Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.cer
File: B4Yp9fYfslVkKE-_7_uTw-1Ev-I.cer (raw, json)
Hash identifier: aK/MbFDMR4sELocJiSbcTLPvc3RydsFIskQoAAyDwUk=
Subject key identifier: 07:86:29:F5:F6:1F:B2:55:64:28:4F:BF:EF:FB:93:C3:ED:44:BF:E2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2BE3EB79C23B0B36C94616F9911657
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:35:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 50769
AS: 201978
AS: 208425
IP: 185.1.132.0/24
IP: 185.50.68.0/22
IP: 185.114.20.0/22
IP: 185.146.88.0/22
IP: 185.169.52.0/22
IP: 194.61.116.0/22
IP: 2001:7f8:ec::/48
IP: 2a01:a420::/29
IP: 2a0a:3900::/29
IP: 2a0f:d500::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:e3:eb:79:c2:3b:0b:36:c9:46:16:f9:91:16:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:35:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=078629f5f61fb25564284fbfeffb93c3ed44bfe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:68:c2:ef:56:48:bc:45:26:d3:ca:9f:2b:15:
95:af:53:ab:5c:dc:66:9e:c7:62:89:0f:73:5c:f2:
2b:85:ed:79:45:01:66:2e:59:14:f6:43:73:80:54:
2a:26:06:d1:fa:ab:43:cb:9f:d4:6a:cc:80:2f:00:
c0:ae:38:bd:88:ed:7e:dc:66:cd:bc:fd:47:76:00:
fc:f6:18:3e:43:d5:9f:13:05:59:01:de:0e:68:8c:
69:34:46:a4:79:c7:8b:a0:ef:52:4d:84:6b:16:5c:
bd:4f:85:89:c8:80:2d:6a:43:25:4d:a9:12:39:39:
a3:da:70:ed:ea:2e:3b:9b:6c:5e:15:02:39:c6:f5:
c5:e1:1a:d6:a2:6a:40:8e:65:0e:c1:b0:61:f4:af:
82:f1:b1:8f:15:f3:43:ac:78:df:d0:c8:a5:bb:e7:
e9:71:c3:48:22:fe:70:a8:61:73:5e:3d:2b:bd:d1:
ed:c3:8c:4b:a4:73:55:e1:a7:0e:3b:f2:62:b3:55:
bb:f5:5a:c0:58:13:9b:47:1f:a6:ab:e3:d3:29:6a:
a2:49:a8:d4:18:b9:fd:2e:72:9d:72:0d:ed:ac:37:
11:91:8d:36:8d:39:d9:f7:6f:3b:4e:76:74:1b:cf:
af:0c:f7:0d:23:9c:3d:75:32:f1:dd:86:05:ba:02:
49:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:86:29:F5:F6:1F:B2:55:64:28:4F:BF:EF:FB:93:C3:ED:44:BF:E2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.132.0/24
185.50.68.0/22
185.114.20.0/22
185.146.88.0/22
185.169.52.0/22
194.61.116.0/22
IPv6:
2001:7f8:ec::/48
2a01:a420::/29
2a0a:3900::/29
2a0f:d500::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50769
201978
208425
Signature Algorithm: sha256WithRSAEncryption
23:f3:ac:42:ed:f0:30:2b:44:71:95:ba:e3:20:11:fd:cc:c8:
09:23:f0:db:3b:07:99:68:a2:2e:1d:ec:2f:fe:d0:4e:4e:40:
