Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer
File: 987QIfmRTRLUGNmqI4yTgl6l9gU.cer (raw, json)
Hash identifier: 8GJk9nVOtzMhyIaqTq7251FCVqexnjVM3gVucdTRPdM=
Subject key identifier: F7:CE:D0:21:F9:91:4D:12:D4:18:D9:AA:23:8C:93:82:5E:A5:F6:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B66D40F585C95BD95C0EEE43EB252F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 35684
AS: 206727
IP: 93.188.56.0/22
IP: 185.79.44.0/22
IP: 185.117.160.0/22
IP: 185.178.40.0/22
IP: 194.59.192.0/22
IP: 195.137.191.0/24
IP: 2001:678:b68::/48
IP: 2001:67c:18b0::/48
IP: 2a05:7180::/29
IP: 2a06:8500::/29
IP: 2a06:9300::/29
IP: 2a0a:5280::/29
IP: 2a0c:d980::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 14:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:6d:40:f5:85:c9:5b:d9:5c:0e:ee:43:eb:25:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7ced021f9914d12d418d9aa238c93825ea5f605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5e:78:bf:23:59:7d:24:b4:65:12:64:8f:52:
e9:8f:8b:cf:c1:75:44:e7:03:c3:91:d1:63:af:f2:
13:f4:f4:0d:0b:c3:7e:e9:e2:7d:16:0f:4f:f7:24:
93:e6:5a:2f:2b:36:f9:d3:af:dd:26:32:f0:81:73:
b3:f7:57:60:68:4b:ee:d2:8c:72:13:5b:7c:40:6a:
a8:15:ad:91:8c:4e:91:e5:80:15:27:0d:c1:40:c4:
16:47:14:0a:89:14:10:fc:44:78:50:b6:88:d1:ca:
a8:a4:83:3c:77:dc:34:a3:7e:3e:95:7d:a8:57:d4:
91:8a:c8:c8:cd:35:90:78:eb:2e:8b:20:69:66:01:
b3:bc:8d:c0:4b:de:4e:8e:f4:45:c3:04:fa:05:d0:
d1:5d:12:c1:a5:73:df:51:9d:9d:22:82:ab:a6:65:
41:43:34:c5:7d:e7:64:ce:f1:91:9a:5f:46:de:f3:
32:5e:7f:45:fd:79:0b:4d:7c:fc:38:12:cf:31:c4:
d1:00:be:a9:a7:6d:6c:55:bc:25:e5:31:b5:ab:bf:
88:1d:a0:da:59:51:2d:2b:25:b9:bc:0e:1a:af:b9:
04:b3:f7:bd:46:79:91:f5:5d:ce:3e:ba:bf:a4:8f:
2d:c4:eb:59:1c:63:8a:cd:d3:45:c0:da:22:d1:73:
be:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CE:D0:21:F9:91:4D:12:D4:18:D9:AA:23:8C:93:82:5E:A5:F6:05
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.188.56.0/22
185.79.44.0/22
185.117.160.0/22
185.178.40.0/22
194.59.192.0/22
195.137.191.0/24
IPv6:
2001:678:b68::/48
2001:67c:18b0::/48
2a05:7180::/29
2a06:8500::/29
2a06:9300::/29
2a0a:5280::/29
2a0c:d980::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35684
206727
Signature Algorithm: sha256WithRSAEncryption
46:60:cb:44:27:48:10:a0:ea:31:f0:f7:5f:5d:f0:17:92:35:
95:1e:1e:32:7e:25:18:8d:e5:51:32:dc:ae:32:3b:5a:c6:82:
ab:41:aa:64:ce:c4:d3:bc:a5:b5:85:16:5d:6c:e5:7c:55:de:
