Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IZUnwiTwCiiy9MtOExLXSNXKUWk.cer
File: IZUnwiTwCiiy9MtOExLXSNXKUWk.cer (raw, json)
Hash identifier: OlGmfayiplEm47tpw0QNUlvVBQPpVBOFGkzoyTAWKqY=
Subject key identifier: 21:95:27:C2:24:F0:0A:28:B2:F4:CB:4E:13:12:D7:48:D5:CA:51:69
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94E5A1FE08C8EF047D0C15B397C46D9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/8540db-f901-433b-81bb-97d55f391561/1/IZUnwiTwCiiy9MtOExLXSNXKUWk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/8540db-f901-433b-81bb-97d55f391561/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:33:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208092
IP: 193.9.156.0/23
IP: 193.16.40.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:5a:1f:e0:8c:8e:f0:47:d0:c1:5b:39:7c:46:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:33:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=219527c224f00a28b2f4cb4e1312d748d5ca5169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3c:a0:af:37:7f:5b:5b:29:55:65:34:51:aa:
cc:91:e8:35:9c:be:a1:38:ca:90:84:db:03:41:39:
60:ff:f6:15:f9:cd:74:14:93:71:b8:d6:51:f6:21:
03:7f:60:98:e6:10:f5:94:40:e4:33:3e:20:19:52:
e9:78:55:4b:d5:b9:dc:4e:5b:51:64:02:9b:a3:1c:
aa:0b:3c:0a:90:bf:94:1a:c2:ba:ef:b7:2b:57:bd:
c9:f1:cf:95:54:40:71:82:54:14:06:cf:97:46:4a:
fe:ff:a3:61:33:89:bc:44:dc:e5:15:9d:b8:34:ba:
4a:41:fa:10:f0:80:3a:ea:c1:77:fe:f2:07:45:35:
ed:e2:17:c6:34:6a:46:83:02:80:85:62:2a:62:6b:
e8:52:03:07:f2:ec:31:ef:9c:37:63:d7:40:8f:7a:
89:99:01:92:e2:76:6c:29:33:75:1f:d6:97:db:75:
17:c8:a5:fa:f2:55:98:85:f2:6d:9b:79:e9:d5:3e:
c4:56:d7:b5:d4:b4:63:df:7c:61:8d:84:d5:e8:5d:
71:9a:28:96:7b:f3:de:09:9d:da:47:4c:17:24:6b:
74:15:52:ec:81:88:38:aa:ea:78:14:c0:19:63:3b:
54:00:3b:36:bb:15:f8:ec:b7:19:ad:00:a6:b6:43:
83:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:95:27:C2:24:F0:0A:28:B2:F4:CB:4E:13:12:D7:48:D5:CA:51:69
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8540db-f901-433b-81bb-97d55f391561/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8540db-f901-433b-81bb-97d55f391561/1/IZUnwiTwCiiy9MtOExLXSNXKUWk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.9.156.0/23
193.16.40.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208092
Signature Algorithm: sha256WithRSAEncryption
a1:a7:d9:db:ce:46:6c:4d:d9:5f:6d:f3:19:f8:02:51:71:70:
16:6b:e4:12:8b:bf:be:bc:21:4a:36:7d:85:9a:e6:c0:f9:70:
d8:20:59:be:42:4c:fe:38:8e:fe:d3:1f:45:16:15:62:8c:83:
de:a9:7a:5a:ee:d6:e4:37:8e:6e:b5:60:2d:3c:21:ad:0c:79:
f9:4a:41:24:7d:85:f0:47:21:38:e4:b0:ee:90:83:f7:90:f8:
2c:e3:f6:be:c7:a2:63:e6:70:76:1f:15:bb:20:7a:e0:da:66:
50:8e:5e:e2:de:eb:49:ec:58:99:9f:2c:a3:86:0f:cd:9a:da:
69:cb:a9:1b:50:fd:3c:db:eb:74:0d:8a:62:5d:37:69:4e:60:
3e:a0:98:9a:72:94:2b:58:c3:c5:62:d0:b9:45:01:23:5f:44:
67:56:89:69:06:a8:2f:6b:91:44:04:fa:26:33:ec:66:a7:bd:
ff:d1:de:2b:f5:7a:ba:ec:d1:af:66:6d:38:81:22:5b:c5:30:
fd:41:14:0d:3a:44:93:8a:6e:62:fc:7d:84:c6:65:be:73:3b:
30:95:12:2e:98:2f:c0:47:94:08:09:12:db:ea:cd:5b:68:e3:
29:c0:e9:e9:95:c7:f2:3c:93:9d:f2:74:a0:13:a0:40:dc:41:
c9:76:50:fd
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAYzJTlof4IyO8EfQwVs5fEbZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDgzMzI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMTk1MjdjMjI0ZjAwYTI4YjJmNGNiNGUxMzEyZDc0OGQ1Y2E1MTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDygrzd/W1spVWU0UarMkeg1nL6h
OMqQhNsDQTlg//YV+c10FJNxuNZR9iEDf2CY5hD1lEDkMz4gGVLpeFVL1bncTltR
ZAKboxyqCzwKkL+UGsK677crV73J8c+VVEBxglQUBs+XRkr+/6NhM4m8RNzlFZ24
NLpKQfoQ8IA66sF3/vIHRTXt4hfGNGpGgwKAhWIqYmvoUgMH8uwx75w3Y9dAj3qJ
mQGS4nZsKTN1H9aX23UXyKX68lWYhfJtm3np1T7EVte11LRj33xhjYTV6F1xmiiW
e/PeCZ3aR0wXJGt0FVLsgYg4qup4FMAZYztUADs2uxX47LcZrQCmtkODjQIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFCGVJ8Ik8AoosvTLThMS10jVylFpMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdiLzg1NDBk
Yi1mOTAxLTQzM2ItODFiYi05N2Q1NWYzOTE1NjEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvODU0MGRi
LWY5MDEtNDMzYi04MWJiLTk3ZDU1ZjM5MTU2MS8xL0laVW53aVR3Q2lpeTlNdE9F
eExYU05YS1VXay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQBwQmcAwQBwRAoMBoGCCsGAQUFBwEIAQH/BAsw
CaAHMAUCAwMs3DANBgkqhkiG9w0BAQsFAAOCAQEAoafZ285GbE3ZX23zGfgCUXFw
FmvkEou/vrwhSjZ9hZrmwPlw2CBZvkJM/jiO/tMfRRYVYoyD3ql6Wu7W5DeObrVg
LTwhrQx5+UpBJH2F8EchOOSw7pCD95D4LOP2vseiY+Zwdh8VuyB64NpmUI5e4t7r
SexYmZ8so4YPzZraacupG1D9PNvrdA2KYl03aU5gPqCYmnKUK1jDxWLQuUUBI19E
Z1aJaQaoL2uRRAT6JjPsZqe9/9HeK/V6uuzRr2ZtOIEiW8Uw/UEUDTpEk4puYvx9
hMZlvnM7MJUSLpgvwEeUCAkS2+rNW2jjKcDp6ZXH8jyTnfJ0oBOgQNxByXZQ/Q==
-----END CERTIFICATE-----
Generated at Sat Apr 20 09:59:44 2024 by rpki-client on console-fra.rpki-client.org