Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer
File: N1UunJZN5v9U4JnHEVXBod7IpzA.cer (raw, json)
Hash identifier: UFkqYOss8ekITtKe1PwnWivcyocD3a6ogJxE7lNRTa4=
Subject key identifier: 37:55:2E:9C:96:4D:E6:FF:54:E0:99:C7:11:55:C1:A1:DE:C8:A7:30
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B716E71C6B739A8AAE5BD2649A16F1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:30:05 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 209543
IP: 45.92.204.0/22
IP: 185.150.36.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:16:e7:1c:6b:73:9a:8a:ae:5b:d2:64:9a:16:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=37552e9c964de6ff54e099c71155c1a1dec8a730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:53:9f:b1:f1:7c:75:ba:35:36:e6:3a:6e:5d:
0e:f7:36:52:dd:aa:48:59:f9:2b:f9:71:cc:e7:50:
a2:ba:fd:11:a5:bd:50:cd:d1:68:1e:49:b7:6d:02:
40:25:be:75:2e:e2:26:98:7b:c2:38:d2:a6:ff:1b:
bd:6a:7e:61:fc:4e:cb:c2:ea:21:03:1f:63:af:eb:
17:be:08:f2:90:3b:8a:c5:01:db:e4:12:31:e0:5b:
3a:b9:a4:1b:98:a9:87:6b:c4:fb:bc:2f:68:93:40:
43:af:29:f2:f6:68:58:99:cc:77:8b:ca:87:25:45:
29:9f:a3:57:ab:9f:77:ec:bb:4a:a9:04:d9:64:f3:
ab:5f:ab:9b:4e:6f:98:b5:51:f7:1d:79:c5:4c:dd:
37:7f:82:91:ce:68:03:62:27:eb:9c:a7:94:3b:fe:
62:f3:14:78:d8:bd:fe:08:9a:8a:b7:aa:82:4a:61:
d4:2d:97:7f:0b:97:d5:d3:47:26:59:f9:38:3f:86:
fc:a9:3a:5d:05:67:e2:2e:d3:eb:4c:ad:34:d3:37:
5f:76:ce:d4:2d:0c:8c:81:6c:8e:77:c6:63:d7:30:
db:40:a8:4e:1a:16:45:8c:9b:1f:1f:9a:14:b4:72:
5c:20:0f:c7:f2:41:90:c2:5f:05:a4:ec:7a:fa:08:
82:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:55:2E:9C:96:4D:E6:FF:54:E0:99:C7:11:55:C1:A1:DE:C8:A7:30
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.204.0/22
185.150.36.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209543
Signature Algorithm: sha256WithRSAEncryption
7f:68:c7:4a:83:d8:4e:25:64:1e:47:73:9e:bd:92:d9:45:9e:
1d:90:8c:9b:ee:a7:18:c2:12:f0:e0:13:d6:fc:36:87:8c:8d:
ba:0a:b7:fe:db:b0:01:07:1d:24:85:20:01:b0:7f:59:d8:f5:
61:e5:07:5a:78:0b:7c:35:a7:07:41:d0:5b:09:5f:53:cf:c2:
8a:9e:94:0f:14:a9:9a:33:1d:13:af:64:15:b0:dd:c2:89:84:
87:09:21:1e:a6:7c:e3:2f:33:b1:50:61:7c:25:5b:a4:d3:d8:
7d:d8:c7:bf:de:69:46:b0:03:4a:6b:87:67:9c:ca:50:59:08:
fe:20:e4:c5:d8:f7:8b:9f:fb:08:67:4f:99:fb:7f:9b:7b:e2:
cb:f4:3e:4d:25:04:c5:0c:e3:04:c0:33:27:a4:5b:8f:6c:b4:
ba:75:a8:cf:dd:64:a8:19:32:b0:32:59:b4:bf:09:41:3a:2a:
92:2c:5f:39:ed:5b:4c:da:48:e2:d7:b1:35:fd:ca:57:53:9c:
f1:c0:a8:7e:8e:78:ef:b4:1d:31:d0:d2:65:74:a3:4f:77:42:
4e:45:92:37:17:f0:ae:67:50:c2:08:aa:15:fc:a6:0e:74:07:
39:61:1c:71:7a:30:b0:a3:d4:16:69:f5:a4:14:76:ab:51:15:
88:23:58:3f
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAYzDtxbnHGtzmoquW9JkmhbxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDYzMDA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzU1MmU5Yzk2NGRlNmZmNTRlMDk5YzcxMTU1YzFhMWRlYzhhNzMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FOfsfF8dbo1NuY6bl0O9zZS3apI
Wfkr+XHM51Ciuv0Rpb1QzdFoHkm3bQJAJb51LuImmHvCONKm/xu9an5h/E7Lwuoh
Ax9jr+sXvgjykDuKxQHb5BIx4Fs6uaQbmKmHa8T7vC9ok0BDryny9mhYmcx3i8qH
JUUpn6NXq5937LtKqQTZZPOrX6ubTm+YtVH3HXnFTN03f4KRzmgDYifrnKeUO/5i
8xR42L3+CJqKt6qCSmHULZd/C5fV00cmWfk4P4b8qTpdBWfiLtPrTK000zdfds7U
LQyMgWyOd8Zj1zDbQKhOGhZFjJsfH5oUtHJcIA/H8kGQwl8FpOx6+giCUwIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFDdVLpyWTeb/VOCZxxFVwaHeyKcwMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UwL2RjNDNm
Yi00NjU2LTRhZjktYWFkMi1lZTI4YTY1YzhhMjIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTAvZGM0M2Zi
LTQ2NTYtNGFmOS1hYWQyLWVlMjhhNjVjOGEyMi8xL04xVXVuSlpONXY5VTRKbkhF
VlhCb2Q3SXB6QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQCLVzMAwQCuZYkMBoGCCsGAQUFBwEIAQH/BAsw
CaAHMAUCAwMyhzANBgkqhkiG9w0BAQsFAAOCAQEAf2jHSoPYTiVkHkdznr2S2UWe
HZCMm+6nGMIS8OAT1vw2h4yNugq3/tuwAQcdJIUgAbB/Wdj1YeUHWngLfDWnB0HQ
WwlfU8/Cip6UDxSpmjMdE69kFbDdwomEhwkhHqZ84y8zsVBhfCVbpNPYfdjHv95p
RrADSmuHZ5zKUFkI/iDkxdj3i5/7CGdPmft/m3viy/Q+TSUExQzjBMAzJ6Rbj2y0
unWoz91kqBkysDJZtL8JQToqkixfOe1bTNpI4texNf3KV1Oc8cCofo5477QdMdDS
ZXSjT3dCTkWSNxfwrmdQwgiqFfymDnQHOWEccXowsKPUFmn1pBR2q1EViCNYPw==
-----END CERTIFICATE-----
Generated at Fri May 3 13:41:12 2024 by rpki-client on console-ams.rpki-client.org