Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ABULau1t1D10jXcDPP0BhGE27xQ.cer
File: ABULau1t1D10jXcDPP0BhGE27xQ.cer (raw, json)
Hash identifier: vhbfWOm9u81rav/tURQgAjJrq1KZFco1I1iXAO/ynzM=
Subject key identifier: 00:15:0B:6A:ED:6D:D4:3D:74:8D:77:03:3C:FD:01:84:61:36:EF:14
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B3AE3FCA42E8A664EF40E23EDAF1B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/68badc-43a3-41d7-889d-a6d7ed4aa836/1/ABULau1t1D10jXcDPP0BhGE27xQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/68badc-43a3-41d7-889d-a6d7ed4aa836/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:31:08 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 178.159.34.0/24
IP: 2a13:7f80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 08:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:3a:e3:fc:a4:2e:8a:66:4e:f4:0e:23:ed:af:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:31:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=00150b6aed6dd43d748d77033cfd01846136ef14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d2:0b:e2:20:c4:36:72:28:a2:b5:ba:22:f4:
c2:a0:d6:71:5a:a0:c3:b1:3b:15:ca:1a:5f:ce:35:
7d:d6:99:56:37:2d:bb:8d:7f:c8:2a:91:3d:75:f6:
9e:2f:28:63:88:41:75:6f:4a:37:93:4d:ac:85:53:
3d:ff:17:60:86:29:6e:e5:aa:82:17:a9:ff:4d:4f:
64:43:4c:8b:38:40:4b:6b:e3:de:1f:c7:db:56:a1:
d2:4c:0c:cf:ef:8c:44:04:0c:4b:3a:24:64:6f:57:
21:df:ed:98:c8:8c:c5:3d:8e:c5:1d:d5:dd:f4:69:
e9:bb:ba:c6:45:ec:76:f2:76:11:54:13:dc:c0:72:
9d:ad:7b:e9:ad:a2:20:d8:7c:63:91:a8:cf:e0:26:
a2:ba:ae:1a:ca:07:19:2e:2a:49:48:6d:d0:2e:52:
bf:cd:e3:35:09:72:3c:45:5b:52:4e:51:cc:d6:5e:
8c:4d:55:dd:a2:89:8c:46:f0:97:b4:3c:11:be:08:
59:06:f2:90:89:f2:c9:88:1b:2c:40:6a:75:b3:cd:
87:99:61:e6:d8:93:27:0d:6e:8f:e4:29:1d:eb:e8:
3c:53:d4:5f:ed:72:3a:82:e5:25:a3:a5:41:2d:46:
f5:b7:43:fe:1c:0a:0c:04:51:24:0b:58:77:ac:ec:
95:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:15:0B:6A:ED:6D:D4:3D:74:8D:77:03:3C:FD:01:84:61:36:EF:14
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/68badc-43a3-41d7-889d-a6d7ed4aa836/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/68badc-43a3-41d7-889d-a6d7ed4aa836/1/ABULau1t1D10jXcDPP0BhGE27xQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.159.34.0/24
IPv6:
2a13:7f80::/29
Signature Algorithm: sha256WithRSAEncryption
7a:e4:10:98:8b:24:59:5c:88:a3:63:72:bd:56:d9:fc:ea:6b:
e4:6b:20:1c:6f:ae:9b:d0:6f:1e:e2:65:3c:21:86:29:ac:81:
ba:64:a6:8f:61:8c:cc:a1:f5:0d:5b:14:80:e2:f2:f5:9d:3d:
2c:25:37:73:da:fc:e8:13:98:60:27:48:54:c2:f2:06:24:26:
aa:b0:0c:14:cc:4f:f0:34:1f:ef:7a:65:99:6b:53:1c:4d:d5:
15:4c:f8:4a:9b:a1:03:d0:be:25:c0:34:c7:f0:91:0e:67:45:
40:06:42:d4:0f:08:04:80:fd:4c:dc:47:d4:4b:81:f1:35:55:
67:00:0c:d5:d9:52:45:f2:45:f1:72:6e:be:2a:6f:9f:24:85:
b6:b2:21:11:54:8e:d2:b3:59:c1:55:5b:e3:d1:e3:95:9c:8a:
72:a3:1d:87:c5:be:ec:a2:30:e4:d9:14:d0:c0:c7:bb:48:b4:
fe:cc:ae:7a:c5:19:5d:54:9f:f1:92:6f:bf:cc:d8:de:37:d0:
97:cf:9c:ab:af:5d:f1:bb:fc:19:e4:fc:a7:03:1e:25:64:27:
55:e2:56:25:5c:f4:c4:08:09:97:46:a0:a8:c1:04:7b:37:07:
33:56:1b:e3:c2:be:d7:da:ec:4d:89:45:cb:26:2c:58:1b:6f:
59:52:94:9b
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzGSzrj/KQuimZO9A4j7a8bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTgzMTA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDE1MGI2YWVkNmRkNDNkNzQ4ZDc3MDMzY2ZkMDE4NDYxMzZlZjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstIL4iDENnIoorW6IvTCoNZxWqDD
sTsVyhpfzjV91plWNy27jX/IKpE9dfaeLyhjiEF1b0o3k02shVM9/xdghilu5aqC
F6n/TU9kQ0yLOEBLa+PeH8fbVqHSTAzP74xEBAxLOiRkb1ch3+2YyIzFPY7FHdXd
9Gnpu7rGRex28nYRVBPcwHKdrXvpraIg2HxjkajP4Caiuq4aygcZLipJSG3QLlK/
zeM1CXI8RVtSTlHM1l6MTVXdoomMRvCXtDwRvghZBvKQifLJiBssQGp1s82HmWHm
2JMnDW6P5Ckd6+g8U9Rf7XI6guUlo6VBLUb1t0P+HAoMBFEkC1h3rOyVQQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFAAVC2rtbdQ9dI13Azz9AYRhNu8UMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhlLzY4YmFk
Yy00M2EzLTQxZDctODg5ZC1hNmQ3ZWQ0YWE4MzYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGUvNjhiYWRj
LTQzYTMtNDFkNy04ODlkLWE2ZDdlZDRhYTgzNi8xL0FCVUxhdTF0MUQxMGpYY0RQ
UDBCaEdFMjd4US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAsp8iMA0EAgACMAcDBQMqE3+AMA0GCSqGSIb3
DQEBCwUAA4IBAQB65BCYiyRZXIijY3K9Vtn86mvkayAcb66b0G8e4mU8IYYprIG6
ZKaPYYzMofUNWxSA4vL1nT0sJTdz2vzoE5hgJ0hUwvIGJCaqsAwUzE/wNB/vemWZ
a1McTdUVTPhKm6ED0L4lwDTH8JEOZ0VABkLUDwgEgP1M3EfUS4HxNVVnAAzV2VJF
8kXxcm6+Km+fJIW2siERVI7Ss1nBVVvj0eOVnIpyox2Hxb7sojDk2RTQwMe7SLT+
zK56xRldVJ/xkm+/zNjeN9CXz5yrr13xu/wZ5PynAx4lZCdV4lYlXPTECAmXRqCo
wQR7NwczVhvjwr7X2uxNiUXLJixYG29ZUpSb
-----END CERTIFICATE-----
Generated at Thu Apr 25 12:21:14 2024 by rpki-client on console-ams.rpki-client.org