Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PZTfZaO93ftVYJ8YUOFJ-CvqePc.cer
File: PZTfZaO93ftVYJ8YUOFJ-CvqePc.cer (raw, json)
Hash identifier: 9HdMB4QsN7z8bxOJ6OPdOKjdI54tAmgpmOwFAdIOqyI=
Subject key identifier: 3D:94:DF:65:A3:BD:DD:FB:55:60:9F:18:50:E1:49:F8:2B:EA:78:F7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7950C627706455D41B7C0E2836C3F98
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/PZTfZaO93ftVYJ8YUOFJ-CvqePc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:31:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.83.168.0/22
IP: 2a05:9d00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:0c:62:77:06:45:5d:41:b7:c0:e2:83:6c:3f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:31:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d94df65a3bdddfb55609f1850e149f82bea78f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:27:6b:5e:86:d0:34:4c:4e:c0:2f:8c:cc:65:
c4:62:75:35:90:1b:e1:fa:8c:94:0d:e8:0f:98:05:
19:d9:10:ee:82:fb:88:ce:cc:68:3a:3e:f2:69:dd:
7b:85:4d:6c:57:00:4c:cf:8b:ef:b5:ae:75:50:54:
e6:7a:58:76:8c:3d:98:b2:7a:41:ed:a8:af:88:c7:
0b:eb:53:22:33:2c:b8:3e:97:50:f6:5a:7b:72:6f:
86:47:74:0b:50:32:1a:9c:c5:44:5d:dd:ec:75:34:
23:87:d0:e7:b5:22:57:5e:b5:d5:f2:68:48:7b:1d:
44:8d:27:d0:c8:99:2a:58:7f:30:5c:43:45:0c:a2:
84:55:de:9b:1c:d1:b4:3d:42:44:ed:3e:16:a6:16:
0f:ee:b5:17:25:0b:1e:de:e0:bb:46:07:01:82:a1:
80:83:ea:60:db:5b:52:6d:ae:b7:27:6c:96:09:9f:
4d:a5:76:90:45:e2:f5:72:07:3e:23:90:d0:5d:3b:
fc:4a:66:82:d1:8e:d8:c3:12:36:43:6f:1c:ed:9b:
c2:f3:38:97:65:ea:ad:35:8f:eb:cb:b8:4b:19:ba:
36:71:e9:79:50:cc:c0:ec:a8:52:0a:3f:e5:74:cf:
98:20:c8:30:3f:fc:c4:65:06:36:99:21:1f:3c:42:
9f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:94:DF:65:A3:BD:DD:FB:55:60:9F:18:50:E1:49:F8:2B:EA:78:F7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/PZTfZaO93ftVYJ8YUOFJ-CvqePc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.168.0/22
IPv6:
2a05:9d00::/29
Signature Algorithm: sha256WithRSAEncryption
99:39:3d:2e:21:49:ed:aa:05:65:17:3c:ec:f8:eb:0c:eb:f0:
32:45:d9:6b:09:32:76:33:88:7e:6e:32:22:1d:1a:b9:b6:e8:
78:29:e7:41:f6:9b:08:41:11:17:6e:a0:6e:1c:1b:4d:39:e5:
09:cb:78:d7:ef:1b:5f:07:ae:0b:34:18:dd:06:47:20:c7:7a:
02:84:2f:82:38:27:dc:15:bd:56:84:a7:6b:de:7d:62:4c:d1:
f0:99:61:87:6c:a0:f4:51:31:f4:85:ee:9d:33:40:2c:29:2b:
17:cd:ca:32:d7:8d:12:b4:cc:e5:85:d6:71:75:d2:5e:c8:29:
46:d8:15:00:e7:56:2c:47:7b:e2:d4:e5:0c:18:34:94:2b:e3:
d6:f5:96:07:f9:2b:4f:18:70:7d:e7:d1:3d:39:78:ef:55:ac:
6d:7a:db:b3:82:75:49:63:8e:d5:9b:28:36:85:31:5f:f6:30:
33:b2:d8:c5:3c:9b:28:4f:33:c0:db:40:8f:66:f9:a4:1f:ce:
42:6a:10:d1:d1:2f:f4:63:ba:74:93:77:2a:a0:5e:d1:37:7c:
1a:77:73:11:a8:80:5b:3f:03:63:2d:ec:c2:ac:d7:54:19:e0:
66:cb:a5:4f:28:d1:e7:c8:5d:09:c9:1e:ea:a8:c8:69:54:0c:
23:de:c4:12
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzHlQxidwZFXUG3wOKDbD+YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDAzMTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDk0ZGY2NWEzYmRkZGZiNTU2MDlmMTg1MGUxNDlmODJiZWE3OGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ydrXobQNExOwC+MzGXEYnU1kBvh
+oyUDegPmAUZ2RDugvuIzsxoOj7yad17hU1sVwBMz4vvta51UFTmelh2jD2YsnpB
7aiviMcL61MiMyy4PpdQ9lp7cm+GR3QLUDIanMVEXd3sdTQjh9DntSJXXrXV8mhI
ex1EjSfQyJkqWH8wXENFDKKEVd6bHNG0PUJE7T4WphYP7rUXJQse3uC7RgcBgqGA
g+pg21tSba63J2yWCZ9NpXaQReL1cgc+I5DQXTv8SmaC0Y7YwxI2Q28c7ZvC8ziX
ZeqtNY/ry7hLGbo2cel5UMzA7KhSCj/ldM+YIMgwP/zEZQY2mSEfPEKfAQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFD2U32Wjvd37VWCfGFDhSfgr6nj3MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk4L2RhOWM2
Mi04ZTE2LTQ2ZGYtYmUyYi0wNmI5ZWQ5OWYxNmMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvZGE5YzYy
LThlMTYtNDZkZi1iZTJiLTA2YjllZDk5ZjE2Yy8xL1BaVGZaYU85M2Z0VllKOFlV
T0ZKLUN2cWVQYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuVOoMA0EAgACMAcDBQMqBZ0AMA0GCSqGSIb3
DQEBCwUAA4IBAQCZOT0uIUntqgVlFzzs+OsM6/AyRdlrCTJ2M4h+bjIiHRq5tuh4
KedB9psIQREXbqBuHBtNOeUJy3jX7xtfB64LNBjdBkcgx3oChC+COCfcFb1WhKdr
3n1iTNHwmWGHbKD0UTH0he6dM0AsKSsXzcoy140StMzlhdZxddJeyClG2BUA51Ys
R3vi1OUMGDSUK+PW9ZYH+StPGHB959E9OXjvVaxtetuzgnVJY47Vmyg2hTFf9jAz
stjFPJsoTzPA20CPZvmkH85CahDR0S/0Y7p0k3cqoF7RN3wad3MRqIBbPwNjLezC
rNdUGeBmy6VPKNHnyF0JyR7qqMhpVAwj3sQS
-----END CERTIFICATE-----
Generated at Fri May 3 06:59:01 2024 by rpki-client on console-ams.rpki-client.org