Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer
File: 9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer (raw, json)
Hash identifier: eNA/MI/4FZnJfAYvI6y+BzzBY8Za4ys5uhhUuIVQo/A=
Subject key identifier: F6:5C:6D:CD:9F:DB:D2:4C:16:E5:0A:E1:55:1E:E8:F4:3A:C8:BF:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC42540614F34CF34592596A199E7F829
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.133.204.0/22
IP: 2a0e:78c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:40:61:4f:34:cf:34:59:25:96:a1:99:e7:f8:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f65c6dcd9fdbd24c16e50ae1551ee8f43ac8bfd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4d:85:5d:ec:c1:41:fa:a8:56:aa:55:1c:da:
31:7c:60:0b:04:e0:00:bb:8c:99:9c:c5:03:59:0c:
18:a9:dc:30:c1:7c:60:5c:8b:eb:cd:3b:e9:bd:3c:
e0:ad:6e:50:34:42:82:08:fe:d1:c9:a9:3c:2e:32:
b6:69:3e:f7:a4:79:1c:de:87:64:71:73:47:f6:d9:
c4:75:4f:d5:7d:7d:b3:c0:67:0b:f2:61:9d:6f:76:
d1:01:8b:3c:24:31:6f:61:2d:5e:21:69:72:0e:40:
73:ee:f3:35:8d:10:ae:2a:c7:d2:04:1b:26:b0:8f:
5a:ac:c3:16:a6:41:4d:90:6c:e2:45:d7:8d:44:84:
dc:15:34:c9:a0:e5:fb:eb:4d:cf:62:09:7e:c1:b5:
5b:f2:9b:30:8a:cb:bc:1d:7f:02:47:19:92:bf:49:
df:64:89:79:c0:62:1a:be:fa:1b:54:cf:85:24:86:
05:57:90:3a:41:67:ea:60:66:f7:7e:0a:47:72:9f:
29:be:fa:d4:f3:6f:a2:37:33:dc:83:11:ac:5c:71:
6d:a8:b9:4f:7a:13:64:ce:36:7b:55:cf:86:cc:55:
45:5a:33:c4:de:17:f4:16:a4:47:0c:5a:cc:6b:00:
64:b9:71:53:1a:41:a7:5b:56:11:f1:ad:55:75:4a:
0b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:5C:6D:CD:9F:DB:D2:4C:16:E5:0A:E1:55:1E:E8:F4:3A:C8:BF:D4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.204.0/22
IPv6:
2a0e:78c0::/29
Signature Algorithm: sha256WithRSAEncryption
7f:ab:ea:39:f9:94:31:36:1e:c9:f0:bb:6f:77:70:18:75:2c:
48:45:c0:5c:a4:e5:eb:66:2a:d4:8c:6a:28:1c:ce:15:96:75:
4d:23:f1:55:5e:5f:f9:90:aa:26:b1:ee:52:e5:81:63:54:5c:
64:86:05:f6:0b:5f:7c:ec:66:c2:72:ce:f1:62:43:98:5c:45:
f6:a5:8e:c4:f0:ff:c9:37:e6:1f:ab:4a:48:5b:9b:ce:5f:79:
be:a3:fc:b9:d4:10:ed:96:c5:28:bd:39:45:08:4d:f0:78:37:
ac:ee:bc:de:0d:bd:e2:6d:1f:e6:05:04:75:05:cb:a4:84:11:
90:68:b3:ed:ca:3b:ed:1b:8a:9c:b9:c9:0e:9d:a2:3a:bf:0f:
6f:96:c4:f5:ba:b6:ac:af:91:62:a4:0c:29:4f:40:f4:6e:30:
5b:92:ef:cc:4a:d8:d3:79:03:0e:07:66:5e:80:74:45:b8:40:
0b:e1:48:e3:a1:b2:e7:59:5f:78:3f:93:a6:11:ac:02:bf:83:
a7:5e:1e:18:13:0d:6b:33:1c:80:6d:66:5d:32:43:03:19:d2:
a8:e2:9c:1f:ce:8b:3c:e4:7b:bf:b5:9a:f2:8c:14:77:c3:3a:
9a:61:c5:fe:e2:5e:56:49:26:ff:ce:a0:a1:2f:f6:44:d9:f5:
1c:bc:15:be
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzEJUBhTzTPNFkllqGZ5/gpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDgzMDI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjVjNmRjZDlmZGJkMjRjMTZlNTBhZTE1NTFlZThmNDNhYzhiZmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArU2FXezBQfqoVqpVHNoxfGALBOAA
u4yZnMUDWQwYqdwwwXxgXIvrzTvpvTzgrW5QNEKCCP7Ryak8LjK2aT73pHkc3odk
cXNH9tnEdU/VfX2zwGcL8mGdb3bRAYs8JDFvYS1eIWlyDkBz7vM1jRCuKsfSBBsm
sI9arMMWpkFNkGziRdeNRITcFTTJoOX7603PYgl+wbVb8pswisu8HX8CRxmSv0nf
ZIl5wGIavvobVM+FJIYFV5A6QWfqYGb3fgpHcp8pvvrU82+iNzPcgxGsXHFtqLlP
ehNkzjZ7Vc+GzFVFWjPE3hf0FqRHDFrMawBkuXFTGkGnW1YR8a1VdUoLIQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFPZcbc2f29JMFuUK4VUe6PQ6yL/UMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IyLzY1YTkz
ZS0zM2VmLTQ3NjAtYmQ0ZS0xOTczNjM1MTY3YjIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjIvNjVhOTNl
LTMzZWYtNDc2MC1iZDRlLTE5NzM2MzUxNjdiMi8xLzlseHR6Wl9iMGt3VzVRcmhW
UjdvOURySXY5US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCLYXMMA0EAgACMAcDBQMqDnjAMA0GCSqGSIb3
DQEBCwUAA4IBAQB/q+o5+ZQxNh7J8Ltvd3AYdSxIRcBcpOXrZirUjGooHM4VlnVN
I/FVXl/5kKomse5S5YFjVFxkhgX2C1987GbCcs7xYkOYXEX2pY7E8P/JN+Yfq0pI
W5vOX3m+o/y51BDtlsUovTlFCE3weDes7rzeDb3ibR/mBQR1BcukhBGQaLPtyjvt
G4qcuckOnaI6vw9vlsT1urasr5FipAwpT0D0bjBbku/MStjTeQMOB2ZegHRFuEAL
4UjjobLnWV94P5OmEawCv4OnXh4YEw1rMxyAbWZdMkMDGdKo4pwfzos85Hu/tZry
jBR3wzqaYcX+4l5WSSb/zqChL/ZE2fUcvBW+
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:48:46 2024 by rpki-client on console-fra.rpki-client.org