Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DY05iX3-Ia7thQlskKRzlvyknUE.cer
File: DY05iX3-Ia7thQlskKRzlvyknUE.cer (raw, json)
Hash identifier: cMQE+KTKbjWg/xbnWuhkIMg6QuP977lKEyqGMsSIC70=
Subject key identifier: 0D:8D:39:89:7D:FE:21:AE:ED:85:09:6C:90:A4:73:96:FC:A4:9D:41
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86EF9AE43FD85A5BFF774E202663672
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/508c68-a737-43a9-af10-be823109855e/1/DY05iX3-Ia7thQlskKRzlvyknUE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/508c68-a737-43a9-af10-be823109855e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:29:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.169.236.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6e:f9:ae:43:fd:85:a5:bf:f7:74:e2:02:66:36:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d8d39897dfe21aeed85096c90a47396fca49d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:46:51:54:bb:f0:4d:fb:cf:40:51:20:b9:c7:
df:89:09:af:64:20:55:51:d9:04:a1:98:97:8b:4e:
82:41:76:f5:e7:4f:cb:94:69:8d:55:68:05:99:16:
11:df:53:0c:ed:bb:0d:58:80:6b:ff:2c:ad:4c:5d:
82:c7:01:e2:7d:b7:69:2d:7e:3d:f1:03:64:ed:15:
96:5e:b9:2a:15:e3:a0:e7:c7:10:0f:4e:1f:f2:2e:
01:4f:19:f5:2e:77:6a:43:99:61:31:67:0a:eb:f0:
b8:ba:c3:54:bd:ef:72:7c:9d:88:2c:b2:e5:5a:ad:
34:07:5b:e2:9c:e0:44:31:4f:21:2a:b2:a5:1f:7d:
bb:c0:94:99:1d:eb:4c:99:58:30:fb:06:9d:47:0c:
95:65:ce:b6:78:a2:fa:88:64:d9:27:3b:ab:e0:d1:
00:f1:2d:76:d4:99:a0:13:7a:6e:ba:5a:ce:12:65:
ac:23:7b:a0:fd:05:47:52:50:a3:8f:3c:21:3f:3c:
2c:7c:5c:0b:45:93:18:ef:4e:13:6a:fe:03:71:76:
d5:e7:69:09:54:25:77:22:52:20:8b:d9:ff:06:c5:
27:16:ed:02:2b:95:73:f9:c4:0e:05:d6:a3:9c:e7:
30:4b:00:04:78:cb:1b:5a:c3:d5:8a:44:9b:03:d1:
bc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:8D:39:89:7D:FE:21:AE:ED:85:09:6C:90:A4:73:96:FC:A4:9D:41
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/508c68-a737-43a9-af10-be823109855e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/508c68-a737-43a9-af10-be823109855e/1/DY05iX3-Ia7thQlskKRzlvyknUE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.236.0/23
Signature Algorithm: sha256WithRSAEncryption
49:aa:15:88:9a:17:49:fe:d3:cc:c4:95:f4:da:13:f6:35:ac:
ea:7c:4f:61:a2:09:f9:92:04:11:24:12:55:57:c1:ef:33:24:
3e:9f:4a:4f:9d:5d:45:14:ab:67:10:b1:2e:b3:4f:7c:45:93:
33:40:d9:5a:c1:2a:0f:2e:c6:c8:47:cb:b5:c0:89:92:c1:a4:
b3:dd:2f:f9:7c:3a:d3:af:a6:04:79:27:16:14:5d:51:81:49:
f1:35:57:5c:c9:77:8e:f9:b9:bd:6a:c4:64:b7:65:5e:62:e4:
53:b5:0c:a9:6a:9f:7d:92:1e:8f:92:94:ec:93:f0:02:f1:cd:
85:5c:a8:27:e2:7e:89:ef:e3:f2:2f:24:9b:ab:23:87:39:8d:
54:97:44:26:44:dd:eb:7d:f4:a4:c2:62:e8:d3:bf:74:f2:8a:
e1:64:a1:e0:3e:92:61:44:d3:eb:da:0c:55:e5:d8:1f:f2:f6:
2f:08:34:d5:e2:00:24:3e:a5:3a:e8:db:96:4e:67:3d:0a:65:
ea:75:e5:60:7e:13:5e:9c:e1:2f:cf:ac:7a:b5:5e:58:01:03:
fa:a3:1a:2e:7a:19:d8:75:96:d4:84:b0:23:54:fd:33:cd:46:
8f:39:e7:26:27:a4:96:95:61:24:8d:6b:d7:83:2e:cd:86:1e:
dd:e8:73:26
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzIbvmuQ/2Fpb/3dOICZjZyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDQyOTI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDhkMzk4OTdkZmUyMWFlZWQ4NTA5NmM5MGE0NzM5NmZjYTQ5ZDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0ZRVLvwTfvPQFEgucffiQmvZCBV
UdkEoZiXi06CQXb150/LlGmNVWgFmRYR31MM7bsNWIBr/yytTF2CxwHifbdpLX49
8QNk7RWWXrkqFeOg58cQD04f8i4BTxn1LndqQ5lhMWcK6/C4usNUve9yfJ2ILLLl
Wq00B1vinOBEMU8hKrKlH327wJSZHetMmVgw+wadRwyVZc62eKL6iGTZJzur4NEA
8S121JmgE3puulrOEmWsI3ug/QVHUlCjjzwhPzwsfFwLRZMY704Tav4DcXbV52kJ
VCV3IlIgi9n/BsUnFu0CK5Vz+cQOBdajnOcwSwAEeMsbWsPVikSbA9G8NwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFA2NOYl9/iGu7YUJbJCkc5b8pJ1BMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY4LzUwOGM2
OC1hNzM3LTQzYTktYWYxMC1iZTgyMzEwOTg1NWUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjgvNTA4YzY4
LWE3MzctNDNhOS1hZjEwLWJlODIzMTA5ODU1ZS8xL0RZMDVpWDMtSWE3dGhRbHNr
S1J6bHZ5a25VRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQBwansMA0GCSqGSIb3DQEBCwUAA4IBAQBJqhWI
mhdJ/tPMxJX02hP2NazqfE9hogn5kgQRJBJVV8HvMyQ+n0pPnV1FFKtnELEus098
RZMzQNlawSoPLsbIR8u1wImSwaSz3S/5fDrTr6YEeScWFF1RgUnxNVdcyXeO+bm9
asRkt2VeYuRTtQypap99kh6PkpTsk/AC8c2FXKgn4n6J7+PyLySbqyOHOY1Ul0Qm
RN3rffSkwmLo07908orhZKHgPpJhRNPr2gxV5dgf8vYvCDTV4gAkPqU66NuWTmc9
CmXqdeVgfhNenOEvz6x6tV5YAQP6oxouehnYdZbUhLAjVP0zzUaPOecmJ6SWlWEk
jWvXgy7Nhh7d6HMm
-----END CERTIFICATE-----
Generated at Fri Apr 26 09:18:15 2024 by rpki-client on console-ams.rpki-client.org