Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.cer
File: Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.cer (raw, json)
Hash identifier: cBK+evzYS3M9IxP7kDy21rNEKonDSV2ewmR57OKBsMA=
Subject key identifier: 0B:2E:D2:47:03:D3:34:B1:1C:D2:2E:E4:89:FC:3C:64:BD:C0:6F:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94CB893D8C5C14469E18632733B1CA2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:31:37 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 178.212.75.0/24
IP: 2a11:e980::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:b8:93:d8:c5:c1:44:69:e1:86:32:73:3b:1c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:31:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b2ed24703d334b11cd22ee489fc3c64bdc06f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ed:19:7e:d7:fc:fd:2a:09:aa:2f:04:b8:1b:
8e:c4:59:40:fd:42:cb:0f:ad:96:66:7e:92:34:76:
f8:8c:a9:ea:3f:eb:18:1d:fd:d4:18:95:9f:78:fa:
a1:3c:08:2b:f2:7e:ae:85:25:78:48:3e:4e:a6:ad:
71:f2:a2:26:e0:fe:25:e4:c0:9a:11:83:e3:77:c5:
a2:47:9e:1b:44:2c:cf:12:04:3d:7a:7e:93:7c:24:
4d:91:ed:e1:c6:eb:31:c1:fa:68:66:01:cc:8a:69:
69:cb:9c:09:56:85:7f:bc:a3:e0:6d:63:32:0d:f5:
8e:c0:92:5c:da:58:4d:89:0a:56:4f:7e:30:05:d0:
61:4e:8a:c6:f3:bb:a8:94:8d:a1:e7:7d:f2:bd:48:
05:89:6a:93:e8:92:1e:8a:82:36:03:01:4f:2f:0f:
74:7c:56:a5:37:45:5e:3a:97:00:73:1e:29:29:46:
cc:52:d4:d6:93:d9:b1:20:46:1b:64:b8:10:96:e4:
3d:b0:01:93:86:d2:83:09:68:81:10:d1:b1:4a:2c:
2e:c9:79:17:f1:ef:1d:e3:41:29:41:51:28:b4:df:
fc:a3:02:06:48:33:68:f9:a5:4c:fd:6c:7d:08:bc:
3f:31:0e:e6:b8:1c:32:d8:f3:78:7f:25:49:69:b4:
b9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2E:D2:47:03:D3:34:B1:1C:D2:2E:E4:89:FC:3C:64:BD:C0:6F:4B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.75.0/24
IPv6:
2a11:e980::/29
Signature Algorithm: sha256WithRSAEncryption
1a:08:0a:38:82:29:1c:72:91:07:96:c2:1a:f4:0e:52:47:f7:
14:18:8d:80:dc:18:e3:3d:af:46:63:43:0e:c7:7c:92:27:55:
c7:47:1e:60:6e:90:af:b4:ac:8d:bd:8c:32:9a:a4:cb:f3:d9:
9e:aa:8e:ac:65:4d:48:1c:6b:ba:aa:c5:8d:65:d4:f9:65:27:
6e:13:97:d6:98:0a:10:17:dc:c3:66:ef:bc:2a:f2:30:c3:47:
05:db:d6:a9:c1:14:4c:30:10:81:7e:53:d7:03:3b:4b:6d:a2:
89:7b:9b:dd:62:5b:55:27:df:43:b0:01:3a:c3:80:e4:cc:92:
2f:40:51:b7:9d:55:83:ed:01:43:81:8a:0a:d3:14:a3:21:50:
a4:a9:22:81:b8:1d:49:bd:ee:e6:1e:96:92:4b:0c:be:5d:da:
b8:ab:02:b0:72:96:54:ed:02:ff:58:63:37:22:eb:f6:69:ef:
0e:cf:31:94:5a:ac:89:9a:02:f9:24:e3:b6:88:23:f6:7a:22:
1c:60:0a:82:2f:d1:05:86:ff:b4:ea:57:15:8c:9b:36:50:2f:
04:9a:96:93:12:6e:af:0f:3a:6e:de:12:43:f9:94:3b:09:31:
e3:99:ad:2e:2f:02:4b:49:9c:a0:af:e4:67:43:43:b7:94:a8:
d5:02:fa:ea
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzJTLiT2MXBRGnhhjJzOxyiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDgzMTM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjJlZDI0NzAzZDMzNGIxMWNkMjJlZTQ4OWZjM2M2NGJkYzA2ZjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtO0Zftf8/SoJqi8EuBuOxFlA/ULL
D62WZn6SNHb4jKnqP+sYHf3UGJWfePqhPAgr8n6uhSV4SD5Opq1x8qIm4P4l5MCa
EYPjd8WiR54bRCzPEgQ9en6TfCRNke3hxusxwfpoZgHMimlpy5wJVoV/vKPgbWMy
DfWOwJJc2lhNiQpWT34wBdBhTorG87uolI2h533yvUgFiWqT6JIeioI2AwFPLw90
fFalN0VeOpcAcx4pKUbMUtTWk9mxIEYbZLgQluQ9sAGThtKDCWiBENGxSiwuyXkX
8e8d40EpQVEotN/8owIGSDNo+aVM/Wx9CLw/MQ7muBwy2PN4fyVJabS5IQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFAsu0kcD0zSxHNIu5In8PGS9wG9LMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk1LzcxNzBl
MC1hMDQzLTRiNzgtYWFiMS1iNjQ4OGFlYzUzM2IvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTUvNzE3MGUw
LWEwNDMtNGI3OC1hYWIxLWI2NDg4YWVjNTMzYi8xL0N5N1NSd1BUTkxFYzBpN2tp
Znc4WkwzQWIwcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAstRLMA0EAgACMAcDBQMqEemAMA0GCSqGSIb3
DQEBCwUAA4IBAQAaCAo4gikccpEHlsIa9A5SR/cUGI2A3BjjPa9GY0MOx3ySJ1XH
Rx5gbpCvtKyNvYwymqTL89meqo6sZU1IHGu6qsWNZdT5ZSduE5fWmAoQF9zDZu+8
KvIww0cF29apwRRMMBCBflPXAztLbaKJe5vdYltVJ99DsAE6w4DkzJIvQFG3nVWD
7QFDgYoK0xSjIVCkqSKBuB1Jve7mHpaSSwy+Xdq4qwKwcpZU7QL/WGM3Iuv2ae8O
zzGUWqyJmgL5JOO2iCP2eiIcYAqCL9EFhv+06lcVjJs2UC8EmpaTEm6vDzpu3hJD
+ZQ7CTHjma0uLwJLSZygr+RnQ0O3lKjVAvrq
-----END CERTIFICATE-----
Generated at Fri Apr 19 20:23:38 2024 by rpki-client on console-ams.rpki-client.org