Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
File: 9jiUfduJL186SKaa-XqPtSEDoNY.cer (raw, json)
Hash identifier: MI3X+abcD4e+Zee9vXMGCbM/Mlm0uF5dlmC3hY/patY=
Subject key identifier: F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D458C104AC7170863559497F028599839
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 26 Jan 2024 11:33:43 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.35.157.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:45:8c:10:4a:c7:17:08:63:55:94:97:f0:28:59:98:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 26 11:33:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:17:d3:c6:6b:32:63:13:a9:ff:40:9c:60:88:
4f:72:6d:32:55:ab:b9:65:b9:13:0a:11:05:75:db:
7c:97:c6:84:74:f3:7b:1f:56:e9:83:31:04:cf:cf:
2f:8f:68:47:0d:2e:17:2d:c4:83:9a:f7:85:92:71:
1f:9b:1f:d9:26:9b:5a:4b:5b:92:f6:a2:4c:2f:7a:
96:b9:92:6b:ac:e2:f6:e6:b9:14:94:a1:c7:6f:f1:
a2:68:d1:4a:dc:de:d9:3b:95:45:fb:fd:b9:d0:e9:
e1:af:bb:80:82:0e:4b:b9:ec:c0:50:7d:83:ba:19:
0b:46:4b:6a:85:8b:70:d8:22:b9:52:d3:b9:0b:73:
86:9d:30:67:0b:f3:22:a8:9f:df:18:22:f3:e1:e8:
04:f4:3f:56:eb:48:de:5f:d7:f4:03:e9:a3:4f:a6:
19:90:a2:76:9d:64:ba:46:27:6f:ad:59:1e:d9:0b:
1b:e5:da:ce:48:5f:71:e7:56:44:b2:1c:f1:28:ac:
a1:ab:87:a2:52:2c:07:cf:28:23:0b:29:9d:dd:5a:
39:60:5c:c2:f7:b1:44:ef:77:bf:22:83:43:1f:0c:
00:97:fb:2d:db:40:7c:21:4c:af:74:e0:8c:47:a0:
3f:01:f7:8d:97:4b:11:d0:dd:8d:73:b7:89:32:37:
bc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.157.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:27:db:bb:dc:74:fe:20:da:e8:8c:6e:42:80:3d:e4:b6:ea:
bd:bd:c2:55:a3:6f:a9:b0:35:f7:67:25:f6:25:f7:9e:e7:42:
00:b6:bd:0f:06:4b:6b:de:9d:5e:9f:7f:74:db:cc:0f:90:ce:
af:e2:f9:55:5b:97:ba:fc:ac:53:50:6d:8e:5f:78:87:7e:7e:
1f:a3:96:d3:cc:e1:0f:dd:11:61:df:0a:19:c4:00:fa:a0:e9:
df:24:d3:b4:b8:03:1f:ef:88:c9:36:bf:4f:45:c7:e9:e4:55:
37:7d:52:1b:8b:f1:0a:07:5d:b6:38:5f:2d:e7:12:85:80:1b:
d8:5d:28:d2:30:6e:05:2b:9e:ee:41:19:45:f3:19:c3:97:d4:
81:53:f9:76:93:ba:e9:dd:a7:ac:94:9f:11:da:35:f0:9f:5f:
14:0b:42:9a:89:e1:ba:7c:7f:2d:b8:4a:48:79:e0:c0:51:0e:
8e:ad:c4:59:b6:1b:79:ed:4e:59:22:79:57:8e:d5:1c:0b:1e:
6e:2c:49:f7:95:5a:09:b2:a2:54:e2:d9:95:6d:e6:0c:81:8f:
f3:88:ea:fe:59:d8:2d:07:76:be:af:0e:aa:06:d8:2d:46:1d:
15:fd:23:40:b4:a3:85:09:5f:93:4a:3e:4f:22:8f:5a:ca:47:
0f:db:1e:89
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAY1FjBBKxxcIY1WUl/AoWZg5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTI2MTEzMzQzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjM4OTQ3ZGRiODkyZjVmM2E0OGE2OWFmOTdhOGZiNTIxMDNhMGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBfTxmsyYxOp/0CcYIhPcm0yVau5
ZbkTChEFddt8l8aEdPN7H1bpgzEEz88vj2hHDS4XLcSDmveFknEfmx/ZJptaS1uS
9qJML3qWuZJrrOL25rkUlKHHb/GiaNFK3N7ZO5VF+/250Onhr7uAgg5LuezAUH2D
uhkLRktqhYtw2CK5UtO5C3OGnTBnC/MiqJ/fGCLz4egE9D9W60jeX9f0A+mjT6YZ
kKJ2nWS6RidvrVke2Qsb5drOSF9x51ZEshzxKKyhq4eiUiwHzygjCymd3Vo5YFzC
97FE73e/IoNDHwwAl/st20B8IUyvdOCMR6A/AfeNl0sR0N2Nc7eJMje8WQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFPY4lH3biS9fOkimmvl6j7UhA6DWMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ5LzI4OWI4
ZC03OGRlLTQxNjAtOTBkMy02MWQyNjYwM2MzN2MvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDkvMjg5Yjhk
LTc4ZGUtNDE2MC05MGQzLTYxZDI2NjAzYzM3Yy8xLzlqaVVmZHVKTDE4NlNLYWEt
WHFQdFNFRG9OWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwSOdMA0GCSqGSIb3DQEBCwUAA4IBAQBbJ9u7
3HT+INrojG5CgD3ktuq9vcJVo2+psDX3ZyX2Jfee50IAtr0PBktr3p1en39028wP
kM6v4vlVW5e6/KxTUG2OX3iHfn4fo5bTzOEP3RFh3woZxAD6oOnfJNO0uAMf74jJ
Nr9PRcfp5FU3fVIbi/EKB122OF8t5xKFgBvYXSjSMG4FK57uQRlF8xnDl9SBU/l2
k7rp3aeslJ8R2jXwn18UC0KaieG6fH8tuEpIeeDAUQ6OrcRZtht57U5ZInlXjtUc
Cx5uLEn3lVoJsqJU4tmVbeYMgY/ziOr+WdgtB3a+rw6qBtgtRh0V/SNAtKOFCV+T
Sj5PIo9aykcP2x6J
-----END CERTIFICATE-----
Generated at Fri May 3 13:01:16 2024 by rpki-client on console-fra.rpki-client.org