Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer
File: DwxSlP25wrH3QxZPyWDAB-a_5gE.cer (raw, json)
Hash identifier: qEEA/bH51IB49I1s1vDLQNJV3WOdYxkOBAHxej/AMhE=
Subject key identifier: 0F:0C:52:94:FD:B9:C2:B1:F7:43:16:4F:C9:60:C0:07:E6:BF:E6:01
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56DDB6D0620CDAD22CE6FF64596B70E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:20 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 200498
IP: 185.99.216.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:db:6d:06:20:cd:ad:22:ce:6f:f6:45:96:b7:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f0c5294fdb9c2b1f743164fc960c007e6bfe601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:aa:38:6e:fc:06:68:8c:ff:59:17:82:54:23:
3c:dd:ed:47:20:40:5b:bc:ab:0b:55:3a:84:c9:a3:
36:43:c6:93:73:de:fe:ac:d0:0b:0c:e5:39:09:bc:
cd:97:35:d7:d3:a3:7c:63:b8:32:ff:32:ff:7d:3a:
16:f5:9a:92:b3:99:26:a3:be:25:b2:60:8f:24:58:
62:88:37:c6:de:29:98:7c:10:24:c0:9a:40:7d:2f:
26:bd:47:ba:45:1c:39:cb:51:65:42:fb:22:57:98:
57:8a:35:c2:67:ff:3b:8d:18:a7:d3:f0:9a:67:98:
9b:53:e0:77:62:6d:7e:3a:81:9f:fb:54:3b:58:27:
b6:28:cb:bf:26:0f:21:54:cd:bf:a9:a0:dc:8e:9d:
a6:40:ff:08:b3:e3:12:88:a5:00:a5:02:6d:e7:6b:
7c:af:09:05:dc:67:10:2e:41:da:09:57:b3:d8:53:
24:42:63:3e:4c:97:c5:51:59:56:0a:af:e9:f8:40:
16:61:e1:c0:44:d6:f4:35:da:a5:3b:30:5d:b8:53:
63:bd:3a:fa:e1:12:5b:6a:e6:46:e9:a1:0b:fb:3e:
e0:fc:c8:9a:2d:1b:9a:52:8b:24:99:41:0b:6d:50:
a4:f3:04:00:ea:23:60:c4:27:d1:b6:28:28:fb:1b:
ef:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:0C:52:94:FD:B9:C2:B1:F7:43:16:4F:C9:60:C0:07:E6:BF:E6:01
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.99.216.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200498
Signature Algorithm: sha256WithRSAEncryption
80:a1:e8:9b:83:7b:0a:98:71:54:f3:4f:d5:47:48:fc:8b:b5:
a8:e8:30:ff:7f:d6:02:c6:bc:88:aa:95:95:0d:f4:36:dc:f5:
a5:1e:f1:9e:9b:39:84:40:f2:bb:ed:83:c2:9b:f9:7b:f3:20:
8e:87:83:f9:6d:92:05:ee:84:8e:f4:37:96:8c:6e:c7:cb:dd:
15:4b:e2:be:2d:de:30:a0:ff:a2:96:96:8b:f1:6f:45:6f:5f:
1f:6f:b2:70:27:68:19:29:43:4d:a2:11:f9:a6:bf:f2:da:dc:
09:a4:81:e4:c9:f6:1d:b3:10:05:08:8e:6a:02:20:72:f6:8d:
7f:b8:a3:39:87:04:58:44:2e:ae:e0:81:5a:0d:d4:7c:08:de:
58:e4:00:28:4c:32:fe:e9:f1:b5:12:28:3d:69:76:97:32:7b:
f9:20:bb:ce:9a:cc:24:ba:5f:b2:dd:dd:65:c7:81:51:d9:96:
ab:74:a2:f2:9a:51:98:4a:87:1d:0f:a6:b1:47:20:4e:5a:a7:
dd:c2:4c:78:6a:fb:f3:8d:73:57:3f:5b:a8:19:08:18:21:ce:
38:0f:d2:6a:2e:78:03:1e:b4:db:35:49:28:33:18:ff:44:8b:
e8:35:bf:92:a1:89:61:1e:ae:fa:32:de:8d:b5:9d:5d:9e:81:
3b:ce:de:94
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYzFbdttBiDNrSLOb/ZFlrcOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTQyOTIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjBjNTI5NGZkYjljMmIxZjc0MzE2NGZjOTYwYzAwN2U2YmZlNjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKo4bvwGaIz/WReCVCM83e1HIEBb
vKsLVTqEyaM2Q8aTc97+rNALDOU5CbzNlzXX06N8Y7gy/zL/fToW9ZqSs5kmo74l
smCPJFhiiDfG3imYfBAkwJpAfS8mvUe6RRw5y1FlQvsiV5hXijXCZ/87jRin0/Ca
Z5ibU+B3Ym1+OoGf+1Q7WCe2KMu/Jg8hVM2/qaDcjp2mQP8Is+MSiKUApQJt52t8
rwkF3GcQLkHaCVez2FMkQmM+TJfFUVlWCq/p+EAWYeHARNb0NdqlOzBduFNjvTr6
4RJbauZG6aEL+z7g/MiaLRuaUoskmUELbVCk8wQA6iNgxCfRtigo+xvvkQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFA8MUpT9ucKx90MWT8lgwAfmv+YBMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ0LzhjOTE4
ZS0zYWFmLTRhYTYtOGM0ZC0yNGVkNDBjOWYzODkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvOGM5MThl
LTNhYWYtNGFhNi04YzRkLTI0ZWQ0MGM5ZjM4OS8xL0R3eFNsUDI1d3JIM1F4WlB5
V0RBQi1hXzVnRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCuWPYMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwMPMjANBgkqhkiG9w0BAQsFAAOCAQEAgKHom4N7CphxVPNP1UdI/Iu1qOgw/3/W
Asa8iKqVlQ30Ntz1pR7xnps5hEDyu+2Dwpv5e/MgjoeD+W2SBe6EjvQ3loxux8vd
FUvivi3eMKD/opaWi/FvRW9fH2+ycCdoGSlDTaIR+aa/8trcCaSB5Mn2HbMQBQiO
agIgcvaNf7ijOYcEWEQuruCBWg3UfAjeWOQAKEwy/unxtRIoPWl2lzJ7+SC7zprM
JLpfst3dZceBUdmWq3Si8ppRmEqHHQ+msUcgTlqn3cJMeGr7841zVz9bqBkIGCHO
OA/Sai54Ax602zVJKDMY/0SL6DW/kqGJYR6u+jLejbWdXZ6BO87elA==
-----END CERTIFICATE-----
Generated at Fri Apr 19 15:53:59 2024 by rpki-client on console-fra.rpki-client.org