Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
File: Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer (raw, json)
Hash identifier: CtQvgmVgb+yPWf0LC3XK/xpSFMqyCWobW+2maYSERxk=
Subject key identifier: 0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3488C58C24AC2CE26B2F9B828934589
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:20 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.132.240.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:8c:58:c2:4a:c2:ce:26:b2:f9:b8:28:93:45:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0adcf62c6b5411139a5d1309dd9ed926f4314320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f3:70:60:86:c0:79:9f:5c:86:cf:a6:bd:67:
f5:de:49:ad:ae:62:b9:fd:c0:16:aa:76:3c:4a:67:
12:a9:d7:8f:3b:5a:90:13:b1:2e:3a:95:da:b4:7c:
1b:2c:a1:eb:e5:1c:ec:92:5c:72:f9:5e:41:21:19:
d2:55:dc:d5:a6:90:6b:77:49:57:ae:c1:eb:4e:33:
1e:f1:90:30:47:17:c5:ee:20:c5:7c:ae:b9:85:c1:
46:66:77:ec:a8:8e:c6:d2:a7:61:1d:38:bc:58:94:
fc:8c:29:b5:30:26:42:da:48:13:d6:ff:3a:56:a3:
c4:f9:15:7f:ac:92:b0:80:6c:81:1b:9d:93:f7:b9:
24:8f:d7:3b:0e:02:d3:72:b1:d5:dd:ac:1b:c9:50:
b7:04:19:6b:84:01:2f:cc:2d:12:ca:a7:47:b4:45:
3c:65:8a:ad:42:af:73:79:f4:36:fc:b9:b0:94:c0:
29:0c:69:4e:0a:d3:af:bb:f8:49:8d:a4:ee:60:1f:
15:c8:97:84:ef:3c:3a:1a:14:ed:fa:25:c6:08:e1:
2a:0b:39:56:e0:26:ca:16:16:47:78:1a:f0:b8:d0:
1c:48:75:aa:a1:f1:27:78:c3:e4:ac:c5:8e:d0:1d:
75:46:b9:f8:da:02:f9:19:d4:ef:c1:b2:2e:47:85:
d2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.240.0/22
Signature Algorithm: sha256WithRSAEncryption
60:ea:70:f2:a2:bb:f5:d0:20:e5:78:7e:12:f6:6c:7a:e5:c2:
cc:05:42:25:c5:86:21:b8:c1:19:09:ff:78:28:27:ee:9f:f4:
dc:91:97:8c:0c:54:87:df:43:b5:59:c5:31:59:b3:05:92:95:
dd:5f:3e:39:0a:89:0d:0e:b6:c1:62:c6:db:9e:74:19:fa:0c:
74:49:47:b9:a1:bd:92:ab:2c:71:46:0b:02:74:2c:00:47:83:
2a:e0:39:f6:4c:98:81:98:23:c4:7b:d7:37:b3:07:76:42:9c:
46:64:9c:73:20:b0:62:bf:6d:1d:1d:65:74:d9:5e:67:26:da:
27:a4:51:b8:f3:dc:5c:8a:ea:2b:46:f6:17:f6:91:36:29:15:
0a:03:08:c4:4c:53:6a:03:bc:9a:0e:48:5d:82:9a:55:4b:ee:
49:22:f5:04:43:26:27:6f:8d:ad:0e:2b:13:5b:bb:e0:c7:3e:
75:80:ba:a4:46:9a:7f:8c:68:28:46:89:ac:6f:1c:40:62:f2:
91:5a:cc:b7:03:10:20:e9:5d:62:cf:57:d7:5a:4c:85:4c:ac:
62:d0:33:39:3a:5c:82:45:50:6f:91:aa:f2:3d:99:f1:0a:83:
28:06:9b:70:36:b1:9c:f2:ed:66:e4:62:b2:cb:6e:80:2f:19:
40:97:74:ac
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzDSIxYwkrCziay+bgok0WJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDQyOTIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYWRjZjYyYzZiNTQxMTEzOWE1ZDEzMDlkZDllZDkyNmY0MzE0MzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfNwYIbAeZ9chs+mvWf13kmtrmK5
/cAWqnY8SmcSqdePO1qQE7EuOpXatHwbLKHr5Rzsklxy+V5BIRnSVdzVppBrd0lX
rsHrTjMe8ZAwRxfF7iDFfK65hcFGZnfsqI7G0qdhHTi8WJT8jCm1MCZC2kgT1v86
VqPE+RV/rJKwgGyBG52T97kkj9c7DgLTcrHV3awbyVC3BBlrhAEvzC0SyqdHtEU8
ZYqtQq9zefQ2/LmwlMApDGlOCtOvu/hJjaTuYB8VyJeE7zw6GhTt+iXGCOEqCzlW
4CbKFhZHeBrwuNAcSHWqofEneMPkrMWO0B11Rrn42gL5GdTvwbIuR4XSPQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFArc9ixrVBETml0TCd2e2Sb0MUMgMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ0L2NjODQz
ZS02MGM3LTQ3YWMtODIzYi1mOGQ2YmQzMGNjMTkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvY2M4NDNl
LTYwYzctNDdhYy04MjNiLWY4ZDZiZDMwY2MxOS8xL0N0ejJMR3RVRVJPYVhSTUoz
WjdaSnZReFF5QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCW4TwMA0GCSqGSIb3DQEBCwUAA4IBAQBg6nDy
orv10CDleH4S9mx65cLMBUIlxYYhuMEZCf94KCfun/TckZeMDFSH30O1WcUxWbMF
kpXdXz45CokNDrbBYsbbnnQZ+gx0SUe5ob2SqyxxRgsCdCwAR4Mq4Dn2TJiBmCPE
e9c3swd2QpxGZJxzILBiv20dHWV02V5nJtonpFG489xciuorRvYX9pE2KRUKAwjE
TFNqA7yaDkhdgppVS+5JIvUEQyYnb42tDisTW7vgxz51gLqkRpp/jGgoRomsbxxA
YvKRWsy3AxAg6V1iz1fXWkyFTKxi0DM5OlyCRVBvkaryPZnxCoMoBptwNrGc8u1m
5GKyy26ALxlAl3Ss
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:25:29 2024 by rpki-client on console-ams.rpki-client.org