Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Fo8OK6LQk0M6S2EpVye5m7FF93s.cer
File: Fo8OK6LQk0M6S2EpVye5m7FF93s.cer (raw, json)
Hash identifier: 1bVol8nwyF5r1mGTG21q6zvH0VeQ5+ztwGMA5UZ0OAs=
Subject key identifier: 16:8F:0E:2B:A2:D0:93:43:3A:4B:61:29:57:27:B9:9B:B1:45:F7:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DAC5A972C63F2001487A9C9BB5A337CE1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 15 Feb 2024 10:40:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 198095
IP: 64.187.108.0/24
IP: 176.65.72.0/21
IP: 185.69.224.0/22
IP: 2a03:c480::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ac:5a:97:2c:63:f2:00:14:87:a9:c9:bb:5a:33:7c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 15 10:40:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=168f0e2ba2d093433a4b61295727b99bb145f77b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8f:40:51:74:6b:d0:69:9a:7f:a3:71:66:d4:
c5:43:77:aa:af:18:cb:fa:8e:14:d7:7f:9e:7a:dc:
39:ce:58:17:7e:91:8c:a5:41:93:0d:a3:a3:82:5c:
8a:bc:95:24:88:6b:85:62:bb:68:3a:4c:bd:17:a7:
c8:ce:26:32:ce:a9:de:f4:ae:77:2a:be:2c:8c:7c:
e4:9e:66:fd:de:df:73:19:ca:66:d4:19:de:56:2d:
23:89:4c:2a:5b:ff:c8:82:e9:09:ff:bf:1a:db:89:
fb:6d:cd:42:a3:46:e5:7a:bc:e9:8c:a2:8f:8c:71:
86:48:33:fc:68:a8:26:50:80:fe:50:9f:1a:fe:c4:
90:bb:c0:00:5c:a5:35:8d:b1:37:81:f1:32:6a:bf:
12:d1:e5:ef:00:5c:d0:3c:5d:eb:74:34:6a:ba:12:
b2:00:02:44:46:45:88:fd:0d:02:89:42:50:63:e3:
4b:e3:fe:65:6f:fd:6d:bd:40:65:84:6a:78:f0:6a:
6d:cb:4b:d0:99:81:fa:5b:39:4d:26:6f:ea:33:d0:
c6:b1:2c:07:c1:60:55:f1:e4:02:14:ca:53:6e:52:
bf:fa:74:8d:89:be:2d:ce:da:08:5e:39:79:56:90:
62:5a:86:ad:20:03:ed:22:25:97:cb:da:85:2c:fc:
4b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:8F:0E:2B:A2:D0:93:43:3A:4B:61:29:57:27:B9:9B:B1:45:F7:7B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.187.108.0/24
176.65.72.0/21
185.69.224.0/22
IPv6:
2a03:c480::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198095
Signature Algorithm: sha256WithRSAEncryption
1a:95:70:25:99:e5:c7:45:ee:f8:59:3f:7a:50:3d:01:bb:d1:
7b:13:b1:b5:71:01:dd:ee:95:b0:66:29:54:47:67:db:e6:2b:
e9:7f:98:7b:cb:e0:09:7c:e2:a7:4e:9b:0a:96:81:9a:09:73:
32:cc:f0:1d:83:24:df:3a:df:12:b7:e5:3c:1f:d2:5f:65:20:
3b:84:c7:d0:33:35:43:44:18:d6:95:b3:cf:d9:8e:bf:c8:55:
6f:bb:1d:9b:24:d7:ef:37:57:81:a6:14:d2:bc:95:64:fa:96:
22:a2:fa:8a:c3:75:dc:78:cf:fa:1c:1a:25:af:06:d6:73:f2:
88:81:e0:63:5f:bb:19:dc:c6:31:c7:d0:bd:b5:07:fa:d3:1a:
b3:83:f4:46:13:92:40:68:ba:5c:43:4c:0e:9f:bb:8e:3d:61:
db:db:14:79:46:09:04:77:c5:cd:51:48:1e:ee:f5:ec:ae:5f:
92:1f:2a:b5:61:e0:56:04:e4:f9:ee:3a:c3:24:28:89:fc:df:
69:aa:7b:c8:00:74:7c:11:f3:eb:ed:88:39:0d:d8:8e:22:79:
80:24:d4:4d:c8:82:16:ac:a4:bf:dc:60:4a:57:d4:ce:5b:3b:
d1:e6:46:5a:fe:13:a2:ce:01:b2:ab:56:8a:89:2d:2f:eb:bb:
a7:7e:76:60
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgISAY2sWpcsY/IAFIepybtaM3zhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMjE1MTA0MDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjhmMGUyYmEyZDA5MzQzM2E0YjYxMjk1NzI3Yjk5YmIxNDVmNzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAro9AUXRr0Gmaf6NxZtTFQ3eqrxjL
+o4U13+eetw5zlgXfpGMpUGTDaOjglyKvJUkiGuFYrtoOky9F6fIziYyzqne9K53
Kr4sjHzknmb93t9zGcpm1BneVi0jiUwqW//IgukJ/78a24n7bc1Co0blerzpjKKP
jHGGSDP8aKgmUID+UJ8a/sSQu8AAXKU1jbE3gfEyar8S0eXvAFzQPF3rdDRquhKy
AAJERkWI/Q0CiUJQY+NL4/5lb/1tvUBlhGp48Gpty0vQmYH6WzlNJm/qM9DGsSwH
wWBV8eQCFMpTblK/+nSNib4tztoIXjl5VpBiWoatIAPtIiWXy9qFLPxLcQIDAQAB
o4ICuzCCArcwHQYDVR0OBBYEFBaPDiui0JNDOkthKVcnuZuxRfd7MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcxLzA4MDhi
Mi0xNjMzLTRjMGQtYmNiYy1mNmZjZjczY2VlNzAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzEvMDgwOGIy
LTE2MzMtNGMwZC1iY2JjLWY2ZmNmNzNjZWU3MC8xL0ZvOE9LNkxRazBNNlMyRXBW
eWU1bTdGRjkzcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF
BwEHAQH/BCswKTAYBAIAATASAwQAQLtsAwQDsEFIAwQCuUXgMA0EAgACMAcDBQAq
A8SAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMFzzANBgkqhkiG9w0BAQsFAAOC
AQEAGpVwJZnlx0Xu+Fk/elA9AbvRexOxtXEB3e6VsGYpVEdn2+Yr6X+Ye8vgCXzi
p06bCpaBmglzMszwHYMk3zrfErflPB/SX2UgO4TH0DM1Q0QY1pWzz9mOv8hVb7sd
myTX7zdXgaYU0ryVZPqWIqL6isN13HjP+hwaJa8G1nPyiIHgY1+7GdzGMcfQvbUH
+tMas4P0RhOSQGi6XENMDp+7jj1h29sUeUYJBHfFzVFIHu717K5fkh8qtWHgVgTk
+e46wyQoifzfaap7yAB0fBHz6+2IOQ3YjiJ5gCTUTciCFqykv9xgSlfUzls70eZG
Wv4Tos4BsqtWioktL+u7p352YA==
-----END CERTIFICATE-----
Generated at Fri May 3 02:48:28 2024 by rpki-client on console-fra.rpki-client.org