Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
File: H5_9juMrPjV5eNnLmSFszoE3oyQ.cer (raw, json)
Hash identifier: U93IjLndDBeYE+yaI0KrtNGdJMkIrW8dAVO2OIZPi8o=
Subject key identifier: 1F:9F:FD:8E:E3:2B:3E:35:79:78:D9:CB:99:21:6C:CE:81:37:A3:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B3226450EB525116E1CA71F74DAA5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:31:06 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.220.116.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 08:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:32:26:45:0e:b5:25:11:6e:1c:a7:1f:74:da:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:31:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f9ffd8ee32b3e357978d9cb99216cce8137a324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f5:37:a1:5d:fd:d0:2f:60:20:53:16:2d:88:
ba:b4:d5:d6:6f:d3:78:cb:39:86:ef:d9:cc:8c:40:
ed:dd:0a:9e:13:72:1b:8e:b9:66:1b:ca:2f:f0:f3:
79:75:b6:9f:34:67:83:ea:0a:cb:f2:d0:07:52:21:
3a:e2:11:c2:4a:ed:23:c4:52:ef:d5:5a:89:cf:f6:
80:fb:70:6e:ad:35:45:e5:a1:72:69:30:0c:12:8a:
99:7d:8d:e4:ad:83:fb:39:90:77:aa:a4:20:3d:ac:
47:2a:7a:98:18:29:fa:74:ed:f0:a9:2a:24:5f:04:
57:55:76:a3:43:00:77:97:25:bf:9a:7b:a4:b2:00:
66:24:01:3c:d6:2e:e2:6b:ba:b1:71:dc:52:a2:56:
2a:54:86:ab:17:47:8c:8b:63:7c:fc:c5:c2:3f:06:
4e:18:1f:41:3b:b4:ea:43:d8:c6:f1:4a:53:29:51:
fe:ed:c2:80:59:9b:a1:66:31:70:71:f5:b8:82:f0:
56:71:56:8c:f0:fc:16:13:a2:2f:6f:68:42:93:1f:
e7:7f:06:57:17:a6:d0:d7:fe:69:7a:23:27:5e:8d:
14:72:1a:49:cb:3e:1a:a3:a3:5d:df:65:96:8c:5a:
be:8a:c5:ac:ef:47:11:b6:bd:c0:e2:ef:36:cd:9c:
29:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:9F:FD:8E:E3:2B:3E:35:79:78:D9:CB:99:21:6C:CE:81:37:A3:24
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.116.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:f0:f7:94:c2:c7:aa:5b:9d:25:41:1b:c8:bb:aa:b4:2c:8f:
a1:20:52:fd:ab:49:85:0b:7f:a1:ae:f4:a1:b0:57:4d:ac:59:
21:a5:37:a1:48:28:51:57:6f:2b:5a:1d:33:7f:20:25:2c:df:
c7:30:87:7d:a0:05:fd:56:90:c8:23:0a:0d:1a:91:39:30:54:
d5:9e:70:3e:4c:84:b0:e2:62:76:17:14:80:87:29:75:95:0b:
f8:35:6c:95:22:f3:15:f9:9c:79:cf:b3:bf:83:8f:c7:21:02:
4e:c8:71:da:9b:db:53:d8:69:1f:44:61:95:00:d1:94:db:70:
10:16:5f:cf:10:37:45:f2:49:f1:33:7e:02:cd:de:fa:b5:04:
5e:af:ba:e8:20:90:e3:b4:c2:38:08:a6:91:ec:d2:ef:dd:42:
82:6e:bd:22:fc:de:95:a8:ca:4f:22:c8:48:eb:18:67:a5:61:
92:4b:33:6a:46:88:a2:19:b8:f9:11:0f:79:0f:ee:e0:29:1b:
38:1b:d4:21:62:9c:f6:e2:ab:aa:37:d1:19:20:49:28:82:cb:
5e:b1:18:ee:87:5d:97:54:d8:e2:71:4e:14:34:80:ba:8e:22:
45:f3:ad:54:14:94:26:06:a9:48:45:cc:8e:dc:30:87:76:8f:
a7:7b:bc:e5
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzGSzImRQ61JRFuHKcfdNqlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTgzMTA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjlmZmQ4ZWUzMmIzZTM1Nzk3OGQ5Y2I5OTIxNmNjZTgxMzdhMzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/U3oV390C9gIFMWLYi6tNXWb9N4
yzmG79nMjEDt3QqeE3IbjrlmG8ov8PN5dbafNGeD6grL8tAHUiE64hHCSu0jxFLv
1VqJz/aA+3BurTVF5aFyaTAMEoqZfY3krYP7OZB3qqQgPaxHKnqYGCn6dO3wqSok
XwRXVXajQwB3lyW/mnuksgBmJAE81i7ia7qxcdxSolYqVIarF0eMi2N8/MXCPwZO
GB9BO7TqQ9jG8UpTKVH+7cKAWZuhZjFwcfW4gvBWcVaM8PwWE6Ivb2hCkx/nfwZX
F6bQ1/5peiMnXo0UchpJyz4ao6Nd32WWjFq+isWs70cRtr3A4u82zZwpNwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFB+f/Y7jKz41eXjZy5khbM6BN6MkMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEzLzAzZmZk
MC03ZThiLTQzZmUtOGVlZS1hYWU2MzhkYmIxYzEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTMvMDNmZmQw
LTdlOGItNDNmZS04ZWVlLWFhZTYzOGRiYjFjMS8xL0g1XzlqdU1yUGpWNWVObkxt
U0Zzem9FM295US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW9x0MA0GCSqGSIb3DQEBCwUAA4IBAQAO8PeU
wseqW50lQRvIu6q0LI+hIFL9q0mFC3+hrvShsFdNrFkhpTehSChRV28rWh0zfyAl
LN/HMId9oAX9VpDIIwoNGpE5MFTVnnA+TISw4mJ2FxSAhyl1lQv4NWyVIvMV+Zx5
z7O/g4/HIQJOyHHam9tT2GkfRGGVANGU23AQFl/PEDdF8knxM34Czd76tQRer7ro
IJDjtMI4CKaR7NLv3UKCbr0i/N6VqMpPIshI6xhnpWGSSzNqRoiiGbj5EQ95D+7g
KRs4G9QhYpz24quqN9EZIEkogstesRjuh12XVNjicU4UNIC6jiJF861UFJQmBqlI
RcyO3DCHdo+ne7zl
-----END CERTIFICATE-----
Generated at Thu Apr 25 11:12:18 2024 by rpki-client on console-fra.rpki-client.org