Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer
File: G02ANz4-NNAKhbhBKNQFOZvPikU.cer (raw, json)
Hash identifier: Q5K4rfc7rGPZbQMyDSvasN/8bKXnh2lK1+NV9w6CvzE=
Subject key identifier: 1B:4D:80:37:3E:3E:34:D0:0A:85:B8:41:28:D4:05:39:9B:CF:8A:45
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D0D9477BE39A0868B10B4A5641CCCB66D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 15 Jan 2024 14:44:10 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.237.93.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0d:94:77:be:39:a0:86:8b:10:b4:a5:64:1c:cc:b6:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 15 14:44:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b4d80373e3e34d00a85b84128d405399bcf8a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5a:a1:b4:9e:5b:63:72:9b:03:0e:57:a9:ab:
3f:d7:57:90:88:4f:6c:c8:d0:cf:b6:f3:d9:df:cb:
e3:4a:4f:2e:fb:dd:4f:30:08:75:07:4f:1b:59:c2:
13:61:47:33:1b:60:3a:4f:38:a7:75:7e:fb:4f:bf:
19:8d:29:e5:e0:ec:a7:a1:70:61:80:12:e4:55:5a:
9a:d8:8e:54:3b:35:f8:ed:54:9d:96:50:8b:ea:37:
80:d2:ce:5a:57:e1:91:c2:85:20:ff:f2:2b:bc:c3:
b4:c3:5d:28:6a:1a:17:c5:27:b1:52:8e:ca:95:bb:
b1:30:43:df:0e:1e:fc:71:9b:ef:a8:1a:e5:81:c3:
8e:ad:61:3d:15:28:1c:2c:cc:63:54:6e:02:69:98:
bc:0d:ab:0e:9a:d4:c0:05:6d:d5:78:fb:4d:bc:35:
83:ea:58:f3:a8:fa:ac:49:1f:1b:c3:4f:07:eb:ae:
14:c4:86:c5:75:90:45:02:10:83:15:c5:02:03:8e:
4a:27:ec:ee:87:b5:8e:60:bb:fa:b1:b6:65:8c:41:
d4:cb:1f:c0:41:f2:2a:4b:6a:1e:6b:6f:f4:ce:5e:
af:17:bb:70:ff:a0:ed:99:b5:fe:a7:af:95:13:b2:
25:27:4f:e4:dd:ad:fe:4d:d3:27:a2:c1:55:95:f8:
0f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4D:80:37:3E:3E:34:D0:0A:85:B8:41:28:D4:05:39:9B:CF:8A:45
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.93.0/24
Signature Algorithm: sha256WithRSAEncryption
23:a3:ef:8c:18:13:0b:8b:14:e6:ae:7f:6d:a4:9b:20:9c:36:
a0:ff:82:58:a0:fc:87:bb:10:8a:fb:61:23:39:97:02:ad:aa:
37:e4:38:bf:d4:e8:dd:da:b1:67:a4:32:00:c6:04:52:33:5b:
e6:71:a1:f0:07:a2:1d:17:1d:95:06:e7:c6:c2:8b:d1:0e:c3:
cd:4f:f3:d1:9d:69:a5:e8:b7:d6:e5:48:ff:de:47:12:53:fb:
06:75:db:a6:3b:b7:83:aa:95:38:04:44:33:40:39:c1:9c:ee:
fa:6e:54:d1:60:2e:7f:57:24:5d:9d:01:b5:b3:93:7c:66:f9:
a0:0d:1e:6b:a6:85:6d:a8:2b:85:a1:a4:98:24:de:4e:34:4c:
23:e7:56:03:c1:8d:8f:17:b6:71:17:28:43:c1:98:f6:c5:be:
3a:10:6f:d5:02:cd:ef:3c:95:5e:c3:47:c5:03:05:9c:82:1e:
33:41:8e:c8:94:58:56:23:7e:cd:40:3a:82:5f:b0:18:64:7c:
b5:c8:02:b5:29:03:90:35:42:5e:6d:8b:1d:68:d5:2b:92:72:
4d:3a:8f:80:1d:55:72:a1:24:05:63:56:b8:2c:34:05:20:10:
5e:23:83:59:64:af:f7:f2:2c:58:fa:43:fe:47:f6:9b:bf:6c:
d8:c8:19:58
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAY0NlHe+OaCGixC0pWQczLZtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTE1MTQ0NDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjRkODAzNzNlM2UzNGQwMGE4NWI4NDEyOGQ0MDUzOTliY2Y4YTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklqhtJ5bY3KbAw5Xqas/11eQiE9s
yNDPtvPZ38vjSk8u+91PMAh1B08bWcITYUczG2A6TzindX77T78ZjSnl4OynoXBh
gBLkVVqa2I5UOzX47VSdllCL6jeA0s5aV+GRwoUg//IrvMO0w10oahoXxSexUo7K
lbuxMEPfDh78cZvvqBrlgcOOrWE9FSgcLMxjVG4CaZi8DasOmtTABW3VePtNvDWD
6ljzqPqsSR8bw08H664UxIbFdZBFAhCDFcUCA45KJ+zuh7WOYLv6sbZljEHUyx/A
QfIqS2oea2/0zl6vF7tw/6DtmbX+p6+VE7IlJ0/k3a3+TdMnosFVlfgP1wIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFBtNgDc+PjTQCoW4QSjUBTmbz4pFMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNmLzI1NzRk
Mi1jYjBjLTRiMmEtYmU4My04ZTAwYmRhM2IyNDUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2YvMjU3NGQy
LWNiMGMtNGIyYS1iZTgzLThlMDBiZGEzYjI0NS8xL0cwMkFOejQtTk5BS2hiaEJL
TlFGT1p2UGlrVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAue1dMA0GCSqGSIb3DQEBCwUAA4IBAQAjo++M
GBMLixTmrn9tpJsgnDag/4JYoPyHuxCK+2EjOZcCrao35Di/1Ojd2rFnpDIAxgRS
M1vmcaHwB6IdFx2VBufGwovRDsPNT/PRnWml6LfW5Uj/3kcSU/sGddumO7eDqpU4
BEQzQDnBnO76blTRYC5/VyRdnQG1s5N8ZvmgDR5rpoVtqCuFoaSYJN5ONEwj51YD
wY2PF7ZxFyhDwZj2xb46EG/VAs3vPJVew0fFAwWcgh4zQY7IlFhWI37NQDqCX7AY
ZHy1yAK1KQOQNUJebYsdaNUrknJNOo+AHVVyoSQFY1a4LDQFIBBeI4NZZK/38ixY
+kP+R/abv2zYyBlY
-----END CERTIFICATE-----
Generated at Fri May 3 13:06:52 2024 by rpki-client on console-fra.rpki-client.org