Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Fi5IMpyL6O8gnplY2marAkAUXhk.cer
File: Fi5IMpyL6O8gnplY2marAkAUXhk.cer (raw, json)
Hash identifier: vtET/WMIVN5CIgFkyi/QVWQePatL0ZJcxqe01Oqz2lQ=
Subject key identifier: 16:2E:48:32:9C:8B:E8:EF:20:9E:99:58:DA:66:AB:02:40:14:5E:19
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94ABB9BDD461D7CEFAAA96AF8DDBAF1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:29:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 57795
IP: 23.249.232.0/21
IP: 37.114.88.0/21
IP: 83.174.128.0/20
IP: 93.92.24.0/21
IP: 149.143.0.0/19
IP: 185.6.204.0/22
IP: 185.34.176.0/22
IP: 185.37.64.0/22
IP: 185.43.212.0/22
IP: 185.144.20.0/22
IP: 185.221.156.0/22
IP: 185.254.41.0 -- 185.254.43.255
IP: 2a00:9340::/29
IP: 2a00:f5e0::/32
IP: 2a07:36c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:bb:9b:dd:46:1d:7c:ef:aa:a9:6a:f8:dd:ba:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=162e48329c8be8ef209e9958da66ab0240145e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:28:ed:4b:a2:22:58:c3:9b:f9:a3:01:ad:3d:
df:46:25:f8:ec:3d:1a:c0:ea:04:d3:45:8b:d3:61:
b9:31:e6:91:c9:96:8e:f4:0e:44:68:29:e6:0b:8f:
40:47:ed:82:33:96:88:d5:b3:f9:8c:66:24:05:76:
41:d3:ad:3b:95:f3:b9:6d:7b:1c:06:06:20:c7:99:
e7:d4:dc:c7:38:53:66:1c:de:cf:c4:7b:e3:c0:a7:
60:7e:04:86:33:b5:af:20:77:bc:f8:4a:04:e4:af:
7b:af:c3:73:42:d5:eb:bf:80:4f:64:a0:fa:15:2c:
47:8e:cd:b2:6d:46:9c:a7:f7:4a:bd:91:57:e3:33:
5b:9c:ff:bb:cb:2b:cf:42:cc:86:33:22:85:82:e8:
64:da:45:89:97:3a:fe:26:a7:61:b6:6d:5f:3f:97:
da:11:19:8b:c7:1a:2f:c8:22:7d:bc:2c:d7:65:e2:
2b:e3:66:ff:c5:91:a8:b1:20:21:85:c8:87:98:57:
b8:35:22:bf:6a:a8:1a:c5:0a:36:2d:df:57:91:a9:
d0:eb:00:fc:5c:70:9f:bb:a9:e7:02:24:f9:f7:06:
77:89:7d:9a:e0:04:ea:b4:83:2b:80:34:14:92:1d:
7c:25:b3:6c:1c:20:f8:9a:05:06:f7:d1:eb:52:98:
b5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2E:48:32:9C:8B:E8:EF:20:9E:99:58:DA:66:AB:02:40:14:5E:19
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.249.232.0/21
37.114.88.0/21
83.174.128.0/20
93.92.24.0/21
149.143.0.0/19
185.6.204.0/22
185.34.176.0/22
185.37.64.0/22
185.43.212.0/22
185.144.20.0/22
185.221.156.0/22
185.254.41.0-185.254.43.255
IPv6:
2a00:9340::/29
2a00:f5e0::/32
2a07:36c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57795
Signature Algorithm: sha256WithRSAEncryption
03:c0:48:f5:28:84:89:e8:d7:e2:16:c6:41:e9:ba:c5:c4:9f:
99:fb:43:1f:dd:82:0d:f3:d0:a7:f5:f1:84:cb:78:e1:91:c1:
