Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer
File: J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer (raw, json)
Hash identifier: A3mpxNvqrL1ySTfy9F/jUrmoN0LlUk/t6AgnlSh3/+M=
Subject key identifier: 27:F1:30:B6:F4:5F:00:F7:C1:D1:35:B6:C9:3B:20:E6:90:41:2C:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BC4A7A8A031E4E133C73806A8115E4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 200930
IP: 193.58.180.0/22
IP: 2a0d:6ac0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:4a:7a:8a:03:1e:4e:13:3c:73:80:6a:81:15:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27f130b6f45f00f7c1d135b6c93b20e690412cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bc:fe:7a:4d:d1:0a:33:4c:e2:a0:9c:ed:5d:
d6:8e:1d:56:9a:53:e3:91:c5:e5:b8:aa:89:8b:fa:
4b:4d:14:fc:8b:d3:fa:87:9c:5b:fb:62:35:67:fd:
5b:1e:09:cf:75:da:6e:0a:b9:b1:56:39:24:25:c2:
0d:62:ea:ca:96:8e:18:b9:a6:05:98:bc:fc:34:c7:
77:12:fb:d9:f8:b7:94:b6:d8:e0:9a:47:ba:7d:10:
4e:2f:fb:6e:3a:f2:52:20:85:25:c9:e9:5a:c7:1d:
ba:30:ba:af:b9:91:c7:6f:99:1d:3e:78:8e:47:0d:
51:88:4f:1b:08:e9:3c:fa:45:90:be:78:86:a9:cc:
67:c3:b3:83:c4:f4:3f:b0:d0:50:e7:89:6c:f1:98:
0d:58:39:e3:df:2d:59:30:c3:be:e3:3c:b1:14:ed:
ac:a5:e3:10:35:f5:d3:d4:12:38:49:13:05:c1:92:
a1:12:8d:0a:1d:a9:55:55:9e:36:60:b4:60:10:c2:
57:bd:11:d6:d4:f1:a5:31:2c:e8:d5:9d:f9:e3:c5:
ef:d7:4f:15:64:81:10:36:48:47:62:0a:45:af:8a:
78:3f:39:a6:de:e4:fc:86:ba:4c:70:54:53:85:65:
ad:bc:41:36:df:27:f4:b4:08:2d:14:74:f2:a9:c5:
bf:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F1:30:B6:F4:5F:00:F7:C1:D1:35:B6:C9:3B:20:E6:90:41:2C:FC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.180.0/22
IPv6:
2a0d:6ac0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200930
Signature Algorithm: sha256WithRSAEncryption
75:4a:e3:4e:5e:7a:6b:4c:3d:20:48:32:b3:42:60:12:50:a0:
a6:cf:d4:2c:8a:93:ed:70:14:a8:67:ed:b3:46:f1:90:88:8b:
9e:97:a2:65:7b:0d:c6:2d:94:41:66:1e:99:e8:0a:a5:4f:34:
84:f7:f4:d5:ad:f8:e6:a3:88:01:b2:52:f7:dc:f2:cc:39:90:
32:57:a6:26:ce:38:c6:77:b9:56:b7:9d:36:a7:93:65:29:a0:
99:bd:ba:3b:09:4d:4a:42:15:b6:86:e6:53:a0:1f:b5:0a:86:
62:c1:2f:96:b7:89:7e:8a:72:17:de:d0:a9:25:02:d0:b1:cc:
77:0a:84:93:bb:bf:f2:10:87:a3:2d:e7:be:9c:a1:0e:11:8c:
bd:ad:50:19:19:dc:3a:70:03:fe:96:e1:94:cb:66:41:2f:9b:
e7:14:bd:b5:f4:00:64:88:fa:81:af:ec:1a:1e:3e:ac:76:7b:
af:ca:13:32:f3:1f:35:37:47:7f:b2:32:ca:5e:55:be:b1:1d:
98:92:5c:65:0a:c4:bc:26:6f:c9:a1:63:60:37:00:b2:ec:aa:
d2:97:0f:55:f8:10:3a:4c:0b:b0:d6:04:39:07:d2:bf:31:74:
5c:1d:27:8d:40:fb:e7:36:fa:6e:40:02:7d:8c:ae:a5:f3:8d:
9c:5a:fc:9b
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzJvEp6igMeThM8c4BqgRXkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTAzMzI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyN2YxMzBiNmY0NWYwMGY3YzFkMTM1YjZjOTNiMjBlNjkwNDEyY2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLz+ek3RCjNM4qCc7V3Wjh1WmlPj
kcXluKqJi/pLTRT8i9P6h5xb+2I1Z/1bHgnPddpuCrmxVjkkJcINYurKlo4YuaYF
mLz8NMd3EvvZ+LeUttjgmke6fRBOL/tuOvJSIIUlyelaxx26MLqvuZHHb5kdPniO
Rw1RiE8bCOk8+kWQvniGqcxnw7ODxPQ/sNBQ54ls8ZgNWDnj3y1ZMMO+4zyxFO2s
peMQNfXT1BI4SRMFwZKhEo0KHalVVZ42YLRgEMJXvRHW1PGlMSzo1Z3548Xv108V
ZIEQNkhHYgpFr4p4Pzmm3uT8hrpMcFRThWWtvEE23yf0tAgtFHTyqcW/hQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFCfxMLb0XwD3wdE1tsk7IOaQQSz8MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JkL2VhZDRh
MC0yNTIxLTRhYmItYWMyZC0wN2RiZDkwMGM0YWQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmQvZWFkNGEw
LTI1MjEtNGFiYi1hYzJkLTA3ZGJkOTAwYzRhZC8xL0pfRXd0dlJmQVBmQjBUVzJ5
VHNnNXBCQkxQdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCwTq0MA0EAgACMAcDBQMqDWrAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMQ4jANBgkqhkiG9w0BAQsFAAOCAQEAdUrjTl56a0w9
IEgys0JgElCgps/ULIqT7XAUqGfts0bxkIiLnpeiZXsNxi2UQWYemegKpU80hPf0
1a345qOIAbJS99zyzDmQMlemJs44xne5VredNqeTZSmgmb26OwlNSkIVtobmU6Af
tQqGYsEvlreJfopyF97QqSUC0LHMdwqEk7u/8hCHoy3nvpyhDhGMva1QGRncOnAD
/pbhlMtmQS+b5xS9tfQAZIj6ga/sGh4+rHZ7r8oTMvMfNTdHf7Iyyl5VvrEdmJJc
ZQrEvCZvyaFjYDcAsuyq0pcPVfgQOkwLsNYEOQfSvzF0XB0njUD75zb6bkACfYyu
pfONnFr8mw==
-----END CERTIFICATE-----
Generated at Fri May 3 02:51:54 2024 by rpki-client on console-fra.rpki-client.org