Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer
File: B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer (raw, json)
Hash identifier: gUGLhf0nEBGMWKtYQlh9roRSQb8b9PqWC61R8cKT7bY=
Subject key identifier: 07:81:EE:86:9D:2E:1C:20:0F:F8:C6:97:E2:D3:7E:AA:42:94:0A:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DAB3131C2D9254ED71D6D3D329C518
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 51075
IP: 193.168.219.0/24
IP: 2a10:f7c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:b3:13:1c:2d:92:54:ed:71:d6:d3:d3:29:c5:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0781ee869d2e1c200ff8c697e2d37eaa42940a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:0d:57:98:a9:be:1a:e9:1b:85:98:9f:a4:28:
23:ec:d8:da:7e:93:6f:a4:34:1c:08:40:fd:61:e4:
5b:d2:5e:44:f4:a9:45:df:c9:41:f4:ba:05:b2:2c:
b5:30:df:be:36:91:c7:74:7f:60:4f:7c:dd:3a:5e:
45:dd:2b:fb:7f:44:14:2c:f7:69:9a:97:0b:25:89:
45:39:85:83:56:54:a8:78:49:8d:0a:21:9e:09:ad:
f7:2c:62:37:d2:2c:74:22:53:8f:1b:e7:71:25:9c:
d1:03:aa:60:25:71:4e:55:8d:ef:c6:9f:47:74:58:
ef:b3:b4:38:7b:95:8e:01:29:23:14:2b:1c:d5:64:
c8:48:a4:bd:5f:65:b5:7e:2d:9c:85:ce:6b:0a:81:
6b:a9:f4:02:bb:5e:58:7e:54:e2:b7:c4:45:4a:e2:
51:6a:93:5f:cd:e2:ff:f2:f8:5c:bd:44:f1:54:3d:
3d:69:db:4d:b7:24:8e:2e:44:c3:83:34:96:0a:3e:
10:46:a6:a6:70:aa:17:8d:46:50:2c:8b:c7:01:39:
29:90:3a:fa:5a:f1:35:16:d4:8c:f6:fb:eb:e1:13:
78:71:22:88:34:7c:8b:d1:af:0c:44:31:30:2f:0e:
7c:78:a4:bb:14:93:3c:34:d4:7a:b1:1c:e3:1a:62:
2e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:81:EE:86:9D:2E:1C:20:0F:F8:C6:97:E2:D3:7E:AA:42:94:0A:36
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.219.0/24
IPv6:
2a10:f7c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51075
Signature Algorithm: sha256WithRSAEncryption
9f:42:2c:08:45:b6:9e:a8:26:11:88:b8:c5:8d:50:04:c6:2f:
61:07:23:6e:be:71:4c:03:4b:e7:94:7e:9a:e0:9e:c5:f2:5e:
72:6d:5b:e4:d4:41:01:b7:f2:f6:b9:aa:50:c5:ef:f2:62:e2:
e0:5a:42:27:3e:f4:1b:61:ed:77:87:28:d6:9f:1f:ac:e1:4c:
8c:85:81:fa:ca:78:a0:68:83:95:78:f5:71:d4:c2:24:af:cc:
e5:85:20:af:f1:1f:6d:c7:23:d6:43:95:4d:75:8a:82:03:b6:
c4:4f:82:ad:65:87:91:2a:09:40:0c:8d:93:65:6f:79:17:c3:
38:90:ce:26:14:79:33:5c:65:4a:37:58:80:56:a6:68:61:99:
35:70:07:05:48:1e:d2:61:64:d6:18:4f:8c:eb:a8:4b:c3:c4:
ed:bd:06:21:8d:f8:2e:5b:20:24:39:bc:e8:a9:0b:37:1f:e9:
54:f7:03:ed:16:26:72:e1:b6:c6:21:f5:54:ad:6b:23:a2:f5:
f3:f4:43:51:df:32:42:65:90:d8:c8:57:82:62:ed:a6:7d:18:
f6:27:46:30:c3:bf:98:33:28:b5:28:6f:a8:ae:c0:89:a3:87:
12:3f:4e:f8:45:b1:29:d2:d6:3e:7b:96:c9:44:ed:6f:ef:b2:
43:ed:40:2a
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzC2rMTHC2SVO1x1tPTKcUYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDIyOTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzgxZWU4NjlkMmUxYzIwMGZmOGM2OTdlMmQzN2VhYTQyOTQwYTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQ1XmKm+GukbhZifpCgj7NjafpNv
pDQcCED9YeRb0l5E9KlF38lB9LoFsiy1MN++NpHHdH9gT3zdOl5F3Sv7f0QULPdp
mpcLJYlFOYWDVlSoeEmNCiGeCa33LGI30ix0IlOPG+dxJZzRA6pgJXFOVY3vxp9H
dFjvs7Q4e5WOASkjFCsc1WTISKS9X2W1fi2chc5rCoFrqfQCu15YflTit8RFSuJR
apNfzeL/8vhcvUTxVD09adtNtySOLkTDgzSWCj4QRqamcKoXjUZQLIvHATkpkDr6
WvE1FtSM9vvr4RN4cSKINHyL0a8MRDEwLw58eKS7FJM8NNR6sRzjGmIuKQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFAeB7oadLhwgD/jGl+LTfqpClAo2MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMwLzU2NDVk
Mi03MjI0LTRkMTAtODJiZi0zZTc1MDUxYjhlYWMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAvNTY0NWQy
LTcyMjQtNGQxMC04MmJmLTNlNzUwNTFiOGVhYy8xL0I0SHVocDB1SENBUC1NYVg0
dE4tcWtLVUNqWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAwajbMA0EAgACMAcDBQMqEPfAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDHgzANBgkqhkiG9w0BAQsFAAOCAQEAn0IsCEW2nqgm
EYi4xY1QBMYvYQcjbr5xTANL55R+muCexfJecm1b5NRBAbfy9rmqUMXv8mLi4FpC
Jz70G2Htd4co1p8frOFMjIWB+sp4oGiDlXj1cdTCJK/M5YUgr/Efbccj1kOVTXWK
ggO2xE+CrWWHkSoJQAyNk2VveRfDOJDOJhR5M1xlSjdYgFamaGGZNXAHBUge0mFk
1hhPjOuoS8PE7b0GIY34LlsgJDm86KkLNx/pVPcD7RYmcuG2xiH1VK1rI6L18/RD
Ud8yQmWQ2MhXgmLtpn0Y9idGMMO/mDMotShvqK7AiaOHEj9O+EWxKdLWPnuWyUTt
b++yQ+1AKg==
-----END CERTIFICATE-----
Generated at Fri Apr 26 09:16:44 2024 by rpki-client on console-ams.rpki-client.org