cc:0a:77:88:cf:b8:6f:aa:0f:c8:35:91:4b:c7:cc:c0:1d:11:
a5:e7:46:bb:a1:23:70:23:77:ac:5f:6d:55:4a:b2:59:aa:4c:
11:38:e8:8a:39:30:f1:51:8a:19:f2:65:2a:9d:f6:0f:50:bc:
5e:6a:86:ef:c4:fe:05:a1:e0:3e:4e:f2:9c:7d:e4:c4:90:94:
5e:6b:5b:8b:63:17:0f:c8:98:77:33:63:b4:01:67:fa:f4:e2:
06:c4:e8:99:bc:31:06:06:35:5f:96:76:bf:35:aa:df:ff:6a:
f5:69:aa:b4:23:43:aa:f0:59:d6:6c:a2:48:da:39:7e:4d:1c:
62:ff:50:b4:c6:0b:b6:12:58:4c:d2:73:31:70:f2:c8:fe:c7:
9e:40:62:47:6d:db:58:7b:fc:4b:73:ce:cb:a0:66:38:44:97:
e9:ed:4b:60:ea:d9:c1:4e:3e:da:a3:53:82:4f:0f:1f:23:f8:
eb:e6:53:5d:8f:e9:46:b2:c4:e0:08:e7:72:62:7b:ef:7b:b7:
ee:b2:33:b1:81:d0:2a:f4:3f:c8:ef:78:bb:61:b5:94:de:2a:
c8:2f:d5:d1
-----BEGIN CERTIFICATE-----
MIIF/DCCBOSgAwIBAgISAYzJSrub3UYdfO+qqWr43brxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDgyOTI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjJlNDgzMjljOGJlOGVmMjA5ZTk5NThkYTY2YWIwMjQwMTQ1ZTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5yjtS6IiWMOb+aMBrT3fRiX47D0a
wOoE00WL02G5MeaRyZaO9A5EaCnmC49AR+2CM5aI1bP5jGYkBXZB0607lfO5bXsc
BgYgx5nn1NzHOFNmHN7PxHvjwKdgfgSGM7WvIHe8+EoE5K97r8NzQtXrv4BPZKD6
FSxHjs2ybUacp/dKvZFX4zNbnP+7yyvPQsyGMyKFguhk2kWJlzr+Jqdhtm1fP5fa
ERmLxxovyCJ9vCzXZeIr42b/xZGosSAhhciHmFe4NSK/aqgaxQo2Ld9XkanQ6wD8
XHCfu6nnAiT59wZ3iX2a4ATqtIMrgDQUkh18JbNsHCD4mgUG99HrUpi1cQIDAQAB
o4IDCDCCAwQwHQYDVR0OBBYEFBYuSDKci+jvIJ6ZWNpmqwJAFF4ZMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U2LzhlMjA2
Ny0yODNiLTRlNGUtYjY3ZS02OWYzM2ZlMWI1MzAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTYvOGUyMDY3
LTI4M2ItNGU0ZS1iNjdlLTY5ZjMzZmUxYjUzMC8xL0ZpNUlNcHlMNk84Z25wbFky
bWFyQWtBVVhoay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGGBggrBgEF
BQcBBwEB/wR3MHUwVgQCAAEwUAMEAxf56AMEAyVyWAMEBFOugAMEA11cGAMEBZWP
AAMEArkGzAMEArkisAMEArklQAMEArkr1AMEArmQFAMEArndnDAMAwQAuf4pAwQC
uf4oMBsEAgACMBUDBQMqAJNAAwUAKgD14AMFAyoHNsAwGgYIKwYBBQUHAQgBAf8E
CzAJoAcwBQIDAOHDMA0GCSqGSIb3DQEBCwUAA4IBAQADwEj1KISJ6NfiFsZB6brF
xJ+Z+0Mf3YIN89Cn9fGEy3jhkcHMCneIz7hvqg/INZFLx8zAHRGl50a7oSNwI3es
X21VSrJZqkwROOiKOTDxUYoZ8mUqnfYPULxeaobvxP4FoeA+TvKcfeTEkJRea1uL
YxcPyJh3M2O0AWf69OIGxOiZvDEGBjVflna/Narf/2r1aaq0I0Oq8FnWbKJI2jl+
TRxi/1C0xgu2ElhM0nMxcPLI/seeQGJHbdtYe/xLc87LoGY4RJfp7Utg6tnBTj7a
o1OCTw8fI/jr5lNdj+lGssTgCOdyYnvve7fusjOxgdAq9D/I73i7YbWU3irIL9XR
-----END CERTIFICATE-----
Generated at Fri May 3 10:04:28 2024 by rpki-client on console-fra.rpki-client.org