Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
File: L89hnM7Pg29WpyAQ6C-33SQEAvk.cer (raw, json)
Hash identifier: KeUR+KP5H57zOa50ZLew8XUWVODLZLtaa5nBYqb9Fn4=
Subject key identifier: 2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC80144314C750DB5EFEB75A2532C4416
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 209095
IP: 5.182.136.0/22
IP: 2a0e:3400::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:44:31:4c:75:0d:b5:ef:eb:75:a2:53:2c:44:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0a:ac:93:73:ad:33:63:fb:30:ce:58:86:cc:
d4:f2:c5:e2:c7:d8:fb:13:3f:bb:2d:93:de:b3:25:
3b:ad:ae:35:a3:52:19:f0:67:e2:1f:5e:04:46:79:
93:06:d5:cd:9a:a8:39:0c:2b:69:e7:d0:e4:45:f6:
89:1a:79:2b:38:5b:66:11:de:18:70:07:0c:fe:70:
9c:61:20:2a:c0:cd:3d:6f:7e:19:01:6f:dc:15:15:
96:ff:81:6e:ed:ec:f6:c0:5e:aa:8f:15:33:f1:56:
e7:52:33:8e:f6:e3:23:2d:ac:2b:38:e4:ab:16:02:
53:0a:ed:22:ec:d8:af:3a:20:0f:b6:c1:85:0b:62:
83:6e:48:76:a5:44:45:ad:87:86:b9:ab:75:30:11:
22:57:25:f6:09:0a:a9:71:63:7c:a6:6b:c2:8d:99:
90:6d:4f:54:8e:f4:42:e9:4a:a2:46:36:de:fb:75:
f7:61:99:48:ee:b5:b5:91:1b:57:77:9b:ee:2c:3c:
a5:b4:f6:e5:f2:af:9d:4d:fb:50:57:c8:78:cf:f6:
d3:79:b9:f9:3c:4d:28:3f:ec:63:34:89:f1:9b:07:
42:43:8a:28:74:5e:b1:11:cf:f7:98:85:a6:81:a2:
83:fb:5c:e4:8c:c1:06:fa:46:56:7c:b0:44:b2:03:
ac:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.136.0/22
IPv6:
2a0e:3400::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209095
Signature Algorithm: sha256WithRSAEncryption
58:97:8a:35:7b:e3:9a:e2:9a:ca:5f:65:6a:57:0b:46:57:65:
7c:79:77:8a:df:35:20:da:9f:e5:2b:ae:cd:61:91:04:d5:ae:
b8:59:6e:89:63:7b:c6:cc:99:6e:c7:11:3d:d1:57:a2:b7:a4:
d0:22:c8:cc:86:7e:b2:7a:92:97:c2:28:69:13:0d:28:01:d9:
8d:f2:3c:86:7f:a5:0b:cf:74:6f:27:44:82:b3:87:1f:3a:8c:
86:a2:18:9c:37:e4:a4:7b:dc:58:7b:96:54:bc:d8:2e:00:16:
55:3f:dd:2d:ec:9a:29:8e:1c:bb:ec:ab:df:75:39:d6:6b:40:
00:7a:88:e8:0d:84:39:df:83:02:47:23:57:93:70:b6:96:f4:
87:ba:c1:ae:e2:aa:b4:43:54:c1:34:fe:12:f1:fd:22:b7:72:
a3:4f:e2:04:8c:3a:01:6a:2c:24:aa:01:f8:f2:54:bf:97:0a:
c4:e8:c0:28:01:7e:30:09:2a:3a:44:81:b7:8c:3a:7b:cc:b8:
76:60:61:4a:e1:c4:2f:bb:a7:b9:7c:0f:d0:a4:bb:8d:cc:46:
af:09:51:29:4e:5f:0d:8d:d2:81:01:ac:be:42:64:b0:b3:c8:
c3:31:3d:89:70:0d:3a:ba:f5:2d:18:7b:54:5f:91:ad:8a:fe:
e7:d4:b1:b9
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzIAUQxTHUNte/rdaJTLEQWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDIyOTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZmNmNjE5Y2NlY2Y4MzZmNTZhNzIwMTBlODJmYjdkZDI0MDQwMmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQqsk3OtM2P7MM5YhszU8sXix9j7
Ez+7LZPesyU7ra41o1IZ8GfiH14ERnmTBtXNmqg5DCtp59DkRfaJGnkrOFtmEd4Y
cAcM/nCcYSAqwM09b34ZAW/cFRWW/4Fu7ez2wF6qjxUz8VbnUjOO9uMjLawrOOSr
FgJTCu0i7NivOiAPtsGFC2KDbkh2pURFrYeGuat1MBEiVyX2CQqpcWN8pmvCjZmQ
bU9UjvRC6UqiRjbe+3X3YZlI7rW1kRtXd5vuLDyltPbl8q+dTftQV8h4z/bTebn5
PE0oP+xjNInxmwdCQ4oodF6xEc/3mIWmgaKD+1zkjMEG+kZWfLBEsgOsIwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFC/PYZzOz4NvVqcgEOgvt90kBAL5MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM0L2M1ZGM3
My05YmUyLTQ1MDMtODI4MS00YjM1MGVhY2M4NmIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQvYzVkYzcz
LTliZTItNDUwMy04MjgxLTRiMzUwZWFjYzg2Yi8xL0w4OWhuTTdQZzI5V3B5QVE2
Qy0zM1NRRUF2ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCBbaIMA0EAgACMAcDBQMqDjQAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMwxzANBgkqhkiG9w0BAQsFAAOCAQEAWJeKNXvjmuKa
yl9lalcLRldlfHl3it81INqf5SuuzWGRBNWuuFluiWN7xsyZbscRPdFXorek0CLI
zIZ+snqSl8IoaRMNKAHZjfI8hn+lC890bydEgrOHHzqMhqIYnDfkpHvcWHuWVLzY
LgAWVT/dLeyaKY4cu+yr33U51mtAAHqI6A2EOd+DAkcjV5Nwtpb0h7rBruKqtENU
wTT+EvH9Irdyo0/iBIw6AWosJKoB+PJUv5cKxOjAKAF+MAkqOkSBt4w6e8y4dmBh
SuHEL7unuXwP0KS7jcxGrwlRKU5fDY3SgQGsvkJksLPIwzE9iXANOrr1LRh7VF+R
rYr+59SxuQ==
-----END CERTIFICATE-----
Generated at Fri May 3 09:03:28 2024 by rpki-client on console-ams.rpki-client.org