Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
File: CNC8jFiQLIynu4aewuKDAvpFFek.cer (raw, json)
Hash identifier: 88xecNcsdhEx49mcNTRxdE2Hvxkdc6qmZx2I+SZVUts=
Subject key identifier: 08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56DF99ACA7A7A455B251F33B6150C73
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 134.96.0.0/16
IP: 192.76.145.0/24
IP: 192.109.115.0 -- 192.109.116.255
IP: 193.17.22.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 08:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:f9:9a:ca:7a:7a:45:5b:25:1f:33:b6:15:0c:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:2a:e6:15:70:d4:af:e1:1d:e1:e6:a3:da:cf:
10:95:e5:ca:f3:d2:f0:4c:d9:58:1c:43:92:30:d5:
9d:d7:52:6d:77:31:2d:ff:5d:87:bf:4a:8c:59:d3:
0f:33:b3:fe:61:a4:67:b9:1b:1e:92:d9:03:2f:73:
5b:80:63:8f:b7:51:ba:0b:d4:b2:73:92:04:c1:17:
48:51:3c:5a:0f:e9:5c:8e:5f:0e:ba:56:7a:70:53:
1c:03:3e:ee:a3:3a:f7:99:80:ae:7c:a2:cf:f7:ce:
21:0a:94:a8:8e:e3:97:46:01:71:47:09:c2:2b:54:
d3:ba:aa:81:59:08:dd:d2:a6:ee:83:4f:f0:07:d3:
5a:10:04:58:bb:ac:99:60:a6:d6:88:76:39:88:2c:
a5:72:1d:8c:81:5b:19:4f:79:db:18:38:82:0d:ca:
84:82:8d:20:20:08:76:48:2d:2b:f1:6f:7d:5f:65:
31:52:b8:56:23:16:67:f7:5e:6e:3f:ca:12:d8:20:
4f:31:54:cb:38:2b:a6:0b:e7:0e:25:f8:9b:07:c2:
0c:20:ff:9d:36:ce:41:fe:58:67:28:4e:03:61:b3:
d3:58:49:e7:ad:c4:fb:ed:68:65:fd:fb:5b:ae:be:
7b:c9:c6:2c:7e:d2:f3:c7:28:fb:73:0b:8f:3f:92:
42:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.96.0.0/16
192.76.145.0/24
192.109.115.0-192.109.116.255
193.17.22.0/24
Signature Algorithm: sha256WithRSAEncryption
29:44:8d:72:cd:76:f3:18:a6:96:17:87:74:1d:2a:56:60:ad:
f3:10:b3:54:d5:ce:9c:dc:49:26:72:17:82:d5:61:47:1f:ed:
7e:f8:b9:48:bf:f0:9f:03:d3:e5:93:73:f6:07:26:fa:52:00:
5a:65:ee:ba:c2:b4:cb:03:2e:ed:dd:22:64:a2:70:ad:28:28:
db:10:b9:c1:33:38:a5:0d:59:8a:5e:37:36:5f:de:f3:0e:2b:
05:ee:5c:d7:09:7d:c0:75:47:43:bd:0b:a6:77:da:22:db:28:
dc:b1:31:aa:f7:fb:c2:ca:00:f9:27:fb:3b:b9:4c:d8:13:6a:
d4:30:9c:a8:a8:e4:2b:34:91:fa:fc:9c:27:94:b3:84:0b:43:
6b:91:a1:c8:8f:b9:f4:15:8f:6e:1d:7a:03:f0:69:da:fa:c4:
5b:6a:ce:a4:c7:e1:e5:5e:b7:30:4b:aa:b9:7c:71:15:2d:19:
25:77:45:6c:9d:69:ac:4b:43:f5:e0:70:fc:28:f2:da:09:43:
3e:2d:e0:4f:75:f7:0f:2e:b9:a1:9a:0c:8f:ed:46:43:6c:54:
8c:62:b6:60:9e:a2:95:40:65:eb:bb:f7:12:15:0d:9f:1a:85:
28:d1:70:04:12:8c:22:28:32:81:c0:db:f4:b3:0b:26:6e:c9:
f6:c0:00:09
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgISAYzFbfmaynp6RVslHzO2FQxzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTQyOTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOGQwYmM4YzU4OTAyYzhjYTdiYjg2OWVjMmUyODMwMmZhNDUxNWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6irmFXDUr+Ed4eaj2s8QleXK89Lw
TNlYHEOSMNWd11JtdzEt/12Hv0qMWdMPM7P+YaRnuRsektkDL3NbgGOPt1G6C9Sy
c5IEwRdIUTxaD+lcjl8OulZ6cFMcAz7uozr3mYCufKLP984hCpSojuOXRgFxRwnC
K1TTuqqBWQjd0qbug0/wB9NaEARYu6yZYKbWiHY5iCylch2MgVsZT3nbGDiCDcqE
go0gIAh2SC0r8W99X2UxUrhWIxZn915uP8oS2CBPMVTLOCumC+cOJfibB8IMIP+d
Ns5B/lhnKE4DYbPTWEnnrcT77Whl/ftbrr57ycYsftLzxyj7cwuPP5JCXwIDAQAB
o4ICnTCCApkwHQYDVR0OBBYEFAjQvIxYkCyMp7uGnsLigwL6RRXpMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M0L2ZmNGE2
Ny01OWZjLTRmMDAtYTNhZC1iMzc1NGFmZTk1MjkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvZmY0YTY3
LTU5ZmMtNGYwMC1hM2FkLWIzNzU0YWZlOTUyOS8xL0NOQzhqRmlRTEl5bnU0YWV3
dUtEQXZwRkZlay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDgGCCsGAQUF
BwEHAQH/BCkwJzAlBAIAATAfAwMAhmADBADATJEwDAMEAMBtcwMEAMBtdAMEAMER
FjANBgkqhkiG9w0BAQsFAAOCAQEAKUSNcs128ximlheHdB0qVmCt8xCzVNXOnNxJ
JnIXgtVhRx/tfvi5SL/wnwPT5ZNz9gcm+lIAWmXuusK0ywMu7d0iZKJwrSgo2xC5
wTM4pQ1Zil43Nl/e8w4rBe5c1wl9wHVHQ70LpnfaItso3LExqvf7wsoA+Sf7O7lM
2BNq1DCcqKjkKzSR+vycJ5SzhAtDa5GhyI+59BWPbh16A/Bp2vrEW2rOpMfh5V63
MEuquXxxFS0ZJXdFbJ1prEtD9eBw/Cjy2glDPi3gT3X3Dy65oZoMj+1GQ2xUjGK2
YJ6ilUBl67v3EhUNnxqFKNFwBBKMIigygcDb9LMLJm7J9sAACQ==
-----END CERTIFICATE-----
Generated at Thu Apr 25 11:09:30 2024 by rpki-client on console-fra.rpki-client.org