Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
File: DNLKvrHXJOekjdYemn4MUKTpv1A.cer (raw, json)
Hash identifier: 2V8Zn+4XfAtTHWSD7kzdufOEs7ZJJbOTRbma7UEtOpo=
Subject key identifier: 0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B89BCEBA2CE6DE383B6AFC2FFBB3FC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:30:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 209772
IP: 185.68.128.0/22
IP: 185.207.160.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:9b:ce:ba:2c:e6:de:38:3b:6a:fc:2f:fb:b3:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:be:18:6e:6a:22:83:6e:6c:fe:eb:5a:75:c0:
63:ff:64:7b:11:ac:45:24:2b:86:db:03:62:ef:f5:
0c:43:95:8d:ba:bf:69:30:cf:82:25:66:ce:d1:bb:
ab:c8:0a:79:bb:00:00:bb:12:d8:59:e1:df:87:68:
c2:eb:b3:0c:ee:5f:49:bb:87:15:e3:36:28:30:a0:
18:8e:d6:0a:dd:83:42:7c:33:b9:f9:5c:56:51:6a:
be:fb:aa:bf:9e:29:a7:e5:1a:2a:7a:9c:39:f4:ef:
30:4c:e7:b7:67:ae:ca:fb:3d:5e:0c:bb:d8:78:f9:
f2:94:52:2d:74:df:5f:73:bc:b7:23:10:04:95:9f:
45:18:6b:72:87:88:86:07:e2:ed:c2:f3:f4:9b:c4:
e4:ac:9b:56:79:b7:e9:f6:4b:1b:1a:01:46:29:1a:
be:ca:95:1c:d0:24:a9:e1:bb:73:4d:0f:93:e4:92:
38:74:47:e2:5d:60:07:1e:56:b7:6f:be:99:72:9d:
bb:5f:1f:dc:73:66:74:d0:eb:de:eb:96:60:ce:e2:
a9:15:a3:9a:fb:b6:06:64:4a:83:7f:a7:4f:38:fb:
51:de:4c:1f:5d:a3:99:dc:c2:2d:01:72:44:4f:1a:
84:3f:5e:56:37:0d:4f:62:10:86:8b:00:c6:d0:c3:
d6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.128.0/22
185.207.160.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209772
Signature Algorithm: sha256WithRSAEncryption
52:36:18:91:f3:3c:42:8a:40:75:11:0e:1a:92:ac:25:88:4d:
13:70:bd:a1:6a:16:33:0d:80:0c:ef:22:79:b5:b2:03:85:86:
79:f7:9a:32:b1:57:dd:4d:7b:2a:6a:a1:83:04:47:f0:34:af:
5c:1a:d0:7e:c9:c8:90:ba:07:9b:18:3f:39:8c:7e:4b:ec:38:
5c:5e:b2:68:8e:1d:c5:a6:a5:3f:63:72:88:21:ab:85:a9:c7:
2a:9b:be:b5:d3:4c:e9:fe:ad:03:3a:c3:78:67:51:37:79:87:
e7:93:31:86:7f:f0:f5:f4:1e:f6:db:5d:b9:5e:3b:27:73:2e:
80:1a:73:cc:bd:10:7c:91:a8:c0:39:26:4e:bf:dd:22:74:6e:
3b:9a:93:f8:56:27:21:3b:6e:87:c1:9f:fa:51:a2:40:2c:ba:
dc:4e:35:19:3b:8e:f5:86:e1:f3:80:fe:9b:e0:33:dc:6a:54:
cc:d3:47:75:80:f6:a9:8a:d4:2e:18:3c:9e:ea:8c:bc:52:40:
ac:64:91:8a:a0:6a:df:70:7d:ff:5b:dd:f7:8f:b4:58:52:ce:
33:e2:57:54:80:a4:0d:43:ab:1f:0d:91:2f:ae:69:70:95:29:
50:57:58:a3:1f:a7:21:4c:91:0a:62:18:28:ad:c2:2a:33:42:
32:f1:63:ac
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAYzGuJvOuizm3jg7avwv+7P8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMjAzMDM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwY2QyY2FiZWIxZDcyNGU3YTQ4ZGQ2MWU5YTdlMGM1MGE0ZTliZjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0b4Ybmoig25s/utadcBj/2R7EaxF
JCuG2wNi7/UMQ5WNur9pMM+CJWbO0buryAp5uwAAuxLYWeHfh2jC67MM7l9Ju4cV
4zYoMKAYjtYK3YNCfDO5+VxWUWq++6q/nimn5Roqepw59O8wTOe3Z67K+z1eDLvY
ePnylFItdN9fc7y3IxAElZ9FGGtyh4iGB+LtwvP0m8TkrJtWebfp9ksbGgFGKRq+
ypUc0CSp4btzTQ+T5JI4dEfiXWAHHla3b76Zcp27Xx/cc2Z00Ove65ZgzuKpFaOa
+7YGZEqDf6dPOPtR3kwfXaOZ3MItAXJETxqEP15WNw1PYhCGiwDG0MPWawIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFAzSyr6x1yTnpI3WHpp+DFCk6b9QMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U5L2I3OTc3
Ny00YTA0LTRkYWItYTFkYy0yNTM3NDQ5NGNlZWUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkvYjc5Nzc3
LTRhMDQtNGRhYi1hMWRjLTI1Mzc0NDk0Y2VlZS8xL0ROTEt2ckhYSk9la2pkWWVt
bjRNVUtUcHYxQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQCuUSAAwQCuc+gMBoGCCsGAQUFBwEIAQH/BAsw
CaAHMAUCAwMzbDANBgkqhkiG9w0BAQsFAAOCAQEAUjYYkfM8QopAdREOGpKsJYhN
E3C9oWoWMw2ADO8iebWyA4WGefeaMrFX3U17KmqhgwRH8DSvXBrQfsnIkLoHmxg/
OYx+S+w4XF6yaI4dxaalP2NyiCGrhanHKpu+tdNM6f6tAzrDeGdRN3mH55Mxhn/w
9fQe9ttduV47J3MugBpzzL0QfJGowDkmTr/dInRuO5qT+FYnITtuh8Gf+lGiQCy6
3E41GTuO9Ybh84D+m+Az3GpUzNNHdYD2qYrULhg8nuqMvFJArGSRiqBq33B9/1vd
94+0WFLOM+JXVICkDUOrHw2RL65pcJUpUFdYox+nIUyRCmIYKK3CKjNCMvFjrA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:46:51 2024 by rpki-client on console-ams.rpki-client.org