Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
File: FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer (raw, json)
Hash identifier: pnMuEi7in3+kEt7PkSwv1ndSXkrzd0fPBeuc4ojw2xE=
Subject key identifier: 15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8012F12F7BD9731AE7BBDFFB84F0E47
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 212.18.110.0/24
IP: 2a12:8400::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 01:58:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:2f:12:f7:bd:97:31:ae:7b:bd:ff:b8:4f:0e:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=159366259f9bae7c37337b515fa5bee05f53abce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a3:f6:0e:08:db:20:73:11:bd:76:30:42:bc:
56:f0:cb:df:be:77:aa:29:fe:54:2c:71:fd:be:0c:
c4:41:fe:15:de:b4:52:f3:c1:1a:71:bd:07:2a:b5:
d6:a9:d6:dd:a5:a4:a0:80:6c:ec:a4:1e:af:e8:54:
4f:18:64:35:1e:59:c9:13:f8:8e:e1:e5:9b:15:47:
99:24:e7:ab:5e:ed:7c:46:bb:87:58:7d:a8:41:f3:
23:e4:52:fa:6e:13:f0:72:8e:95:2e:bc:a7:c0:f7:
06:4f:71:fa:50:c3:9c:60:6b:31:dc:ee:eb:46:81:
22:02:78:c7:1d:9d:7f:01:ec:be:63:4b:af:55:30:
1c:95:c6:1c:ce:84:49:33:17:62:29:fc:8e:67:6b:
00:f9:26:bf:4e:1c:41:03:d3:ab:95:69:6b:ba:11:
21:80:8e:2f:e3:27:94:42:55:1c:61:b0:fc:f4:78:
dd:78:69:43:e2:03:0a:fd:fb:16:6e:89:24:15:bc:
db:87:c1:82:21:e0:bc:3c:1d:ab:19:4c:be:d5:ad:
65:9e:32:24:49:27:42:93:6e:ff:ce:21:54:69:50:
3c:cb:6b:0a:4a:fb:69:97:84:13:e9:94:e2:69:fb:
88:b0:0d:11:99:c9:74:88:67:e6:fc:bf:43:49:e5:
a5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.110.0/24
IPv6:
2a12:8400::/32
Signature Algorithm: sha256WithRSAEncryption
83:81:b2:5e:f6:25:d5:52:be:16:87:7a:85:a6:47:03:96:a0:
08:20:d0:af:e7:b6:90:ff:a2:9e:ed:77:0d:79:fe:e9:d6:ef:
1e:6c:ec:7e:ae:c1:87:8d:88:eb:b8:f2:cd:af:f4:e9:43:5e:
61:1a:68:15:25:30:14:6c:e3:68:55:bb:8b:05:0a:84:19:b9:
22:c2:f6:fe:5e:19:62:9b:92:9c:3d:9a:b5:13:c6:df:5c:a2:
cc:38:e3:e9:fb:6d:1c:78:47:da:15:ee:af:11:81:0c:10:44:
03:b8:59:71:16:9e:59:69:cc:5f:85:e0:59:fe:33:d2:69:0b:
e8:6c:ca:b7:93:bd:d7:f2:bc:d9:f8:21:94:ac:86:16:ef:51:
87:05:a5:2b:17:3c:66:23:db:34:92:74:71:5a:64:dd:1d:4a:
30:65:f3:91:6d:31:00:27:c8:c6:06:91:d8:1b:87:01:34:c6:
90:45:ce:db:d4:8b:e4:0b:cd:0e:5f:d8:a2:75:de:2d:e1:97:
41:32:7f:d7:73:c4:2c:85:3b:21:08:d5:6d:92:f6:16:4a:60:
e1:90:c6:f1:3f:51:3e:61:ba:ba:9f:53:bd:09:8a:a4:d7:38:
1c:dc:c6:fb:6f:cc:73:b2:d8:07:ce:10:97:3a:08:b5:6c:10:
8c:2d:36:55
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzIAS8S972XMa57vf+4Tw5HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDIyOTI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTkzNjYyNTlmOWJhZTdjMzczMzdiNTE1ZmE1YmVlMDVmNTNhYmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqP2DgjbIHMRvXYwQrxW8Mvfvneq
Kf5ULHH9vgzEQf4V3rRS88Eacb0HKrXWqdbdpaSggGzspB6v6FRPGGQ1HlnJE/iO
4eWbFUeZJOerXu18RruHWH2oQfMj5FL6bhPwco6VLrynwPcGT3H6UMOcYGsx3O7r
RoEiAnjHHZ1/Aey+Y0uvVTAclcYczoRJMxdiKfyOZ2sA+Sa/ThxBA9OrlWlruhEh
gI4v4yeUQlUcYbD89HjdeGlD4gMK/fsWbokkFbzbh8GCIeC8PB2rGUy+1a1lnjIk
SSdCk27/ziFUaVA8y2sKSvtpl4QT6ZTiafuIsA0Rmcl0iGfm/L9DSeWlTwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFBWTZiWfm658NzN7UV+lvuBfU6vOMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I1LzEwOGY0
NS0zZTcwLTRkYWMtOTM0MS1mOTU0MDAyZjUyNDUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjUvMTA4ZjQ1
LTNlNzAtNGRhYy05MzQxLWY5NTQwMDJmNTI0NS8xL0ZaTm1KWi1icm53M00zdFJY
NlctNEY5VHE4NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQA1BJuMA0EAgACMAcDBQAqEoQAMA0GCSqGSIb3
DQEBCwUAA4IBAQCDgbJe9iXVUr4Wh3qFpkcDlqAIINCv57aQ/6Ke7XcNef7p1u8e
bOx+rsGHjYjruPLNr/TpQ15hGmgVJTAUbONoVbuLBQqEGbkiwvb+Xhlim5KcPZq1
E8bfXKLMOOPp+20ceEfaFe6vEYEMEEQDuFlxFp5ZacxfheBZ/jPSaQvobMq3k73X
8rzZ+CGUrIYW71GHBaUrFzxmI9s0knRxWmTdHUowZfORbTEAJ8jGBpHYG4cBNMaQ
Rc7b1IvkC80OX9iidd4t4ZdBMn/Xc8QshTshCNVtkvYWSmDhkMbxP1E+Ybq6n1O9
CYqk1zgc3Mb7b8xzstgHzhCXOgi1bBCMLTZV
-----END CERTIFICATE-----
Generated at Wed Apr 24 03:29:42 2024 by rpki-client on console-fra.rpki-client.org