Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer
File: A4r4Z5VBejWE1hY3UgmnLv7iRis.cer (raw, json)
Hash identifier: LS/YFcZPrpjZ2XTJMl9WKH7WzS0uHOJGVph/Xz3krFw=
Subject key identifier: 03:8A:F8:67:95:41:7A:35:84:D6:16:37:52:09:A7:2E:FE:E2:46:2B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B74704E4832FC31E126CB9EB8F5A2F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:30:17 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 51113
IP: 91.142.128.0/24
IP: 2001:67c:1c4::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Apr 2024 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:47:04:e4:83:2f:c3:1e:12:6c:b9:eb:8f:5a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=038af86795417a3584d616375209a72efee2462b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:75:a2:e8:82:de:ac:d7:7a:df:6d:3a:8e:d7:
66:cb:5d:bd:77:26:31:95:16:88:45:2f:07:ac:19:
8b:c8:07:d3:cc:b0:91:6f:98:54:c2:24:2d:a7:03:
b2:42:67:2b:5a:de:86:a4:94:e8:ab:07:e9:03:63:
8b:55:b5:72:aa:bf:27:00:0a:4c:a5:ac:06:01:1b:
6d:92:79:0f:f6:52:20:5a:51:05:fc:0c:f4:8f:c3:
3f:01:30:6a:65:6a:d5:e8:c2:3d:b0:ca:2d:87:e8:
30:ef:6a:fe:e7:00:69:e6:fa:85:f3:90:3d:f7:21:
d2:bc:05:7f:d2:c7:92:e6:3d:71:20:d4:54:1b:74:
8e:bb:c1:11:da:d0:d0:d9:58:37:a7:97:04:7c:8b:
9a:fc:59:c3:fb:19:73:72:e3:98:1d:84:f2:d6:93:
d3:0f:dc:eb:89:b7:e7:1c:fa:34:47:9b:87:b4:f4:
b0:d7:18:71:01:53:55:d1:e7:e9:b2:e9:1d:eb:cf:
18:64:10:49:72:b9:68:26:cf:84:aa:50:95:10:c1:
28:12:e6:0d:ef:01:e6:fd:c0:8f:7d:20:b8:3c:ed:
39:36:cd:46:ea:4e:6c:f4:bc:66:e2:19:43:de:d4:
1a:5b:74:87:85:d7:46:4a:f9:e0:cb:ef:57:79:b9:
9f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8A:F8:67:95:41:7A:35:84:D6:16:37:52:09:A7:2E:FE:E2:46:2B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.142.128.0/24
IPv6:
2001:67c:1c4::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51113
Signature Algorithm: sha256WithRSAEncryption
74:8e:68:87:57:dc:d1:aa:25:5d:d6:ce:19:1e:c2:1b:ae:85:
63:cb:a3:d1:5d:ca:ee:bd:1d:44:11:08:a8:01:f5:f7:89:2a:
b4:a8:25:a8:af:36:7e:dc:fa:39:d4:d6:5a:fa:49:b5:2f:96:
3b:0b:40:c1:72:7f:2a:89:dc:fc:45:3b:ff:e7:96:2b:1b:16:
14:bf:c6:56:9d:ca:76:56:6e:94:40:5b:48:47:04:02:db:98:
c5:91:25:61:c8:e4:bb:63:4d:00:7b:2b:10:16:3d:96:72:27:
6e:ec:c7:95:e8:6b:9e:84:96:0c:6d:5b:53:63:57:5e:9e:10:
1d:95:08:2c:41:93:91:13:4c:dc:e9:b1:a2:c2:dc:90:c1:0e:
14:a2:54:35:8b:1f:dc:49:37:60:d0:01:5a:7e:bb:a5:39:07:
fe:c1:e7:ca:02:81:d1:20:47:8e:2c:6f:04:37:23:af:74:84:
15:11:02:bb:9b:d0:ca:0e:4c:e6:ce:99:35:eb:10:88:c7:cd:
57:25:61:b8:f0:29:3d:eb:f1:b9:26:66:a6:8b:ab:6e:e6:7e:
b7:fc:a5:5b:41:51:1e:38:0a:3f:f6:eb:79:72:37:87:f6:3c:
98:1a:5c:97:9e:e1:be:49:59:b3:c8:3c:2a:93:c4:ff:0a:44:
2c:f6:ca:bf
-----BEGIN CERTIFICATE-----
MIIFpTCCBI2gAwIBAgISAYzDt0cE5IMvwx4SbLnrj1ovMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDYzMDE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzhhZjg2Nzk1NDE3YTM1ODRkNjE2Mzc1MjA5YTcyZWZlZTI0NjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXWi6ILerNd63206jtdmy129dyYx
lRaIRS8HrBmLyAfTzLCRb5hUwiQtpwOyQmcrWt6GpJToqwfpA2OLVbVyqr8nAApM
pawGARttknkP9lIgWlEF/Az0j8M/ATBqZWrV6MI9sMoth+gw72r+5wBp5vqF85A9
9yHSvAV/0seS5j1xINRUG3SOu8ER2tDQ2Vg3p5cEfIua/FnD+xlzcuOYHYTy1pPT
D9zribfnHPo0R5uHtPSw1xhxAVNV0efpsukd688YZBBJcrloJs+EqlCVEMEoEuYN
7wHm/cCPfSC4PO05Ns1G6k5s9Lxm4hlD3tQaW3SHhddGSvngy+9XebmfQwIDAQAB
o4ICsTCCAq0wHQYDVR0OBBYEFAOK+GeVQXo1hNYWN1IJpy7+4kYrMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdiLzU3ZTQx
OS00MmY0LTRkOGMtYjZiNC00MzFmMjdhNjJlZDgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvNTdlNDE5
LTQyZjQtNGQ4Yy1iNmI0LTQzMWYyN2E2MmVkOC8xL0E0cjRaNVZCZWpXRTFoWTNV
Z21uTHY3aVJpcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF
BwEHAQH/BCEwHzAMBAIAATAGAwQAW46AMA8EAgACMAkDBwAgAQZ8AcQwGgYIKwYB
BQUHAQgBAf8ECzAJoAcwBQIDAMepMA0GCSqGSIb3DQEBCwUAA4IBAQB0jmiHV9zR
qiVd1s4ZHsIbroVjy6PRXcruvR1EEQioAfX3iSq0qCWorzZ+3Po51NZa+km1L5Y7
C0DBcn8qidz8RTv/55YrGxYUv8ZWncp2Vm6UQFtIRwQC25jFkSVhyOS7Y00AeysQ
Fj2Wcidu7MeV6GuehJYMbVtTY1denhAdlQgsQZORE0zc6bGiwtyQwQ4UolQ1ix/c
STdg0AFafrulOQf+wefKAoHRIEeOLG8ENyOvdIQVEQK7m9DKDkzmzpk16xCIx81X
JWG48Ck96/G5Jmami6tu5n63/KVbQVEeOAo/9ut5cjeH9jyYGlyXnuG+SVmzyDwq
k8T/CkQs9sq/
-----END CERTIFICATE-----
Generated at Thu Apr 18 12:42:38 2024 by rpki-client on console-fra.rpki-client.org