Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer
File: 9pRmi6ds9VDEE5wXMAFgB33OoFk.cer (raw, json)
Hash identifier: EX7l+6NivLvS46tN0HMvA2X02tzMQqsXBo2czk6yYvw=
Subject key identifier: F6:94:66:8B:A7:6C:F5:50:C4:13:9C:17:30:01:60:07:7D:CE:A0:59
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC801EB92687427E98E3CB9E2872F4621
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:30:18 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 35234
IP: 89.35.39.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 00:45:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:eb:92:68:74:27:e9:8e:3c:b9:e2:87:2f:46:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f694668ba76cf550c4139c17300160077dcea059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8c:83:24:b4:2f:99:18:3c:e8:45:db:68:77:
89:bf:70:15:f7:30:c5:fa:09:f5:8f:34:8b:c4:50:
cd:7f:1d:fe:b8:da:22:42:5c:96:84:46:8e:9b:69:
36:5a:5f:5a:c7:5c:10:50:26:50:5c:67:8d:d8:5d:
6b:2f:1d:76:99:bf:18:ef:a7:5e:8a:a7:f4:50:f4:
78:9c:1f:37:88:d5:54:a2:7c:a2:eb:d1:2a:14:39:
57:2a:c9:ab:c3:25:61:43:b4:f6:d2:3c:49:9d:64:
1a:69:98:87:44:a9:64:b9:41:2c:42:f6:ae:78:1e:
f3:0e:ec:6e:60:a7:6b:49:a8:1a:cf:15:f7:ee:ca:
a2:84:37:0b:4b:3c:19:2c:04:cd:69:9b:1b:e2:2c:
81:d8:21:ad:83:41:ed:52:4b:d7:dd:81:de:58:a5:
5b:c8:20:56:ce:da:df:ab:b4:47:0b:0e:06:62:60:
36:f8:61:14:ed:e5:a1:ef:a9:ce:d1:46:fa:30:0e:
30:0f:00:39:e1:d4:95:00:a1:ce:58:a5:75:87:6d:
37:08:de:44:0b:5c:d6:d8:71:45:40:ed:eb:b2:ad:
86:0f:0a:03:0b:3a:df:ce:d7:37:99:da:80:c1:57:
a1:65:39:67:07:3f:85:ff:74:50:81:10:53:3e:88:
f6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:94:66:8B:A7:6C:F5:50:C4:13:9C:17:30:01:60:07:7D:CE:A0:59
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.39.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35234
Signature Algorithm: sha256WithRSAEncryption
25:3a:95:34:35:33:46:d7:92:c1:b0:7e:59:44:68:9f:b5:5b:
5f:4e:5c:1a:ca:ee:5c:3b:1a:17:c2:98:1b:29:65:bc:91:6a:
81:d2:80:65:42:c3:29:54:10:eb:28:0c:ed:67:2a:4e:24:eb:
07:86:c9:d1:c3:45:42:b2:42:f2:cd:13:69:0e:8e:2b:3f:a8:
b5:f9:5b:fe:6a:99:28:24:d4:64:56:2e:ee:24:22:71:bd:77:
7b:88:1b:68:7b:96:c9:1b:c5:84:02:71:95:54:40:ca:6c:04:
2c:ca:92:35:aa:9f:65:7e:2a:76:c4:9d:fb:59:2e:0e:60:c0:
0d:f3:a4:91:df:58:26:9b:28:35:ae:d7:7b:0b:e0:f1:b2:9a:
2e:d3:02:a0:55:6e:a6:34:32:3d:71:c9:37:f4:aa:88:9b:f1:
df:bf:bb:a0:71:f4:77:6b:77:fe:ae:18:56:1c:ab:f5:b2:ef:
53:7a:66:c7:b2:37:e6:3f:95:aa:bf:10:02:7d:43:d0:cb:2c:
48:17:89:6f:78:48:59:78:7f:66:10:05:4b:c9:85:b3:c5:73:
34:ca:53:38:65:43:0e:3e:bf:bc:2d:e7:68:f0:e5:45:96:39:
d0:b1:54:7d:e4:41:f0:0a:52:3a:23:d4:7b:c2:ac:30:71:25:
80:0f:04:ce
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYzIAeuSaHQn6Y48ueKHL0YhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDIzMDE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjk0NjY4YmE3NmNmNTUwYzQxMzljMTczMDAxNjAwNzdkY2VhMDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4yDJLQvmRg86EXbaHeJv3AV9zDF
+gn1jzSLxFDNfx3+uNoiQlyWhEaOm2k2Wl9ax1wQUCZQXGeN2F1rLx12mb8Y76de
iqf0UPR4nB83iNVUonyi69EqFDlXKsmrwyVhQ7T20jxJnWQaaZiHRKlkuUEsQvau
eB7zDuxuYKdrSagazxX37sqihDcLSzwZLATNaZsb4iyB2CGtg0HtUkvX3YHeWKVb
yCBWztrfq7RHCw4GYmA2+GEU7eWh76nO0Ub6MA4wDwA54dSVAKHOWKV1h203CN5E
C1zW2HFFQO3rsq2GDwoDCzrfztc3mdqAwVehZTlnBz+F/3RQgRBTPoj26wIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFPaUZounbPVQxBOcFzABYAd9zqBZMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MxLzZlMDMx
Ni1mNGI5LTRmODktYThhMS03ZTUwOTEzYWMwMWQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzEvNmUwMzE2
LWY0YjktNGY4OS1hOGExLTdlNTA5MTNhYzAxZC8xLzlwUm1pNmRzOVZERUU1d1hN
QUZnQjMzT29Gay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAWSMnMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwCJojANBgkqhkiG9w0BAQsFAAOCAQEAJTqVNDUzRteSwbB+WURon7VbX05cGsru
XDsaF8KYGyllvJFqgdKAZULDKVQQ6ygM7WcqTiTrB4bJ0cNFQrJC8s0TaQ6OKz+o
tflb/mqZKCTUZFYu7iQicb13e4gbaHuWyRvFhAJxlVRAymwELMqSNaqfZX4qdsSd
+1kuDmDADfOkkd9YJpsoNa7Xewvg8bKaLtMCoFVupjQyPXHJN/SqiJvx37+7oHH0
d2t3/q4YVhyr9bLvU3pmx7I35j+Vqr8QAn1D0MssSBeJb3hIWXh/ZhAFS8mFs8Vz
NMpTOGVDDj6/vC3naPDlRZY50LFUfeRB8ApSOiPUe8KsMHElgA8Ezg==
-----END CERTIFICATE-----
Generated at Sat Apr 20 03:41:52 2024 by rpki-client on console-ams.rpki-client.org