Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9EDl66L4v8j-j-VsyIpCiWUjkLo.cer
File: 9EDl66L4v8j-j-VsyIpCiWUjkLo.cer (raw, json)
Hash identifier: ZdKSQswNP/HdnVSULZTdeykPH+eUtA/G71H2b38wVLU=
Subject key identifier: F4:40:E5:EB:A2:F8:BF:C8:FE:8F:E5:6C:C8:8A:42:89:65:23:90:BA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E2E291AB6B8C98E79ABC293093572
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:41 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 31560
IP: 91.192.240.0/22
IP: 193.17.69.0/24
IP: 195.225.128.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:2e:29:1a:b6:b8:c9:8e:79:ab:c2:93:09:35:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f440e5eba2f8bfc8fe8fe56cc88a4289652390ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ff:cf:c7:ab:b1:b9:91:10:3b:5c:04:f5:22:
4c:82:a0:fb:af:db:3c:dd:5b:ca:f0:36:fe:64:f6:
d4:c3:9b:8c:7e:c5:f5:b9:2e:80:5d:14:97:30:66:
40:db:9b:03:17:cf:0e:45:28:a4:98:73:ef:67:54:
a0:e1:ce:b1:e2:06:a1:61:2a:d5:e7:0e:28:33:4c:
d8:76:88:24:7e:e7:63:9f:47:5d:1f:87:83:40:21:
68:26:c9:87:23:fb:5d:bf:e9:df:dd:3b:f3:af:a7:
96:00:25:35:d7:95:74:88:c2:05:cb:80:13:34:43:
07:0f:a2:5c:94:28:11:b9:00:49:26:04:c4:0a:74:
c3:19:37:93:00:85:88:29:dc:16:5f:a2:da:1a:a2:
b3:51:d2:84:a8:66:fc:c1:42:8c:09:71:9f:cc:0e:
86:a5:62:c9:89:75:80:13:b6:c2:08:8d:1a:6f:41:
2e:b7:7b:c6:6c:62:18:1c:84:17:e3:60:34:e0:15:
24:92:54:4a:64:26:3d:96:b7:31:5c:43:ff:ca:ef:
72:b7:95:78:0f:42:ef:ec:d0:9e:0e:66:21:90:28:
39:de:1e:f4:9c:78:17:aa:c6:10:8c:25:ca:0e:75:
49:de:15:40:fb:68:3e:5a:db:65:4c:24:54:1e:d6:
3c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:40:E5:EB:A2:F8:BF:C8:FE:8F:E5:6C:C8:8A:42:89:65:23:90:BA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.240.0/22
193.17.69.0/24
195.225.128.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31560
Signature Algorithm: sha256WithRSAEncryption
41:4c:06:e8:a3:3d:0e:35:d1:91:d1:5f:67:d2:d1:5a:c3:c2:
37:3c:ec:0d:19:f2:f2:9a:7d:98:90:85:2a:10:29:c0:7b:e0:
69:5c:e9:46:2d:83:d8:11:c4:7e:ca:33:2f:aa:22:92:56:44:
28:49:fb:a1:61:a0:f1:97:bb:96:b7:2d:2a:ca:bb:4e:62:54:
ff:b3:25:7c:e1:46:99:1b:5f:ad:6e:c0:b7:08:1b:49:6c:ef:
ec:62:84:7a:55:00:a1:8f:dd:6c:0d:72:f8:64:5e:2d:1e:87:
b6:96:a2:9f:9c:b0:b3:7c:74:84:47:64:3f:7d:1a:5c:c2:69:
d7:d2:4a:43:35:3e:c0:c6:58:89:07:bd:7e:93:3a:c0:c9:f9:
eb:8d:84:a9:9d:5c:6c:50:d5:d0:f2:69:c6:bb:b6:8e:de:2a:
70:e6:dd:fb:30:5b:4c:68:7f:a8:e1:f4:ac:b7:42:e6:b9:c5:
bd:09:cd:4c:18:ff:28:81:54:78:f4:30:38:a9:c7:2a:6c:a8:
bf:a5:cd:87:81:66:61:af:31:52:d8:5a:dc:3f:92:36:33:49:
72:f4:63:71:d4:f3:6b:21:24:62:37:76:d0:e6:ba:b4:4f:b6:
58:9d:79:ec:5e:da:cb:0f:e0:93:77:5b:05:c5:4f:5a:65:5c:
50:09:4b:5a
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgISAYzFbi4pGra4yY55q8KTCTVyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTQyOTQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDQwZTVlYmEyZjhiZmM4ZmU4ZmU1NmNjODhhNDI4OTY1MjM5MGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtv/Px6uxuZEQO1wE9SJMgqD7r9s8
3VvK8Db+ZPbUw5uMfsX1uS6AXRSXMGZA25sDF88ORSikmHPvZ1Sg4c6x4gahYSrV
5w4oM0zYdogkfudjn0ddH4eDQCFoJsmHI/tdv+nf3Tvzr6eWACU115V0iMIFy4AT
NEMHD6JclCgRuQBJJgTECnTDGTeTAIWIKdwWX6LaGqKzUdKEqGb8wUKMCXGfzA6G
pWLJiXWAE7bCCI0ab0Eut3vGbGIYHIQX42A04BUkklRKZCY9lrcxXEP/yu9yt5V4
D0Lv7NCeDmYhkCg53h70nHgXqsYQjCXKDnVJ3hVA+2g+WttlTCRUHtY8tQIDAQAB
o4ICqzCCAqcwHQYDVR0OBBYEFPRA5eui+L/I/o/lbMiKQollI5C6MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA0L2RlODY2
Mi05OTNmLTQ3ZjctYTI3Zi0wMGI5MmMxYzFlZjQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDQvZGU4NjYy
LTk5M2YtNDdmNy1hMjdmLTAwYjkyYzFjMWVmNC8xLzlFRGw2Nkw0djhqLWotVnN5
SXBDaVdVamtMby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF
BwEHAQH/BBwwGjAYBAIAATASAwQCW8DwAwQAwRFFAwQCw+GAMBkGCCsGAQUFBwEI
AQH/BAowCKAGMAQCAntIMA0GCSqGSIb3DQEBCwUAA4IBAQBBTAbooz0ONdGR0V9n
0tFaw8I3POwNGfLymn2YkIUqECnAe+BpXOlGLYPYEcR+yjMvqiKSVkQoSfuhYaDx
l7uWty0qyrtOYlT/syV84UaZG1+tbsC3CBtJbO/sYoR6VQChj91sDXL4ZF4tHoe2
lqKfnLCzfHSER2Q/fRpcwmnX0kpDNT7AxliJB71+kzrAyfnrjYSpnVxsUNXQ8mnG
u7aO3ipw5t37MFtMaH+o4fSst0LmucW9Cc1MGP8ogVR49DA4qccqbKi/pc2HgWZh
rzFS2FrcP5I2M0ly9GNx1PNrISRiN3bQ5rq0T7ZYnXnsXtrLD+CTd1sFxU9aZVxQ
CUta
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:26:26 2024 by rpki-client on console-fra.rpki-client.org