Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
File: CncZY0DSFEuMp7B3iYS7BLwcs3g.cer (raw, json)
Hash identifier: sB5zyuzpznJUPAaAZeV6ulv5CG+IG3O1MTkuYxpdVQg=
Subject key identifier: 0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC349156BF0C42A19BD0AC0AE47274AA2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 21140
IP: 185.212.88.0/22
IP: 2a0b:7540::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:15:6b:f0:c4:2a:19:bd:0a:c0:ae:47:27:4a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:46:63:54:c7:24:a2:0f:a5:f1:3f:ab:46:c9:
a3:1a:63:1a:70:58:e0:55:5a:c9:8b:24:a3:75:08:
b3:2a:2a:03:2a:67:9d:d4:76:5f:47:1c:bf:d8:7f:
77:93:5d:56:bb:c7:f7:5f:50:39:54:1d:12:e6:73:
cb:a1:d2:dc:ee:36:23:f7:e4:85:2a:73:71:b4:62:
b2:ce:1c:aa:83:3c:f2:82:bf:20:17:21:c8:6e:ea:
dd:c0:ab:12:d3:8a:e3:60:2a:34:63:80:85:93:ed:
40:5f:ec:f8:2e:1d:da:06:cb:6a:c2:63:44:34:6e:
b3:74:6b:3a:e3:f5:08:d0:af:00:66:08:bc:97:6d:
17:32:bb:a9:c9:82:54:f9:72:f1:a7:30:53:3b:b2:
6e:f3:5e:b9:fd:47:c6:25:64:2b:90:ed:02:5f:47:
77:0b:73:57:4b:34:9d:59:ac:32:84:0a:c6:4c:cb:
65:25:14:59:5e:fe:34:da:33:84:a4:09:4b:9c:84:
53:fc:26:84:38:e4:58:ea:fe:5f:f0:c4:2c:c6:35:
43:95:88:41:42:ac:22:5f:f5:a4:37:16:7d:3b:94:
bf:c4:89:5d:d8:be:fd:51:9c:28:7a:a9:2c:82:f4:
0f:ab:4d:29:06:fe:4d:5d:9f:1b:6e:4b:ac:d3:2e:
5b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.88.0/22
IPv6:
2a0b:7540::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21140
Signature Algorithm: sha256WithRSAEncryption
16:3c:14:71:1f:b0:5d:97:fa:4a:20:4e:20:2a:a9:30:e8:a4:
24:8f:23:51:14:d4:cd:1d:9b:24:92:2c:26:7b:ef:72:36:58:
09:b3:3a:56:93:c6:bb:b3:a5:d0:e5:30:18:ae:bd:e5:26:6b:
5b:52:44:d5:29:b5:02:47:6b:3e:2e:1b:4c:14:a4:ca:b2:ef:
82:c5:7b:9d:a1:50:64:99:90:0c:23:c0:9a:86:24:c1:0f:ab:
1f:ae:f9:7f:38:86:51:e6:58:9e:f8:9a:22:45:fd:1a:b5:70:
de:d0:47:27:75:c8:a7:68:e1:60:bd:73:84:8a:92:bc:20:ed:
1f:79:19:c6:c9:f9:f8:1a:25:c2:54:af:87:ac:0a:64:33:b7:
44:a0:13:56:ee:1d:08:74:46:64:d4:a4:ed:4e:0d:56:40:5f:
64:c7:e1:70:3f:00:9b:8f:28:8d:f1:bf:a4:2b:0a:f6:12:68:
fd:c3:aa:76:31:fa:39:1d:1f:09:25:52:e4:31:b8:20:db:0f:
cc:b4:99:be:b3:0b:21:c7:c8:5a:c8:6b:58:b4:a7:fa:54:74:
92:64:38:b7:1b:f3:7c:83:5c:03:3d:ca:53:a1:41:1c:53:30:
63:0d:0a:5f:2b:e0:6b:4b:37:8d:c3:a1:06:96:05:67:4f:51:
1c:1a:b4:79
-----BEGIN CERTIFICATE-----
MIIFojCCBIqgAwIBAgISAYzDSRVr8MQqGb0KwK5HJ0qiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDQyOTU1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTc3MTk2MzQwZDIxNDRiOGNhN2IwNzc4OTg0YmIwNGJjMWNiMzc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UZjVMckog+l8T+rRsmjGmMacFjg
VVrJiySjdQizKioDKmed1HZfRxy/2H93k11Wu8f3X1A5VB0S5nPLodLc7jYj9+SF
KnNxtGKyzhyqgzzygr8gFyHIburdwKsS04rjYCo0Y4CFk+1AX+z4Lh3aBstqwmNE
NG6zdGs64/UI0K8AZgi8l20XMrupyYJU+XLxpzBTO7Ju8165/UfGJWQrkO0CX0d3
C3NXSzSdWawyhArGTMtlJRRZXv402jOEpAlLnIRT/CaEOORY6v5f8MQsxjVDlYhB
QqwiX/WkNxZ9O5S/xIld2L79UZwoeqksgvQPq00pBv5NXZ8bbkus0y5bNQIDAQAB
o4ICrjCCAqowHQYDVR0OBBYEFAp3GWNA0hRLjKewd4mEuwS8HLN4MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRlLzQ5ODli
YS05YWYzLTRlM2QtODQ1ZC1lYjk3NzE2NGE3ZTQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvNDk4OWJh
LTlhZjMtNGUzZC04NDVkLWViOTc3MTY0YTdlNC8xL0NuY1pZMERTRkV1TXA3QjNp
WVM3Qkx3Y3MzZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCudRYMA0EAgACMAcDBQMqC3VAMBkGCCsGAQUF
BwEIAQH/BAowCKAGMAQCAlKUMA0GCSqGSIb3DQEBCwUAA4IBAQAWPBRxH7Bdl/pK
IE4gKqkw6KQkjyNRFNTNHZskkiwme+9yNlgJszpWk8a7s6XQ5TAYrr3lJmtbUkTV
KbUCR2s+LhtMFKTKsu+CxXudoVBkmZAMI8CahiTBD6sfrvl/OIZR5lie+JoiRf0a
tXDe0EcndcinaOFgvXOEipK8IO0feRnGyfn4GiXCVK+HrApkM7dEoBNW7h0IdEZk
1KTtTg1WQF9kx+FwPwCbjyiN8b+kKwr2Emj9w6p2Mfo5HR8JJVLkMbgg2w/MtJm+
swshx8hayGtYtKf6VHSSZDi3G/N8g1wDPcpToUEcUzBjDQpfK+BrSzeNw6EGlgVn
T1EcGrR5
-----END CERTIFICATE-----
Generated at Sat Apr 20 02:33:20 2024 by rpki-client on console-fra.rpki-client.org