97:
a6:9e:6e:8d:27:28:19:85:36:a5:41:7a:df:82:49:6f:04:d3:
19:46:e2:0a:c0:63:0f:04:62:b3:4f:be:25:79:f3:f9:23:ca:
1c:bc:70:34:f2:1c:49:87:d4:14:41:e8:1c:b1:0d:76:03:4c:
d3:78:61:ff:46:08:25:58:69:70:f9:5d:c4:f8:bc:4a:5d:b0:
e8:62:de:37:a4:1c:f7:e0:d7:45:8c:cf:2b:9c:ad:b8:bd:42:
91:4c:cd:c2:4b:5e:ac:1c:a5:da:0d:d6:c4:f7:84:64:98:45:
68:05:be:b7:00:7c:49:8a:41:d1:01:95:13:28:b5:fc:d9:4c:
0f:c4:43:f0:ff:29:04:8c:03:c0:fe:3e:71:cb:8c:6c:14:69:
97:46:3b:ee
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzHk1U6MQ7F7QkhBg3BuzxtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDAyOTMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzhiNjM1NDc0OGZlM2U4NTJlMDY0OTgyODJjMjE1NDAwNzVmYzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRQMY9nVZOouhAM3N5eAY/0GAt2R
/zRHKC/8YU2jilWORX6VohRIucHli8P2sCfWcsQQ/gUGXR2izshwdFg0rwh9hkT2
QVi8vskPIfs2nyEKAtLDQxcKC99eO2g3j70YxQbZceAFqsURyZt5i6zzXHmGiMXa
TofT6l5sfQ/dQnT4xPXYOxM0J05Uj4tKMNTbIK1WbDBEZh15rdHHCmPxKdB2f3wD
8Dah2PI8uRRMAFPnkJ4Cj8UUwYrhT9Vsq6FU5TMdR/s2tZ4kDLhbHW1RkZVbvDBl
Ini8E/UmGuiUwuDWSutk6pSn6lJXTN20EW4VUgmkIfbzsRh5BpaJbrSLWQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFPeLY1R0j+PoUuBkmCgsIVQAdfxmMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EzLzQyNzEw
Yi02NWMzLTRjMGYtYWU5Ny1iMWY0Mzg0MzEzYzAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTMvNDI3MTBi
LTY1YzMtNGMwZi1hZTk3LWIxZjQzODQzMTNjMC8xLzk0dGpWSFNQNC1oUzRHU1lL
Q3doVkFCMV9HWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwS8AMA0GCSqGSIb3DQEBCwUAA4IBAQAtZsN3
lRhmgPx92ejkaQ1S1LDZAk2ewu7mM9ut5YO61vbHUh09ISb1SiKYi62t8pwW+MHU
e/p8m+FZ6oLsJXRp+B0O/s0rh+zValm6m9OShFdVqXlI2AXq3lkvNxRRQXwUrV80
UmuHd9gFJJemnm6NJygZhTalQXrfgklvBNMZRuIKwGMPBGKzT74lefP5I8ocvHA0
8hxJh9QUQegcsQ12A0zTeGH/RgglWGlw+V3E+LxKXbDoYt43pBz34NdFjM8rnK24
vUKRTM3CS16sHKXaDdbE94RkmEVoBb63AHxJikHRAZUTKLX82UwPxEPw/ykEjAPA
/j5xy4xsFGmXRjvu
-----END CERTIFICATE-----
Generated at Fri May 3 08:54:12 2024 by rpki-client on console-ams.rpki-client.org