Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
File: D0fcf_SFuEE7449b7oCRczCzFzg.cer (raw, json)
Hash identifier: M60QXCUNYLSVvy99nH7jjkrbn7alEhBKirqZ7ySPwhE=
Subject key identifier: 0F:47:DC:7F:F4:85:B8:41:3B:E3:8F:5B:EE:80:91:73:30:B3:17:38
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8014AADE4D5C17D58A171DB3D63A63C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:37 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 44858
IP: 93.95.0.0/21
IP: 2a03:5d80::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:4a:ad:e4:d5:c1:7d:58:a1:71:db:3d:63:a6:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f47dc7ff485b8413be38f5bee80917330b31738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f2:c3:a5:4c:04:8d:a4:fb:43:92:21:cf:4a:
8d:67:d5:91:ff:8b:ab:8b:91:19:20:db:96:9d:ad:
f4:9b:bc:f0:12:ac:81:b2:92:b9:e1:e0:3b:33:44:
ba:b9:e1:93:43:e3:70:ee:b4:c6:f9:23:98:97:68:
44:a5:b0:6c:ed:38:fe:52:01:92:4f:af:3c:58:e3:
5c:04:3a:54:4d:a5:0a:c3:14:89:d7:9f:63:e5:5b:
05:07:88:15:83:fc:08:97:48:0e:ec:29:b8:da:b2:
61:e0:f1:f2:63:fa:92:ff:67:b8:4c:65:b3:f6:9b:
3e:35:f6:fa:99:1e:7f:d5:ce:d0:58:c5:da:26:1f:
72:81:cd:9e:3c:78:4d:d6:d0:2b:b2:ca:43:7a:45:
57:4f:90:a5:c9:cc:3c:e9:99:e8:aa:67:d5:28:35:
ad:3f:20:77:82:16:34:79:cd:ad:03:6f:bc:80:ea:
76:1f:63:60:d8:f2:e0:3d:27:d5:21:91:93:e5:31:
85:1e:77:9b:53:0c:fc:53:c7:57:b1:4e:ed:ec:cd:
8b:ee:d5:0b:10:99:d0:53:05:a0:cb:4c:91:e6:da:
0f:ee:b0:01:90:21:dc:98:36:c1:5d:3c:c8:f6:a4:
17:4f:82:ab:25:5c:64:e2:4b:2a:76:23:0a:48:8b:
9d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:47:DC:7F:F4:85:B8:41:3B:E3:8F:5B:EE:80:91:73:30:B3:17:38
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.0.0/21
IPv6:
2a03:5d80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44858
Signature Algorithm: sha256WithRSAEncryption
5a:a3:4c:4f:f3:95:c6:da:5d:7b:1e:3a:c8:c5:2c:8f:db:be:
6e:e3:73:c0:d3:ca:8d:b7:4b:60:10:96:67:4f:86:21:e6:f1:
ab:a4:6c:90:4c:9b:b5:91:84:59:a0:37:11:a4:8c:78:1d:d9:
1b:39:ff:8b:64:b1:82:8a:68:c9:86:40:ad:90:02:27:13:70:
89:c9:21:50:98:04:e5:b8:a9:04:d6:28:0e:c3:8d:5e:58:e6:
27:b2:0b:6c:25:fc:7a:0e:17:e5:ad:77:ae:05:af:d8:30:c9:
94:cf:fa:07:51:97:5c:02:42:85:74:db:49:e1:ba:3e:5a:fb:
fd:2b:d9:7c:50:43:eb:b1:7b:4f:0e:29:82:70:ca:16:66:7f:
b9:6a:6c:0b:ea:ab:b9:5f:ba:e3:1f:8f:da:ec:10:34:90:12:
89:77:bf:1d:c2:e1:1f:a7:47:0a:fb:12:75:f9:fd:85:a9:03:
ea:c6:0b:5b:a9:9e:f0:1b:9d:17:67:fe:e1:3a:71:de:dc:a6:
30:62:d3:2e:cb:76:a8:50:25:12:72:7b:bf:c2:e9:32:0c:c8:
7d:71:5c:de:5c:3f:62:29:10:29:93:fc:3b:5a:8d:4b:15:ae:
90:22:56:f5:88:76:45:5b:5d:c5:92:00:55:0f:02:bd:8d:2b:
35:0f:6d:d7
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzIAUqt5NXBfVihcds9Y6Y8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDIyOTM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjQ3ZGM3ZmY0ODViODQxM2JlMzhmNWJlZTgwOTE3MzMwYjMxNzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/LDpUwEjaT7Q5Ihz0qNZ9WR/4ur
i5EZINuWna30m7zwEqyBspK54eA7M0S6ueGTQ+Nw7rTG+SOYl2hEpbBs7Tj+UgGS
T688WONcBDpUTaUKwxSJ159j5VsFB4gVg/wIl0gO7Cm42rJh4PHyY/qS/2e4TGWz
9ps+Nfb6mR5/1c7QWMXaJh9ygc2ePHhN1tArsspDekVXT5Clycw86ZnoqmfVKDWt
PyB3ghY0ec2tA2+8gOp2H2Ng2PLgPSfVIZGT5TGFHnebUwz8U8dXsU7t7M2L7tUL
EJnQUwWgy0yR5toP7rABkCHcmDbBXTzI9qQXT4KrJVxk4ksqdiMKSIudswIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFA9H3H/0hbhBO+OPW+6AkXMwsxc4MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVhL2FmNTA3
OC0yMjQzLTRmZGItYWIyYi0yZDg0N2EzZjdkMmYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWEvYWY1MDc4
LTIyNDMtNGZkYi1hYjJiLTJkODQ3YTNmN2QyZi8xL0QwZmNmX1NGdUVFNzQ0OWI3
b0NSY3pDekZ6Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQDXV8AMA0EAgACMAcDBQAqA12AMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwCvOjANBgkqhkiG9w0BAQsFAAOCAQEAWqNMT/OVxtpd
ex46yMUsj9u+buNzwNPKjbdLYBCWZ0+GIebxq6RskEybtZGEWaA3EaSMeB3ZGzn/
i2SxgopoyYZArZACJxNwickhUJgE5bipBNYoDsONXljmJ7ILbCX8eg4X5a13rgWv
2DDJlM/6B1GXXAJChXTbSeG6Plr7/SvZfFBD67F7Tw4pgnDKFmZ/uWpsC+qruV+6
4x+P2uwQNJASiXe/HcLhH6dHCvsSdfn9hakD6sYLW6me8BudF2f+4Tpx3tymMGLT
Lst2qFAlEnJ7v8LpMgzIfXFc3lw/YikQKZP8O1qNSxWukCJW9Yh2RVtdxZIAVQ8C
vY0rNQ9t1w==
-----END CERTIFICATE-----
Generated at Fri Apr 19 13:52:47 2024 by rpki-client on console-fra.rpki-client.org