Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/I7KazNTA1fX4N36n9GNDt2Brq3w.cer
File: I7KazNTA1fX4N36n9GNDt2Brq3w.cer (raw, json)
Hash identifier: 6elbLEeAidm+WCuzGS3px6phe8oYsILIfB5CU7HvuLs=
Subject key identifier: 23:B2:9A:CC:D4:C0:D5:F5:F8:37:7E:A7:F4:63:43:B7:60:6B:AB:7C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64AC9B535869BA8F58974EAEAB05D9F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6a/811db9-cbe0-4a89-a220-1174a428036b/1/I7KazNTA1fX4N36n9GNDt2Brq3w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6a/811db9-cbe0-4a89-a220-1174a428036b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:30:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 206459
IP: 185.164.160.0/24
IP: 2a12:bd40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:c9:b5:35:86:9b:a8:f5:89:74:ea:ea:b0:5d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:30:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=23b29accd4c0d5f5f8377ea7f46343b7606bab7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f2:00:8d:00:70:79:3d:2b:de:39:f9:67:d4:
2c:65:44:7f:38:c0:12:ac:e1:59:f8:ff:19:ff:ec:
3f:14:24:85:6d:98:79:8d:2b:cf:10:40:c6:42:72:
f0:94:ad:9e:a8:fe:5b:c8:79:e9:5e:48:70:2c:0e:
dc:ca:b4:89:32:4e:f3:39:5c:d0:37:af:cd:08:c3:
87:a6:f6:34:53:9c:69:ca:94:e9:88:41:44:ae:81:
bf:06:3b:3b:c3:cc:d2:3a:d9:23:bf:14:1c:89:54:
73:23:08:1d:dc:be:d7:48:32:0e:87:30:1a:cb:fc:
98:3d:2e:d6:68:5b:9c:a8:16:d5:00:e9:e3:0b:4d:
57:4e:23:cd:f9:61:2e:ec:33:a4:3e:cc:65:37:9d:
b4:75:c6:6b:e6:5c:5c:92:d9:83:60:1b:5a:78:a8:
33:54:76:ca:69:72:5c:39:51:5c:50:40:d5:2b:0d:
14:c4:98:d6:a6:35:b3:76:8f:82:4d:94:d1:36:ad:
33:5a:16:85:4b:4d:ca:2e:9d:e8:07:75:80:29:db:
01:96:44:9c:97:e1:27:c4:eb:66:33:78:19:5c:36:
2b:bb:d2:25:6f:d5:ad:be:5f:96:45:b6:db:1a:aa:
68:dc:40:ae:5c:e7:0a:fd:ae:8a:fd:35:64:0a:72:
c6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B2:9A:CC:D4:C0:D5:F5:F8:37:7E:A7:F4:63:43:B7:60:6B:AB:7C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/811db9-cbe0-4a89-a220-1174a428036b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/811db9-cbe0-4a89-a220-1174a428036b/1/I7KazNTA1fX4N36n9GNDt2Brq3w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.160.0/24
IPv6:
2a12:bd40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206459
Signature Algorithm: sha256WithRSAEncryption
0e:aa:75:84:c1:f0:fb:41:9b:17:53:b9:0c:22:a2:a3:f7:f4:
5b:7d:c7:ff:b6:24:53:39:9d:51:1c:80:51:8f:98:7b:dc:80:
27:92:4b:e9:14:88:e2:39:fe:f5:0f:0e:0f:3c:75:d7:e0:a0:
67:6a:cf:7f:c5:1b:19:26:86:cf:83:45:f0:3a:fd:32:8e:7f:
3b:0a:e8:b6:e8:93:d9:98:c5:df:75:01:c6:8f:1f:56:09:ac:
6a:92:7b:dc:aa:40:04:3b:54:30:b4:03:85:65:68:e8:f5:18:
39:a4:09:3a:f6:e8:7d:e2:be:6e:7a:ff:de:45:83:e5:6b:7a:
7d:0f:07:0b:81:29:88:b9:4e:45:c2:23:4d:d0:49:8b:f5:73:
ad:56:74:a9:60:92:00:ec:5d:3b:e9:51:6a:b6:f6:01:d3:c8:
54:07:c5:c1:76:98:b5:19:96:e9:88:31:48:08:e3:7e:3e:42:
17:31:31:92:aa:ef:23:26:87:af:9c:61:15:86:ed:e8:36:c5:
1c:8e:6e:02:9f:53:27:93:3c:2d:e9:bc:e4:15:f6:a4:92:57:
7b:43:d5:3d:a8:40:16:43:36:30:af:80:fe:75:50:38:fc:95:
6b:61:99:6a:3f:a3:34:49:62:cf:a7:36:82:51:c6:a3:4a:4a:
f6:25:d1:60
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzGSsm1NYabqPWJdOrqsF2fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTgzMDM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyM2IyOWFjY2Q0YzBkNWY1ZjgzNzdlYTdmNDYzNDNiNzYwNmJhYjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfIAjQBweT0r3jn5Z9QsZUR/OMAS
rOFZ+P8Z/+w/FCSFbZh5jSvPEEDGQnLwlK2eqP5byHnpXkhwLA7cyrSJMk7zOVzQ
N6/NCMOHpvY0U5xpypTpiEFEroG/Bjs7w8zSOtkjvxQciVRzIwgd3L7XSDIOhzAa
y/yYPS7WaFucqBbVAOnjC01XTiPN+WEu7DOkPsxlN520dcZr5lxcktmDYBtaeKgz
VHbKaXJcOVFcUEDVKw0UxJjWpjWzdo+CTZTRNq0zWhaFS03KLp3oB3WAKdsBlkSc
l+EnxOtmM3gZXDYru9Ilb9Wtvl+WRbbbGqpo3ECuXOcK/a6K/TVkCnLG/QIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFCOymszUwNX1+Dd+p/RjQ7dga6t8MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZhLzgxMWRi
OS1jYmUwLTRhODktYTIyMC0xMTc0YTQyODAzNmIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEvODExZGI5
LWNiZTAtNGE4OS1hMjIwLTExNzRhNDI4MDM2Yi8xL0k3S2F6TlRBMWZYNE4zNm45
R05EdDJCcnEzdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAuaSgMA0EAgACMAcDBQMqEr1AMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMmezANBgkqhkiG9w0BAQsFAAOCAQEADqp1hMHw+0Gb
F1O5DCKio/f0W33H/7YkUzmdURyAUY+Ye9yAJ5JL6RSI4jn+9Q8ODzx11+CgZ2rP
f8UbGSaGz4NF8Dr9Mo5/OwrotuiT2ZjF33UBxo8fVgmsapJ73KpABDtUMLQDhWVo
6PUYOaQJOvbofeK+bnr/3kWD5Wt6fQ8HC4EpiLlORcIjTdBJi/VzrVZ0qWCSAOxd
O+lRarb2AdPIVAfFwXaYtRmW6YgxSAjjfj5CFzExkqrvIyaHr5xhFYbt6DbFHI5u
Ap9TJ5M8Lem85BX2pJJXe0PVPahAFkM2MK+A/nVQOPyVa2GZaj+jNEliz6c2glHG
o0pK9iXRYA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:06:39 2024 by rpki-client on console-fra.rpki-client.org