Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BuSteIiwjKRTVje2CLt9whSmYk8.cer
File: BuSteIiwjKRTVje2CLt9whSmYk8.cer (raw, json)
Hash identifier: WZJiLsCqE4amergUm6U7b2VKGWsM/aosRzKQqPdnZq4=
Subject key identifier: 06:E4:AD:78:88:B0:8C:A4:53:56:37:B6:08:BB:7D:C2:14:A6:62:4F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B7DDFADE0562732C4E3F8E03ECCE3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/f517e4-b42e-4409-b1ff-092e26334026/1/BuSteIiwjKRTVje2CLt9whSmYk8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/f517e4-b42e-4409-b1ff-092e26334026/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:31:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 41172
AS: 57924
IP: 91.236.171.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:7d:df:ad:e0:56:27:32:c4:e3:f8:e0:3e:cc:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=06e4ad7888b08ca4535637b608bb7dc214a6624f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:20:09:c1:e0:09:63:7d:6b:66:b2:a6:9a:c4:
c4:ad:cf:28:8a:7a:09:40:53:69:04:87:68:9f:c0:
d0:08:f3:69:a2:0c:a3:5f:f6:ea:c0:77:c0:6d:b4:
c8:ac:4c:4e:82:fb:f5:43:ed:bd:50:64:e6:02:94:
8d:11:09:ff:07:23:57:68:04:2f:3c:85:d2:5d:ff:
03:55:19:8b:79:f5:e9:23:1b:3c:f3:cf:96:01:85:
1e:66:31:68:85:a9:6b:96:bc:d2:2a:60:74:bf:18:
1d:38:af:ae:43:62:d4:b3:0b:3c:d3:57:be:df:b2:
0a:da:26:78:00:84:36:00:26:78:83:c9:25:64:cc:
a6:4f:4a:71:c2:74:d5:19:10:3c:1d:c9:ec:55:89:
02:45:24:8b:e0:ff:f0:95:0f:75:ee:85:32:92:3c:
7a:69:96:c0:f0:ec:88:ec:dd:73:4a:2d:fb:dd:35:
3c:db:f6:50:bd:29:2c:8c:1d:7c:df:28:15:ab:88:
24:10:d3:5b:ba:45:29:9a:9b:dc:ad:cd:68:6e:36:
fa:83:07:fa:c9:bc:37:54:3b:02:57:3b:fe:ea:57:
1a:70:f7:6a:a2:f4:d1:ea:8e:19:2b:2e:f2:cb:38:
8a:5c:49:30:3d:c4:3e:0f:49:26:77:49:51:33:78:
c1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E4:AD:78:88:B0:8C:A4:53:56:37:B6:08:BB:7D:C2:14:A6:62:4F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f517e4-b42e-4409-b1ff-092e26334026/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f517e4-b42e-4409-b1ff-092e26334026/1/BuSteIiwjKRTVje2CLt9whSmYk8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.171.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41172
57924
Signature Algorithm: sha256WithRSAEncryption
97:ad:cd:9f:8d:2c:80:80:6c:8c:88:ad:c8:b7:93:79:3c:c3:
da:78:a3:4d:ed:49:b4:c8:8d:6c:93:56:77:dc:18:ca:1f:38:
36:19:a3:bf:5a:fe:a1:80:a9:9b:7a:47:ef:e4:3f:62:ee:a3:
e7:39:18:a2:c8:cd:dc:18:23:12:84:77:04:52:c5:3c:5e:69:
c7:22:9c:3d:88:21:ed:36:f1:0e:73:65:d4:70:3a:eb:2f:31:
d0:e0:40:0d:c4:fb:42:4f:12:68:2b:57:26:92:03:cc:97:bb:
f0:2a:42:20:56:40:fd:97:ff:bf:c0:db:13:e6:b2:31:ac:46:
e2:22:aa:07:55:3d:3a:e6:6e:8b:bf:21:70:4d:52:86:ff:88:
dd:7c:43:83:9c:09:b1:62:ca:65:fd:c5:86:0a:33:84:83:39:
03:09:59:7b:41:f5:b4:7f:49:50:d5:20:f7:45:74:f3:20:c3:
a0:2d:64:0a:5e:9b:c3:b2:10:da:d5:07:8b:4c:f6:2e:e9:34:
ff:3c:72:12:9c:67:c1:8e:ea:c3:fe:d9:79:36:f4:c1:93:42:
fb:58:ff:d1:1a:4e:56:00:b1:88:1b:45:e5:f0:08:46:03:bf:
f6:78:d7:aa:9f:75:a6:32:5d:04:1d:8d:80:66:7d:70:d7:96:
61:c9:df:b6
-----BEGIN CERTIFICATE-----
MIIFmTCCBIGgAwIBAgISAYzGS33freBWJzLE4/jgPszjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTgzMTI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNmU0YWQ3ODg4YjA4Y2E0NTM1NjM3YjYwOGJiN2RjMjE0YTY2MjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyAJweAJY31rZrKmmsTErc8oinoJ
QFNpBIdon8DQCPNpogyjX/bqwHfAbbTIrExOgvv1Q+29UGTmApSNEQn/ByNXaAQv
PIXSXf8DVRmLefXpIxs888+WAYUeZjFohalrlrzSKmB0vxgdOK+uQ2LUsws801e+
37IK2iZ4AIQ2ACZ4g8klZMymT0pxwnTVGRA8HcnsVYkCRSSL4P/wlQ917oUykjx6
aZbA8OyI7N1zSi373TU82/ZQvSksjB183ygVq4gkENNbukUpmpvcrc1objb6gwf6
ybw3VDsCVzv+6lcacPdqovTR6o4ZKy7yyziKXEkwPcQ+D0kmd0lRM3jBswIDAQAB
o4ICpTCCAqEwHQYDVR0OBBYEFAbkrXiIsIykU1Y3tgi7fcIUpmJPMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc4L2Y1MTdl
NC1iNDJlLTQ0MDktYjFmZi0wOTJlMjYzMzQwMjYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZjUxN2U0
LWI0MmUtNDQwOS1iMWZmLTA5MmUyNjMzNDAyNi8xL0J1U3RlSWl3aktSVFZqZTJD
THQ5d2hTbVlrOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW+yrMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoC
AwCg1AIDAOJEMA0GCSqGSIb3DQEBCwUAA4IBAQCXrc2fjSyAgGyMiK3It5N5PMPa
eKNN7Um0yI1sk1Z33BjKHzg2GaO/Wv6hgKmbekfv5D9i7qPnORiiyM3cGCMShHcE
UsU8XmnHIpw9iCHtNvEOc2XUcDrrLzHQ4EANxPtCTxJoK1cmkgPMl7vwKkIgVkD9
l/+/wNsT5rIxrEbiIqoHVT065m6LvyFwTVKG/4jdfEODnAmxYspl/cWGCjOEgzkD
CVl7QfW0f0lQ1SD3RXTzIMOgLWQKXpvDshDa1QeLTPYu6TT/PHISnGfBjurD/tl5
NvTBk0L7WP/RGk5WALGIG0Xl8AhGA7/2eNeqn3WmMl0EHY2AZn1w15Zhyd+2
-----END CERTIFICATE-----
Generated at Thu Apr 25 23:19:01 2024 by rpki-client on console-fra.rpki-client.org