Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Goki00gTCNvUwqtucOran3X222g.cer
File: Goki00gTCNvUwqtucOran3X222g.cer (raw, json)
Hash identifier: exL1D50job3HpWg3EYNlIPBxc2wAsIBA7WHtgLx2D0k=
Subject key identifier: 1A:89:22:D3:48:13:08:DB:D4:C2:AB:6E:70:EA:DA:9F:75:F6:DB:68
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D3A82BB56A33621E86F386C23B48469F3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 24 Jan 2024 08:07:42 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.77.100.0/22
IP: 2a03:53e0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3a:82:bb:56:a3:36:21:e8:6f:38:6c:23:b4:84:69:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 24 08:07:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a8922d3481308dbd4c2ab6e70eada9f75f6db68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dc:f0:a1:b4:89:05:f2:53:5c:7d:d4:cd:49:
02:d4:dc:2d:87:f0:70:39:91:ce:3a:58:3c:4d:53:
b1:2e:13:96:74:30:f3:2d:ed:43:53:a4:74:fe:75:
e6:d8:d6:51:97:a1:f8:60:4c:b4:c0:57:5b:17:c6:
fe:2c:39:66:e3:a0:ea:f4:ff:57:85:82:8a:a7:21:
88:3e:21:50:71:f2:fb:f1:db:62:a2:7f:1f:18:1f:
ad:b9:b4:f9:e3:0a:01:1c:90:c5:e5:8a:e5:69:7c:
f1:bb:86:7a:18:9f:1c:27:25:2a:a9:14:e2:63:2b:
e6:02:e4:85:e4:ea:6c:29:04:0f:66:e5:22:8a:8f:
97:48:f2:b2:39:b3:ff:1a:8a:a3:21:67:ea:c2:36:
d9:6b:f5:3c:21:35:af:b0:21:03:c3:23:63:3c:29:
aa:d4:9a:dc:29:4b:4f:3d:9f:c6:21:3f:53:a4:e0:
e4:6f:bd:ce:2e:54:19:d3:c6:3e:0d:ca:40:17:40:
16:9f:be:50:0a:27:c3:5e:c7:67:1c:ef:3b:67:54:
e8:c2:7c:d5:63:02:d8:d8:ca:47:93:49:80:b2:31:
c4:cc:a1:25:f6:01:1b:d5:f9:55:46:92:71:cc:70:
e4:6d:6d:91:ce:65:3b:47:be:cf:ce:96:a5:fa:d3:
e0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:89:22:D3:48:13:08:DB:D4:C2:AB:6E:70:EA:DA:9F:75:F6:DB:68
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.100.0/22
IPv6:
2a03:53e0::/32
Signature Algorithm: sha256WithRSAEncryption
8c:68:94:9f:65:cc:a2:01:10:43:ea:5c:19:4a:04:00:b5:b3:
9a:fe:c4:8c:7a:6c:ea:9e:74:db:a5:20:64:e1:10:73:01:d8:
bf:82:e1:71:cd:45:0c:a1:39:c0:8b:ff:f6:25:96:7d:d9:7d:
c9:da:7c:55:da:19:99:03:14:b1:4f:b9:61:eb:00:f5:82:2f:
ae:e8:a6:ec:a6:aa:c3:c6:0b:5e:80:ec:91:98:d9:10:0f:e8:
fd:cb:63:1c:51:5b:7c:43:d2:78:37:b3:d6:69:04:bf:a4:dc:
a2:81:34:33:28:be:7b:57:b6:98:13:5f:76:88:ab:b5:35:ed:
17:0e:80:0b:30:89:ec:0b:c4:54:9a:5e:17:83:de:f6:e9:b1:
18:8b:a3:25:eb:34:e2:a7:1f:bc:53:7f:b3:1a:86:c2:68:e9:
a9:15:5d:f8:26:b8:70:fa:23:52:40:a3:9a:e7:3c:a1:18:fe:
19:f6:92:80:bf:9d:23:c1:77:d7:ac:17:b7:3f:21:ed:fa:4f:
a3:0f:81:4f:2f:38:1e:db:da:81:83:e4:76:74:a8:12:8f:08:
ff:57:29:84:0a:5e:fc:56:d5:ca:e6:e8:42:11:b1:b2:94:66:
e4:b3:e0:b9:e5:15:c5:cb:4a:99:5e:5c:ad:62:4d:39:43:a7:
a8:de:86:20
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAY06grtWozYh6G84bCO0hGnzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTI0MDgwNzQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTg5MjJkMzQ4MTMwOGRiZDRjMmFiNmU3MGVhZGE5Zjc1ZjZkYjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydzwobSJBfJTXH3UzUkC1Nwth/Bw
OZHOOlg8TVOxLhOWdDDzLe1DU6R0/nXm2NZRl6H4YEy0wFdbF8b+LDlm46Dq9P9X
hYKKpyGIPiFQcfL78dtion8fGB+tubT54woBHJDF5YrlaXzxu4Z6GJ8cJyUqqRTi
YyvmAuSF5OpsKQQPZuUiio+XSPKyObP/GoqjIWfqwjbZa/U8ITWvsCEDwyNjPCmq
1JrcKUtPPZ/GIT9TpODkb73OLlQZ08Y+DcpAF0AWn75QCifDXsdnHO87Z1TownzV
YwLY2MpHk0mAsjHEzKEl9gEb1flVRpJxzHDkbW2RzmU7R77Pzpal+tPgTQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFBqJItNIEwjb1MKrbnDq2p919ttoMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QwLzFiOGE5
ZC1kM2RlLTQxYmItODJjOC03YWUyNjM5MjI4MjIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAvMWI4YTlk
LWQzZGUtNDFiYi04MmM4LTdhZTI2MzkyMjgyMi8xL0dva2kwMGdUQ052VXdxdHVj
T3JhbjNYMjIyZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuU1kMA0EAgACMAcDBQAqA1PgMA0GCSqGSIb3
DQEBCwUAA4IBAQCMaJSfZcyiARBD6lwZSgQAtbOa/sSMemzqnnTbpSBk4RBzAdi/
guFxzUUMoTnAi//2JZZ92X3J2nxV2hmZAxSxT7lh6wD1gi+u6KbspqrDxgtegOyR
mNkQD+j9y2McUVt8Q9J4N7PWaQS/pNyigTQzKL57V7aYE192iKu1Ne0XDoALMIns
C8RUml4Xg9726bEYi6Ml6zTipx+8U3+zGobCaOmpFV34Jrhw+iNSQKOa5zyhGP4Z
9pKAv50jwXfXrBe3PyHt+k+jD4FPLzge29qBg+R2dKgSjwj/VymECl78VtXK5uhC
EbGylGbks+C55RXFy0qZXlytYk05Q6eo3oYg
-----END CERTIFICATE-----
Generated at Fri May 3 02:49:24 2024 by rpki-client on console-fra.rpki-client.org