Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
File: KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer (raw, json)
Hash identifier: ugCX3hX25WC3JSfaDgWl5q12atWuY7sk2qJ/mxjU5Fg=
Subject key identifier: 28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DC14A798A2A77F132C12A33FCC90BA2D5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 19 Feb 2024 12:14:59 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 203377
AS: 207508
AS: 210981
IP: 2.59.117.0/24
IP: 2.59.119.0/24
IP: 45.80.174.0/24
IP: 185.136.205.0 -- 185.136.206.255
IP: 185.207.39.0/24
IP: 194.147.216.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c1:4a:79:8a:2a:77:f1:32:c1:2a:33:fc:c9:0b:a2:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 19 12:14:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d5:da:04:08:dc:7a:4b:c7:6b:d1:9a:43:cb:
48:0f:f9:31:e6:55:3c:fe:0f:89:37:98:fa:d6:ec:
c3:d9:c2:83:b2:e3:1d:df:ed:a6:7d:2f:ba:bf:c7:
f0:3b:c6:21:81:41:2c:81:c4:7b:5a:14:cc:b0:28:
a2:12:e8:62:c0:14:dc:78:e8:f1:43:83:bc:48:e1:
10:93:f3:02:8b:c8:d9:31:95:63:ad:85:4e:21:30:
0a:9b:aa:2c:cd:f6:91:1f:24:7b:e5:96:48:88:43:
7a:24:66:cc:7d:0c:58:87:2c:c5:e4:28:90:79:43:
85:b4:5e:9c:b8:3b:2b:61:81:b5:dd:e8:4e:97:c6:
6a:14:64:3b:f6:a0:f7:7e:92:5f:8f:d6:ef:b5:16:
5a:08:14:99:d3:29:2c:a2:bf:ec:c5:b0:2e:f4:ae:
3d:c8:8e:b7:12:cb:2b:f7:a0:4b:6f:ea:4a:8c:1d:
79:fa:ca:f9:c0:74:17:d4:48:e7:fc:45:4b:69:dc:
1e:3e:95:91:3b:5f:d6:a0:83:0d:7f:aa:85:ea:fb:
9c:0e:44:a8:95:21:e7:a7:be:b3:5b:cc:ce:ad:87:
05:f4:09:82:34:4c:97:16:00:de:f1:8d:5a:77:e0:
70:bc:dc:d0:0a:cc:e3:fe:d2:16:e8:f8:57:8f:a2:
82:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.117.0/24
2.59.119.0/24
45.80.174.0/24
185.136.205.0-185.136.206.255
185.207.39.0/24
194.147.216.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203377
207508
210981
Signature Algorithm: sha256WithRSAEncryption
1b:a4:19:6c:25:fb:09:90:cd:e9:92:6f:e1:9c:d4:01:f0:b7:
ea:e4:f0:e1:75:be:c2:da:69:70:6e:3f:a4:75:86:82:7a:c4:
78:33:00:69:0c:de:ec:69:b6:9c:aa:0a:d8:bd:bf:b0:8f:00:
03:57:a6:c2:1b:7b:49:88:ed:e9:58:a0:2b:4f:7e:0b:87:d5:
fb:f7:7b:ae:5a:8b:76:18:0b:3c:c0:b2:74:c3:c0:70:52:6d:
f3:da:21:df:99:33:17:e6:8b:24:68:fd:e2:b0:0b:a6:13:01:
fe:ed:77:35:9b:42:2c:36:80:34:8a:72:e7:d9:64:43:4f:38:
1b:28:85:8f:24:ad:2a:7d:b7:a0:ac:b6:08:49:87:f7:cb:ca:
48:32:d9:30:ec:19:4d:89:44:04:dd:49:b8:e6:04:5b:3e:a6:
c1:87:cc:6d:1e:8f:48:70:69:42:0b:91:f1:07:16:e9:24:f2:
7a:55:27:c2:49:47:06:97:d6:46:81:29:9c:4b:61:64:66:17:
a5:02:73:4a:1f:c4:10:55:43:91:25:e2:f3:3d:5f:b2:e8:15:
28:50:15:c8:95:23:9b:d9:8c:df:6a:d0:67:a0:fe:aa:24:0c:
fd:dd:9f:a0:74:2b:51:51:0a:eb:a3:56:c6:74:65:ab:d3:9e:
05:af:25:01
-----BEGIN CERTIFICATE-----
MIIFxDCCBKygAwIBAgISAY3BSnmKKnfxMsEqM/zJC6LVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMjE5MTIxNDU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOGZkNjZlNDNhMTA0NjMzYjI3YmFjNTM5Yjk4YmRmOGViZmFjOWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNXaBAjcekvHa9GaQ8tID/kx5lU8
/g+JN5j61uzD2cKDsuMd3+2mfS+6v8fwO8YhgUEsgcR7WhTMsCiiEuhiwBTceOjx
Q4O8SOEQk/MCi8jZMZVjrYVOITAKm6oszfaRHyR75ZZIiEN6JGbMfQxYhyzF5CiQ
eUOFtF6cuDsrYYG13ehOl8ZqFGQ79qD3fpJfj9bvtRZaCBSZ0yksor/sxbAu9K49
yI63Essr96BLb+pKjB15+sr5wHQX1Ejn/EVLadwePpWRO1/WoIMNf6qF6vucDkSo
lSHnp76zW8zOrYcF9AmCNEyXFgDe8Y1ad+BwvNzQCszj/tIW6PhXj6KCmQIDAQAB
o4IC0DCCAswwHQYDVR0OBBYEFCj9ZuQ6EEYzsnusU5uYvfjr+smuMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIyLzhlZDNi
Ny1iYjJkLTRmNGQtOWRiNi0yNjc2NjlmMzU2NDgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjIvOGVkM2I3
LWJiMmQtNGY0ZC05ZGI2LTI2NzY2OWYzNTY0OC8xL0tQMW01RG9RUmpPeWU2eFRt
NWk5LU92NnlhNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEUGCCsGAQUF
BwEHAQH/BDYwNDAyBAIAATAsAwQAAjt1AwQAAjt3AwQALVCuMAwDBAC5iM0DBAC5
iM4DBAC5zycDBADCk9gwJAYIKwYBBQUHAQgBAf8EFTAToBEwDwIDAxpxAgMDKpQC
AwM4JTANBgkqhkiG9w0BAQsFAAOCAQEAG6QZbCX7CZDN6ZJv4ZzUAfC36uTw4XW+
wtppcG4/pHWGgnrEeDMAaQze7Gm2nKoK2L2/sI8AA1emwht7SYjt6VigK09+C4fV
+/d7rlqLdhgLPMCydMPAcFJt89oh35kzF+aLJGj94rALphMB/u13NZtCLDaANIpy
59lkQ084GyiFjyStKn23oKy2CEmH98vKSDLZMOwZTYlEBN1JuOYEWz6mwYfMbR6P
SHBpQguR8QcW6STyelUnwklHBpfWRoEpnEthZGYXpQJzSh/EEFVDkSXi8z1fsugV
KFAVyJUjm9mM32rQZ6D+qiQM/d2foHQrUVEK66NWxnRlq9OeBa8lAQ==
-----END CERTIFICATE-----
Generated at Fri May 3 13:39:43 2024 by rpki-client on console-ams.rpki-client.org