Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FbWVJg9ywiJUesPjZ_LIh644o_w.cer
File: FbWVJg9ywiJUesPjZ_LIh644o_w.cer (raw, json)
Hash identifier: lKueUGosj3oF7Rb9sDUv+9qcHbxZ96ZQ2ZCLQYbyWco=
Subject key identifier: 15:B5:95:26:0F:72:C2:22:54:7A:C3:E3:67:F2:C8:87:AE:38:A3:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA29752B9B8A34DFA10291861E147300
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:32:43 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 205665
IP: 185.209.232.0/22
IP: 2a0b:8a40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 00:45:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:75:2b:9b:8a:34:df:a1:02:91:86:1e:14:73:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:32:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15b595260f72c222547ac3e367f2c887ae38a3fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ba:7b:d8:02:3d:42:9d:00:8d:ca:ff:d1:8a:
2c:ce:83:de:57:e1:5b:0c:3b:a4:66:db:72:1c:a4:
f8:15:29:29:ef:e4:29:2b:4e:41:1a:96:8b:64:21:
88:2b:45:0e:80:aa:a6:7b:b8:a0:09:55:26:32:53:
5f:b5:87:a0:88:cb:b5:8f:3a:c9:6b:35:86:97:db:
96:23:9f:eb:45:5a:90:77:aa:c2:a0:c4:90:c5:e1:
d5:b5:8b:0f:45:53:2a:3c:df:91:31:54:27:40:67:
f8:85:f1:70:67:20:78:08:68:02:59:ee:6a:12:59:
b0:27:3a:ff:6d:e6:02:43:af:bb:ed:1d:eb:4a:35:
f1:05:21:6f:1b:09:09:80:8d:44:12:8c:e2:66:47:
0b:98:dc:b8:33:91:91:0d:e3:bb:cb:b4:a4:cc:46:
52:69:67:e5:26:45:fe:ca:2f:93:e1:f2:d9:e9:c2:
ef:b8:58:b3:f7:6b:93:cb:8d:f7:62:d8:ab:bd:35:
47:61:62:12:87:b4:9f:3e:37:39:76:bc:d8:af:40:
3a:bd:ad:de:90:43:d5:0c:58:64:e7:5f:f3:0f:53:
bd:47:fe:58:86:8e:29:b8:d4:83:b2:31:a7:70:5b:
e1:47:ba:0c:11:42:57:49:75:2d:51:1f:c7:9e:1e:
77:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B5:95:26:0F:72:C2:22:54:7A:C3:E3:67:F2:C8:87:AE:38:A3:FC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.232.0/22
IPv6:
2a0b:8a40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205665
Signature Algorithm: sha256WithRSAEncryption
3b:56:0d:e2:1d:c4:b5:0c:61:c5:27:bd:82:f5:39:8f:ab:89:
1d:f7:10:00:ef:80:5c:ce:ec:35:b5:35:0d:0b:16:06:8a:23:
54:5a:85:68:61:31:26:6b:af:61:1f:3e:f5:59:0c:cb:8c:86:
c5:11:a2:75:b3:a4:53:14:c0:a4:d4:0d:06:06:b2:9b:e0:9c:
05:48:4d:e3:73:2c:aa:ae:1a:79:1c:78:55:dd:0a:10:dd:be:
e9:a4:57:52:a5:28:38:2a:80:d2:c9:6a:66:bb:f9:bd:34:62:
94:73:11:87:b3:ee:b7:99:8d:ec:46:2e:cb:d4:27:df:14:c8:
73:0e:99:56:9a:21:d0:f5:ea:4d:cd:3d:67:61:62:ef:96:58:
76:b2:00:16:52:8f:18:bf:14:eb:12:b2:0d:69:91:aa:f2:b4:
c6:d0:34:fc:5e:b7:de:bf:b5:76:81:f7:12:d8:1e:7a:02:8b:
5f:d2:ce:d4:1c:de:fc:6b:a8:86:51:a7:64:c0:31:5b:31:41:
2c:76:2a:7d:0d:ad:f7:61:5f:d4:a1:aa:9a:e1:87:4a:dc:41:
91:d2:1d:dd:cd:dd:61:5f:9c:41:61:af:9e:ad:65:fc:5e:61:
17:bc:2c:8e:d8:77:00:46:4f:30:cd:b7:90:fa:07:1c:1c:1e:
5d:98:cc:98
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzKKXUrm4o036ECkYYeFHMAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTIzMjQzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWI1OTUyNjBmNzJjMjIyNTQ3YWMzZTM2N2YyYzg4N2FlMzhhM2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bp72AI9Qp0Ajcr/0YoszoPeV+Fb
DDukZttyHKT4FSkp7+QpK05BGpaLZCGIK0UOgKqme7igCVUmMlNftYegiMu1jzrJ
azWGl9uWI5/rRVqQd6rCoMSQxeHVtYsPRVMqPN+RMVQnQGf4hfFwZyB4CGgCWe5q
ElmwJzr/beYCQ6+77R3rSjXxBSFvGwkJgI1EEoziZkcLmNy4M5GRDeO7y7SkzEZS
aWflJkX+yi+T4fLZ6cLvuFiz92uTy433YtirvTVHYWISh7SfPjc5drzYr0A6va3e
kEPVDFhk51/zD1O9R/5Yho4puNSDsjGncFvhR7oMEUJXSXUtUR/Hnh53iQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFBW1lSYPcsIiVHrD42fyyIeuOKP8MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAyLzYxNGQ2
NC0zN2QzLTRiYmMtOGYzZC1iNDNjZDRkOTdjOGUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDIvNjE0ZDY0
LTM3ZDMtNGJiYy04ZjNkLWI0M2NkNGQ5N2M4ZS8xL0ZiV1ZKZzl5d2lKVWVzUGpa
X0xJaDY0NG9fdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCudHoMA0EAgACMAcDBQMqC4pAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMjYTANBgkqhkiG9w0BAQsFAAOCAQEAO1YN4h3EtQxh
xSe9gvU5j6uJHfcQAO+AXM7sNbU1DQsWBoojVFqFaGExJmuvYR8+9VkMy4yGxRGi
dbOkUxTApNQNBgaym+CcBUhN43Msqq4aeRx4Vd0KEN2+6aRXUqUoOCqA0slqZrv5
vTRilHMRh7Put5mN7EYuy9Qn3xTIcw6ZVpoh0PXqTc09Z2Fi75ZYdrIAFlKPGL8U
6xKyDWmRqvK0xtA0/F633r+1doH3EtgeegKLX9LO1Bze/GuohlGnZMAxWzFBLHYq
fQ2t92Ff1KGqmuGHStxBkdId3c3dYV+cQWGvnq1l/F5hF7wsjth3AEZPMM23kPoH
HBweXZjMmA==
-----END CERTIFICATE-----
Generated at Sat Apr 20 03:47:31 2024 by rpki-client on console-ams.rpki-client.org