Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FUNQKjLkt-H_DwIulTDcayMmnYo.cer
File: FUNQKjLkt-H_DwIulTDcayMmnYo.cer (raw, json)
Hash identifier: nlDy+nizkV3f1Z8mMHkCwWl4JBYB4zZsQY5RWRwClfk=
Subject key identifier: 15:43:50:2A:32:E4:B7:E1:FF:0F:02:2E:95:30:DC:6B:23:26:9D:8A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7275F37542BE2AAC827D1F3B40DECE1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4a/12fa86-c276-43e4-8ba8-0ee216b77579/1/FUNQKjLkt-H_DwIulTDcayMmnYo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4a/12fa86-c276-43e4-8ba8-0ee216b77579/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.93.78.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:5f:37:54:2b:e2:aa:c8:27:d1:f3:b4:0d:ec:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1543502a32e4b7e1ff0f022e9530dc6b23269d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:62:5c:98:f8:56:1a:63:7e:67:56:0f:d4:98:
ac:f7:25:06:64:5a:66:a8:e1:e3:20:ef:06:d1:68:
51:ce:b4:52:cd:43:6c:a5:3c:95:a7:81:81:d6:d5:
38:4f:3f:42:25:c0:cc:f7:3f:cc:11:59:a5:6c:99:
f1:54:cf:2a:9f:34:9a:15:c9:7d:47:a5:d9:13:23:
7e:15:f4:71:d5:0e:48:a8:dc:49:95:7c:37:eb:7a:
ec:be:d4:e5:7f:d6:00:f7:20:e0:c2:48:1c:bb:06:
71:3f:c4:eb:08:03:52:c8:07:bf:d6:3b:30:9b:86:
df:51:69:26:86:f5:a1:f1:00:c3:81:2e:fc:01:be:
01:6b:21:4b:9d:de:f3:35:c3:a1:65:54:22:66:b5:
40:8b:34:7c:db:80:0c:21:a7:25:7a:31:04:fc:fc:
97:de:1b:7d:63:c4:5b:c8:9b:eb:64:af:32:19:63:
29:d1:48:ab:4b:40:12:cb:64:49:db:6c:79:4d:28:
93:29:b2:c7:d2:04:39:fe:63:01:82:4b:0c:c7:05:
e1:41:07:81:f8:1c:fa:8c:f0:ff:05:c8:0f:57:05:
32:4c:8c:b8:29:94:46:53:43:09:89:12:a4:4f:e7:
f4:70:26:d0:93:87:8d:e8:0c:1b:2c:0e:ae:f0:71:
ca:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:43:50:2A:32:E4:B7:E1:FF:0F:02:2E:95:30:DC:6B:23:26:9D:8A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/12fa86-c276-43e4-8ba8-0ee216b77579/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/12fa86-c276-43e4-8ba8-0ee216b77579/1/FUNQKjLkt-H_DwIulTDcayMmnYo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.93.78.0/24
Signature Algorithm: sha256WithRSAEncryption
38:fd:1d:68:7d:9d:b3:c3:fb:71:cf:16:0a:9d:b4:85:64:3c:
d8:dc:72:54:d6:b1:61:28:65:ba:9a:e8:c1:0a:53:41:13:32:
5b:1a:5f:58:b0:55:7d:a5:67:07:e6:23:ef:29:b7:49:5a:fc:
06:93:7a:f3:a7:4e:bd:26:82:81:4d:11:da:96:a8:25:c3:2a:
6e:b0:ff:f6:a3:a8:ae:80:bf:38:60:8b:a6:19:d4:57:cb:d3:
a6:fe:a3:67:26:68:e1:9f:73:e6:c1:b2:66:0d:72:8d:48:05:
cf:72:76:5b:65:b1:d3:ee:76:48:3c:bf:f0:a7:42:cc:a7:53:
e6:3c:b3:0b:3d:d5:a7:41:2b:a5:83:2d:79:92:94:a2:44:4c:
ff:2a:ae:c4:c2:a3:d6:c6:86:ce:4a:d0:ef:e9:3e:be:59:30:
91:9e:dd:38:e3:f5:c7:84:72:75:8f:aa:19:f0:10:1f:28:ed:
4c:1c:ee:a5:91:73:1f:c7:ee:e0:1b:d9:68:c7:19:db:42:9f:
ba:9b:26:f3:20:33:7e:b3:dc:3c:ef:44:06:26:fd:f6:5a:80:
7a:29:95:f9:55:b0:be:8f:be:42:b9:da:69:e5:ff:40:75:f2:
e2:c6:65:92:2d:d1:4e:e6:01:2b:35:f7:72:63:39:88:80:44:
67:8c:04:3c
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzHJ183VCviqsgn0fO0DezhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMjIzMTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTQzNTAyYTMyZTRiN2UxZmYwZjAyMmU5NTMwZGM2YjIzMjY5ZDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2JcmPhWGmN+Z1YP1Jis9yUGZFpm
qOHjIO8G0WhRzrRSzUNspTyVp4GB1tU4Tz9CJcDM9z/MEVmlbJnxVM8qnzSaFcl9
R6XZEyN+FfRx1Q5IqNxJlXw363rsvtTlf9YA9yDgwkgcuwZxP8TrCANSyAe/1jsw
m4bfUWkmhvWh8QDDgS78Ab4BayFLnd7zNcOhZVQiZrVAizR824AMIaclejEE/PyX
3ht9Y8RbyJvrZK8yGWMp0UirS0ASy2RJ22x5TSiTKbLH0gQ5/mMBgksMxwXhQQeB
+Bz6jPD/BcgPVwUyTIy4KZRGU0MJiRKkT+f0cCbQk4eN6AwbLA6u8HHKlQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFBVDUCoy5Lfh/w8CLpUw3GsjJp2KMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRhLzEyZmE4
Ni1jMjc2LTQzZTQtOGJhOC0wZWUyMTZiNzc1NzkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEvMTJmYTg2
LWMyNzYtNDNlNC04YmE4LTBlZTIxNmI3NzU3OS8xL0ZVTlFLakxrdC1IX0R3SXVs
VERjYXlNbW5Zby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwl1OMA0GCSqGSIb3DQEBCwUAA4IBAQA4/R1o
fZ2zw/txzxYKnbSFZDzY3HJU1rFhKGW6mujBClNBEzJbGl9YsFV9pWcH5iPvKbdJ
WvwGk3rzp069JoKBTRHalqglwypusP/2o6iugL84YIumGdRXy9Om/qNnJmjhn3Pm
wbJmDXKNSAXPcnZbZbHT7nZIPL/wp0LMp1PmPLMLPdWnQSulgy15kpSiREz/Kq7E
wqPWxobOStDv6T6+WTCRnt044/XHhHJ1j6oZ8BAfKO1MHO6lkXMfx+7gG9loxxnb
Qp+6mybzIDN+s9w870QGJv32WoB6KZX5VbC+j75Cudpp5f9AdfLixmWSLdFO5gEr
NfdyYzmIgERnjAQ8
-----END CERTIFICATE-----
Generated at Fri May 3 11:25:26 2024 by rpki-client on console-ams.rpki-client.org