Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F19uHruDGTXIQiyXK8qy5W0dnjY.cer
File: F19uHruDGTXIQiyXK8qy5W0dnjY.cer (raw, json)
Hash identifier: WcuoojKh3zeybJ3mFIbHsyE05dpREd1GWi+T9jRF5JY=
Subject key identifier: 17:5F:6E:1E:BB:83:19:35:C8:42:2C:97:2B:CA:B2:E5:6D:1D:9E:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56DE7383DB4BF201ADAA7ED8E809452
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 50031
IP: 109.69.112.0/21
IP: 2a01:7300::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:e7:38:3d:b4:bf:20:1a:da:a7:ed:8e:80:94:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=175f6e1ebb831935c8422c972bcab2e56d1d9e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5a:70:28:b0:af:71:83:5b:96:4e:9e:7b:2e:
91:c1:23:a7:5f:44:93:b0:d9:e2:cd:46:c4:41:85:
98:55:b9:fb:da:61:37:56:09:60:24:0c:8f:0e:7f:
78:5f:eb:0f:6b:73:3e:77:56:36:fa:69:38:f0:46:
c7:45:97:c4:17:a6:75:64:0e:ba:fc:a2:8b:a3:0a:
2d:f9:85:c2:50:30:bb:22:2e:2c:30:86:ca:39:ad:
6d:3d:c2:e0:8b:9d:bd:61:2d:e4:8b:7f:ec:f7:e0:
44:7c:ae:af:1b:a1:ef:59:48:7c:55:58:bd:d9:8f:
fd:8c:67:29:4c:58:b7:7e:9d:05:66:12:ff:3a:a3:
b8:9f:85:2b:f4:76:d9:c2:6c:7d:dc:dd:70:80:13:
db:5e:e5:fb:42:b5:c7:5c:de:1d:a8:bf:ca:84:d5:
2e:7a:ae:af:03:5f:6e:f1:8f:83:f1:28:09:31:bc:
cc:59:8b:16:68:44:e8:9e:d5:b0:38:79:24:cd:d0:
ea:c9:f8:71:e9:6c:be:2f:c1:69:a1:c0:6d:6f:e7:
90:8e:45:84:f1:e3:6d:e7:91:c8:dc:77:8d:12:a2:
67:fe:bc:e4:ef:0e:9f:28:e0:53:ba:6f:06:d7:d5:
8e:e8:cb:0e:50:21:39:c4:f4:be:55:2c:36:c2:ed:
21:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:5F:6E:1E:BB:83:19:35:C8:42:2C:97:2B:CA:B2:E5:6D:1D:9E:36
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.69.112.0/21
IPv6:
2a01:7300::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50031
Signature Algorithm: sha256WithRSAEncryption
ab:bd:f7:c5:f1:e8:3d:fb:fd:a1:f2:8f:89:24:54:73:2d:00:
01:33:d1:14:58:2e:d7:e7:17:ce:a5:c8:cb:29:23:6b:87:e5:
b6:72:03:59:4c:06:f0:67:be:94:e4:6e:8c:c5:ed:d6:43:81:
2d:8f:9d:70:d3:39:1a:24:71:46:af:e8:7f:56:50:aa:a5:bf:
e4:d3:75:6f:4a:e9:37:6b:ad:b4:6b:2e:22:3c:70:96:dc:6a:
1b:91:45:78:43:b6:ac:b3:8e:fe:09:62:7b:b2:a2:96:12:7a:
70:cf:78:fe:64:de:a7:f3:b6:c8:38:97:63:9a:19:b1:19:9a:
51:2d:55:a7:16:d4:bf:ac:5e:05:9c:49:c7:55:98:d0:db:22:
f1:a2:cf:f2:a4:9b:da:8a:bb:ec:0c:f7:ca:d4:d7:54:6e:4d:
6f:72:79:c1:e4:ee:b9:f4:45:30:85:d5:fa:ff:78:ee:42:79:
e1:b3:22:10:b0:9a:9f:2d:c4:f4:fa:6f:28:a6:3c:ac:ed:a5:
78:51:a8:46:9c:37:73:c5:5a:a7:0b:b8:30:57:f7:d4:4d:fc:
94:d3:18:52:7a:58:07:47:b8:39:eb:e7:63:ce:c6:a6:07:2b:
ca:ec:78:77:47:eb:bb:a5:04:51:b5:7e:3c:dc:3b:f0:b0:dd:
a4:ad:27:29
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzFbec4PbS/IBrap+2OgJRSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTQyOTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzVmNmUxZWJiODMxOTM1Yzg0MjJjOTcyYmNhYjJlNTZkMWQ5ZTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlpwKLCvcYNblk6eey6RwSOnX0ST
sNnizUbEQYWYVbn72mE3VglgJAyPDn94X+sPa3M+d1Y2+mk48EbHRZfEF6Z1ZA66
/KKLowot+YXCUDC7Ii4sMIbKOa1tPcLgi529YS3ki3/s9+BEfK6vG6HvWUh8VVi9
2Y/9jGcpTFi3fp0FZhL/OqO4n4Ur9HbZwmx93N1wgBPbXuX7QrXHXN4dqL/KhNUu
eq6vA19u8Y+D8SgJMbzMWYsWaETontWwOHkkzdDqyfhx6Wy+L8FpocBtb+eQjkWE
8eNt55HI3HeNEqJn/rzk7w6fKOBTum8G19WO6MsOUCE5xPS+VSw2wu0htwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFBdfbh67gxk1yEIslyvKsuVtHZ42MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYwLzA5ZGI4
Ni02NzZkLTRmOWUtYTJiNC0wMjg1YzE1ZmM1MWUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjAvMDlkYjg2
LTY3NmQtNGY5ZS1hMmI0LTAyODVjMTVmYzUxZS8xL0YxOXVIcnVER1RYSVFpeVhL
OHF5NVcwZG5qWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQDbUVwMA0EAgACMAcDBQAqAXMAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDDbzANBgkqhkiG9w0BAQsFAAOCAQEAq733xfHoPfv9
ofKPiSRUcy0AATPRFFgu1+cXzqXIyykja4fltnIDWUwG8Ge+lORujMXt1kOBLY+d
cNM5GiRxRq/of1ZQqqW/5NN1b0rpN2uttGsuIjxwltxqG5FFeEO2rLOO/glie7Ki
lhJ6cM94/mTep/O2yDiXY5oZsRmaUS1VpxbUv6xeBZxJx1WY0Nsi8aLP8qSb2oq7
7Az3ytTXVG5Nb3J5weTuufRFMIXV+v947kJ54bMiELCany3E9PpvKKY8rO2leFGo
Rpw3c8Vapwu4MFf31E38lNMYUnpYB0e4OevnY87Gpgcryux4d0fru6UEUbV+PNw7
8LDdpK0nKQ==
-----END CERTIFICATE-----
Generated at Thu Apr 25 23:21:01 2024 by rpki-client on console-fra.rpki-client.org