76:78:6e:4e:c9:9c:c8:c0:e3:30:63:0a:55:dd:ef:3d:cd:6e:
42:53:57:5a:e8:40:60:cb:aa:b1:db:0d:59:66:e1:21:76:3d:
31:2a:97:c6:08:93:eb:22:ca:bb:80:72:90:30:6c:a7:a8:09:
40:59:ab:ef:56:c0:c7:96:84:f0:e4:05:84:01:b4:4d:38:b4:
e7:77:c0:80:b0:ce:46:c3:15:7e:da:2b:a6:07:94:8e:c3:19:
17:04:84:0b:c2:07:f9:c7:f6:da:4a:2b:75:6f:1d:80:cb:8e:
9c:87:75:3c:36:f6:a7:fd:68:4c:b3:d9:26:73:69:25:62:f6:
dd:b9:34:c8:4f:54:1d:2a:22:cd:a9:e2:e3:40:81:e4:fd:26:
3c:41:f5:78:27:aa:92:26:6f:4a:23:f3:22:de:cb:ae:ef:4d:
41:8f:5b:cf:80:59:b5:fa:3e:2c:bb:fd:51:5d:91:45:6e:31:
29:96:e9:d6:cb:83:80:59:59:c4:99:af:46:46:43:3b:dc:07:
f3:52:a9:db:50:7d:41:d5:36:31:fc:ec:55:8c:3e:3a:8d:f3:
d1:ba:9e:a4
-----BEGIN CERTIFICATE-----
MIIF4jCCBMqgAwIBAgISAYzKK+PrecI7CzbJRhb5kRZXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTIzNTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzg2MjlmNWY2MWZiMjU1NjQyODRmYmZlZmZiOTNjM2VkNDRiZmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGjC71ZIvEUm08qfKxWVr1OrXNxm
nsdiiQ9zXPIrhe15RQFmLlkU9kNzgFQqJgbR+qtDy5/UasyALwDArji9iO1+3GbN
vP1HdgD89hg+Q9WfEwVZAd4OaIxpNEakeceLoO9STYRrFly9T4WJyIAtakMlTakS
OTmj2nDt6i47m2xeFQI5xvXF4RrWompAjmUOwbBh9K+C8bGPFfNDrHjf0Milu+fp
ccNIIv5wqGFzXj0rvdHtw4xLpHNV4acOO/Jis1W79VrAWBObRx+mq+PTKWqiSajU
GLn9LnKdcg3trDcRkY02jTnZ9287TnZ0G8+vDPcNI5w9dTLx3YYFugJJNQIDAQAB
o4IC7jCCAuowHQYDVR0OBBYEFAeGKfX2H7JVZChPv+/7k8PtRL/iMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M3LzA2MThl
NC03YTY0LTQ2MGMtYWFmOS02M2FmMmM0ZjQwMjAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcvMDYxOGU0
LTdhNjQtNDYwYy1hYWY5LTYzYWYyYzRmNDAyMC8xL0I0WXA5Zllmc2xWa0tFLV83
X3VUdy0xRXYtSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGMGCCsGAQUF
BwEHAQH/BFQwUjAqBAIAATAkAwQAuQGEAwQCuTJEAwQCuXIUAwQCuZJYAwQCuak0
AwQCwj10MCQEAgACMB4DBwAgAQf4AOwDBQMqAaQgAwUDKgo5AAMFAyoP1QAwJAYI
KwYBBQUHAQgBAf8EFTAToBEwDwIDAMZRAgMDFPoCAwMuKTANBgkqhkiG9w0BAQsF
AAOCAQEAI/OsQu3wMCtEcZW64yAR/czICSPw2zsHmWiiLh3sL/7QTk5AdnhuTsmc
yMDjMGMKVd3vPc1uQlNXWuhAYMuqsdsNWWbhIXY9MSqXxgiT6yLKu4BykDBsp6gJ
QFmr71bAx5aE8OQFhAG0TTi053fAgLDORsMVftorpgeUjsMZFwSEC8IH+cf22kor
dW8dgMuOnId1PDb2p/1oTLPZJnNpJWL23bk0yE9UHSoizani40CB5P0mPEH1eCeq
kiZvSiPzIt7Lru9NQY9bz4BZtfo+LLv9UV2RRW4xKZbp1suDgFlZxJmvRkZDO9wH
81Kp21B9QdU2MfzsVYw+Oo3z0bqepA==
-----END CERTIFICATE-----
Generated at Fri Apr 19 22:51:51 2024 by rpki-client on console-fra.rpki-client.org