Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AcNSEY_V91RUz8Yb5hpCq-9NxPg.cer
File: AcNSEY_V91RUz8Yb5hpCq-9NxPg.cer (raw, json)
Hash identifier: Is9dxog946uORkw5fvgm5XQ2VgQ88Q/9qngsb0GG760=
Subject key identifier: 01:C3:52:11:8F:D5:F7:54:54:CF:C6:1B:E6:1A:42:AB:EF:4D:C4:F8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B6A5FAC39FC530B8800526268AD765
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.213.41.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 14:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:a5:fa:c3:9f:c5:30:b8:80:05:26:26:8a:d7:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=01c352118fd5f75454cfc61be61a42abef4dc4f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:72:bb:e2:a7:55:09:21:19:3a:f7:49:78:ed:
d1:ee:5b:5a:46:24:5f:f9:6c:38:c4:e7:20:2a:a5:
69:87:af:dd:d6:49:e8:36:ab:98:95:9b:58:ed:78:
e8:a6:87:75:8d:71:3b:27:f3:e2:6c:03:f3:77:ea:
bf:62:04:36:07:66:78:27:6d:51:8c:cb:41:d4:b5:
7e:42:56:a8:7d:ca:92:fc:3b:2b:a5:59:5e:40:ca:
63:51:1d:4f:1a:3a:27:9d:62:86:40:4a:80:f1:2a:
6c:74:fc:c0:09:b2:03:c4:10:00:fa:33:21:83:06:
9c:00:a7:29:62:fc:76:dc:b7:1f:3b:ba:74:4c:4b:
0f:fd:fa:b9:e6:77:72:63:54:95:c6:b3:fb:a4:79:
b4:10:88:36:35:f9:15:00:98:b8:b2:db:38:f0:57:
5b:aa:d6:f5:51:8c:27:1b:56:0b:4a:d9:52:73:d9:
ae:0f:8a:bd:bf:d1:a5:2b:9d:ff:47:12:4a:17:31:
3f:c6:f8:2f:0e:d0:36:6b:89:39:fe:2b:ec:e2:b0:
28:ae:e1:b5:5a:86:50:a6:db:36:f9:25:21:96:9b:
ac:57:9a:97:e0:7a:f5:d6:2d:b5:80:1a:32:f0:7b:
92:30:ce:d3:22:ba:53:e8:c7:72:f5:2d:70:19:66:
36:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C3:52:11:8F:D5:F7:54:54:CF:C6:1B:E6:1A:42:AB:EF:4D:C4:F8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.41.0/24
Signature Algorithm: sha256WithRSAEncryption
89:50:ca:b7:af:f7:4d:a0:97:39:cf:06:64:95:ea:ad:dc:13:
d9:04:6c:6f:8c:a6:dc:af:dc:cd:4f:eb:dd:ee:f0:62:d0:5a:
35:fe:00:a3:ae:a0:b5:aa:52:5c:32:45:7b:ed:3f:b1:2a:61:
98:29:41:e6:3c:03:0e:cb:c5:7f:84:4a:7a:71:87:e0:aa:05:
b5:09:4b:40:34:b6:0f:f8:fe:03:4d:ef:fc:c6:e0:bd:96:7c:
50:53:3a:71:17:18:c4:9c:98:5c:54:20:cf:6b:3c:ff:af:58:
77:69:46:1c:96:1b:4f:e3:7b:a3:6b:4e:d4:25:cf:85:56:87:
c1:a5:4a:50:c9:e5:a5:87:0c:9b:d0:65:01:cf:b6:4c:79:45:
5f:f5:85:6e:96:f0:17:f5:ea:24:c1:1b:11:df:33:96:e6:44:
67:3b:6a:1e:19:6a:d3:b5:70:af:7d:af:23:51:0c:ed:d1:02:
f9:64:f7:d2:ea:08:f9:9d:78:bb:c5:8c:75:98:b4:31:09:fb:
a6:ca:1d:0b:fc:a5:e6:d1:fc:f7:10:68:d6:23:3c:dc:6a:e8:
00:42:9c:14:07:0f:4a:d9:99:64:a6:18:39:0c:81:4f:e3:69:
38:64:08:ca:8d:aa:74:94:3f:ef:89:67:17:19:6c:81:8e:92:
79:8f:eb:a5
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzDtqX6w5/FMLiABSYmitdlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDYyOTM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMWMzNTIxMThmZDVmNzU0NTRjZmM2MWJlNjFhNDJhYmVmNGRjNGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nK74qdVCSEZOvdJeO3R7ltaRiRf
+Ww4xOcgKqVph6/d1knoNquYlZtY7Xjopod1jXE7J/PibAPzd+q/YgQ2B2Z4J21R
jMtB1LV+QlaofcqS/DsrpVleQMpjUR1PGjonnWKGQEqA8SpsdPzACbIDxBAA+jMh
gwacAKcpYvx23LcfO7p0TEsP/fq55ndyY1SVxrP7pHm0EIg2NfkVAJi4sts48Fdb
qtb1UYwnG1YLStlSc9muD4q9v9GlK53/RxJKFzE/xvgvDtA2a4k5/ivs4rAoruG1
WoZQpts2+SUhlpusV5qX4Hr11i21gBoy8HuSMM7TIrpT6Mdy9S1wGWY2RQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFAHDUhGP1fdUVM/GG+YaQqvvTcT4MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UyLzVlOGEy
YS00NTczLTQzNmItOTAyYS1lZjAxZTFkYzdkYWMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIvNWU4YTJh
LTQ1NzMtNDM2Yi05MDJhLWVmMDFlMWRjN2RhYy8xL0FjTlNFWV9WOTFSVXo4WWI1
aHBDcS05TnhQZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW9UpMA0GCSqGSIb3DQEBCwUAA4IBAQCJUMq3
r/dNoJc5zwZkleqt3BPZBGxvjKbcr9zNT+vd7vBi0Fo1/gCjrqC1qlJcMkV77T+x
KmGYKUHmPAMOy8V/hEp6cYfgqgW1CUtANLYP+P4DTe/8xuC9lnxQUzpxFxjEnJhc
VCDPazz/r1h3aUYclhtP43uja07UJc+FVofBpUpQyeWlhwyb0GUBz7ZMeUVf9YVu
lvAX9eokwRsR3zOW5kRnO2oeGWrTtXCvfa8jUQzt0QL5ZPfS6gj5nXi7xYx1mLQx
Cfumyh0L/KXm0fz3EGjWIzzcaugAQpwUBw9K2Zlkphg5DIFP42k4ZAjKjap0lD/v
iWcXGWyBjpJ5j+ul
-----END CERTIFICATE-----
Generated at Wed Apr 24 19:10:01 2024 by rpki-client on console-fra.rpki-client.org