Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer
File: PrRw_U1nQhL_yCqZNvP-JUvszmY.cer (raw, json)
Hash identifier: f9vZkzdoJGu365kvh+rDm4Th0bndOOTz5dgmVsHi+8s=
Subject key identifier: 3E:B4:70:FD:4D:67:42:12:FF:C8:2A:99:36:F3:FE:25:4B:EC:CE:66
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA29BBC057F29198F3A6BE4DF00D1039
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:33:01 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 48360
IP: 185.77.104.0/22
IP: 2a05:62c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:bb:c0:57:f2:91:98:f3:a6:be:4d:f0:0d:10:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:33:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3eb470fd4d674212ffc82a9936f3fe254becce66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:30:4b:e7:c6:d6:f9:4a:98:cd:32:df:21:26:
e0:9f:90:d4:36:4b:62:c8:f3:a5:35:1d:d9:f5:57:
37:c0:dd:f0:62:0a:24:0f:9c:28:72:8f:4c:12:03:
51:55:97:e3:32:8e:6b:f6:88:7e:98:85:95:72:c0:
99:57:02:03:42:93:b9:3b:51:b8:6a:9e:6f:06:7a:
84:9f:3e:ac:9f:8f:bf:18:cc:f9:c5:5f:f0:12:13:
2f:4d:82:ad:0d:ff:fa:eb:af:91:dd:38:b6:8c:ce:
b9:b4:3d:ad:10:2a:cb:d0:c6:21:35:87:5d:1e:07:
dd:b9:d5:e5:34:16:de:d8:d2:18:a5:ee:09:18:f0:
d0:94:93:cb:ef:9c:87:1a:06:11:f2:05:2b:8d:af:
20:69:bf:bf:de:ad:3f:58:4e:fb:c1:ce:14:69:8b:
03:74:f2:f8:05:ed:22:28:7d:42:8f:cf:e6:31:3e:
be:cb:82:f2:2b:71:fd:49:eb:ed:8a:7d:53:5b:9a:
bc:30:e5:a3:87:94:a1:c7:4f:20:d2:78:0f:d0:aa:
31:e1:36:01:e5:7d:dd:92:93:2e:12:78:95:48:93:
4a:87:6d:95:2e:cd:d2:f4:af:11:0e:7d:50:e1:c5:
29:fb:09:80:c1:fa:91:b2:0e:57:43:27:3e:4d:c6:
97:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B4:70:FD:4D:67:42:12:FF:C8:2A:99:36:F3:FE:25:4B:EC:CE:66
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.104.0/22
IPv6:
2a05:62c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48360
Signature Algorithm: sha256WithRSAEncryption
43:63:a6:aa:d7:65:c6:29:09:49:82:ad:1f:5c:27:b0:eb:dc:
bf:9e:0f:8c:18:dc:e2:8e:ed:bc:c3:e5:f7:ce:a3:a1:64:ed:
d8:ad:0c:62:e9:ee:0f:bd:47:4f:47:32:eb:3c:62:6d:36:9c:
b9:b2:13:ec:01:0e:0a:16:08:9f:f7:b4:f9:84:06:5c:fb:3a:
04:08:53:b3:47:63:9a:42:77:57:7e:ff:0c:9c:11:21:1c:ef:
19:e8:7c:87:e1:cf:e9:2f:9d:4d:ef:30:c1:30:5b:d0:fd:cb:
93:67:1b:51:d4:fd:6c:1c:b4:b2:40:9b:19:f9:e6:9e:d1:3b:
d2:a9:ae:72:71:30:98:47:29:68:81:bf:fb:b2:71:b7:ce:b5:
27:03:7f:ac:b9:2e:9d:43:f1:b1:92:67:d5:6c:bc:ef:76:bd:
35:cc:ab:41:80:8d:16:24:12:3a:95:bc:60:a7:c6:26:9e:07:
5d:3a:fa:91:04:96:98:4a:3e:f0:18:d1:c2:42:36:11:9a:64:
85:94:80:8f:53:ee:57:2e:b9:2d:a4:e9:42:c5:dd:9b:0b:eb:
3a:d5:b4:4c:93:ad:10:57:40:5b:b5:89:cf:9e:5c:9e:1b:12:
7b:a2:24:a6:45:d6:ee:48:39:4a:65:ed:c3:1c:90:38:bf:65:
68:36:41:61
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzKKbvAV/KRmPOmvk3wDRA5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTIzMzAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZWI0NzBmZDRkNjc0MjEyZmZjODJhOTkzNmYzZmUyNTRiZWNjZTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDBL58bW+UqYzTLfISbgn5DUNkti
yPOlNR3Z9Vc3wN3wYgokD5woco9MEgNRVZfjMo5r9oh+mIWVcsCZVwIDQpO5O1G4
ap5vBnqEnz6sn4+/GMz5xV/wEhMvTYKtDf/666+R3Ti2jM65tD2tECrL0MYhNYdd
HgfdudXlNBbe2NIYpe4JGPDQlJPL75yHGgYR8gUrja8gab+/3q0/WE77wc4UaYsD
dPL4Be0iKH1Cj8/mMT6+y4LyK3H9Sevtin1TW5q8MOWjh5Shx08g0ngP0Kox4TYB
5X3dkpMuEniVSJNKh22VLs3S9K8RDn1Q4cUp+wmAwfqRsg5XQyc+TcaXvQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFD60cP1NZ0IS/8gqmTbz/iVL7M5mMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE2Lzc0NGU1
My04ZGU2LTQ2NzEtOWY4MC01ZjAxNTczMGQ4MTEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvNzQ0ZTUz
LThkZTYtNDY3MS05ZjgwLTVmMDE1NzMwZDgxMS8xL1ByUndfVTFuUWhMX3lDcVpO
dlAtSlV2c3ptWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuU1oMA0EAgACMAcDBQMqBWLAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwC86DANBgkqhkiG9w0BAQsFAAOCAQEAQ2OmqtdlxikJ
SYKtH1wnsOvcv54PjBjc4o7tvMPl986joWTt2K0MYunuD71HT0cy6zxibTacubIT
7AEOChYIn/e0+YQGXPs6BAhTs0djmkJ3V37/DJwRIRzvGeh8h+HP6S+dTe8wwTBb
0P3Lk2cbUdT9bBy0skCbGfnmntE70qmucnEwmEcpaIG/+7Jxt861JwN/rLkunUPx
sZJn1Wy873a9NcyrQYCNFiQSOpW8YKfGJp4HXTr6kQSWmEo+8BjRwkI2EZpkhZSA
j1PuVy65LaTpQsXdmwvrOtW0TJOtEFdAW7WJz55cnhsSe6IkpkXW7kg5SmXtwxyQ
OL9laDZBYQ==
-----END CERTIFICATE-----
Generated at Fri May 3 02:57:27 2024 by rpki-client on console-fra.rpki-client.org