5b:bd:ef:7f:e2:23:b1:86:10:a0:19:20:91:bf:57:c9:6d:6a:
78:9c:92:dd:78:ff:79:3f:ad:d6:f0:02:2e:32:d6:4e:73:03:
c7:83:53:e2:df:ac:c6:9b:15:fb:44:82:b8:92:11:b5:67:43:
7f:3c:37:94:c1:b9:a6:ed:f1:2a:e1:c2:ca:8c:34:26:a6:77:
8c:62:59:80:30:60:09:ef:aa:a2:7b:15:ae:c4:8c:89:35:96:
db:f0:69:3b:fc:b9:ce:a7:92:30:05:05:54:30:fb:94:13:a6:
6f:57:a6:50:52:9d:69:60:15:6d:ea:69:7f:cd:14:0a:33:29:
23:1e:2c:ae:e5:42:f0:86:88:29:af:ee:c7:16:ad:be:c8:ed:
a5:50:1c:24:e9:7e:4f:47:cb:07:63:1a:b1:7d:25:a2:8a:bd:
36:b1:22:cc:65:e2:b2:ca:ee:4f:d5:24:90:ef:b4:4c:5b:9b:
06:e2:c9:5a:7c:3a:10:99:42:39:76:ad:e6:bb:c2:d4:3b:34:
36:74:3a:46
-----BEGIN CERTIFICATE-----
MIIF9DCCBNygAwIBAgISAYzDtm1A9YXJW9lcDu5D6yUvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDYyOTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmN2NlZDAyMWY5OTE0ZDEyZDQxOGQ5YWEyMzhjOTM4MjVlYTVmNjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp154vyNZfSS0ZRJkj1Lpj4vPwXVE
5wPDkdFjr/IT9PQNC8N+6eJ9Fg9P9yST5lovKzb506/dJjLwgXOz91dgaEvu0oxy
E1t8QGqoFa2RjE6R5YAVJw3BQMQWRxQKiRQQ/ER4ULaI0cqopIM8d9w0o34+lX2o
V9SRisjIzTWQeOsuiyBpZgGzvI3AS95OjvRFwwT6BdDRXRLBpXPfUZ2dIoKrpmVB
QzTFfedkzvGRml9G3vMyXn9F/XkLTXz8OBLPMcTRAL6pp21sVbwl5TG1q7+IHaDa
WVEtKyW5vA4ar7kEs/e9RnmR9V3OPrq/pI8txOtZHGOKzdNFwNoi0XO+UQIDAQAB
o4IDADCCAvwwHQYDVR0OBBYEFPfO0CH5kU0S1BjZqiOMk4JepfYFMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JlLzc3ODVj
My03OTQzLTRiN2ItOTE5NC1jMzg2NjFmYmYyMmEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUvNzc4NWMz
LTc5NDMtNGI3Yi05MTk0LWMzODY2MWZiZjIyYS8xLzk4N1FJZm1SVFJMVUdObXFJ
NHlUZ2w2bDlnVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHoGCCsGAQUF
BwEHAQH/BGswaTAqBAIAATAkAwQCXbw4AwQCuU8sAwQCuXWgAwQCubIoAwQCwjvA
AwQAw4m/MDsEAgACMDUDBwAgAQZ4C2gDBwAgAQZ8GLADBQMqBXGAAwUDKgaFAAMF
AyoGkwADBQMqClKAAwUDKgzZgDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMAi2QC
AwMnhzANBgkqhkiG9w0BAQsFAAOCAQEARmDLRCdIEKDqMfD3X13wF5I1lR4eMn4l
GI3lUTLcrjI7WsaCq0GqZM7E07yltYUWXWzlfFXeW73vf+IjsYYQoBkgkb9XyW1q
eJyS3Xj/eT+t1vACLjLWTnMDx4NT4t+sxpsV+0SCuJIRtWdDfzw3lMG5pu3xKuHC
yow0JqZ3jGJZgDBgCe+qonsVrsSMiTWW2/BpO/y5zqeSMAUFVDD7lBOmb1emUFKd
aWAVbeppf80UCjMpIx4sruVC8IaIKa/uxxatvsjtpVAcJOl+T0fLB2MasX0looq9
NrEizGXissruT9UkkO+0TFubBuLJWnw6EJlCOXat5rvC1Ds0NnQ6Rg==
-----END CERTIFICATE-----
Generated at Wed Apr 24 21:59:44 2024 by rpki-client on console-ams.rpki-client.org