Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
File: Ps1TxmQkw_Npyojuevdq2yXhhFE.cer (raw, json)
Hash identifier: 1iNU6V6As21tNa55jP+73BAmROu0hpfql05+EhBYBHk=
Subject key identifier: 3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA99267CF69E36687E40F034FA1A9F97
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 14:34:43 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 87.120.208.0/21
IP: 87.121.28.0/22
IP: 94.156.254.0/23
IP: 176.56.192.0/19
IP: 185.159.86.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:26:7c:f6:9e:36:68:7e:40:f0:34:fa:1a:9f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 14:34:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b1:b9:ee:2b:4a:17:94:66:00:4e:2e:78:f5:
09:2c:6a:e7:83:2c:30:37:bd:96:84:4e:cb:fe:c4:
53:45:05:5f:b3:2d:ba:69:ea:ee:8e:30:30:a6:2d:
a9:d2:8e:39:de:cd:19:0a:e0:8a:f4:07:4c:d5:62:
cc:1b:56:b2:df:43:8d:b5:f2:31:67:9f:8d:66:01:
eb:56:fa:e6:11:b5:e0:7b:51:2e:de:16:84:a8:95:
7d:90:c2:8c:88:16:f0:63:81:ab:85:6a:c3:ea:f8:
ac:bf:c6:ea:b7:2a:4b:b1:98:78:9b:50:7e:7a:47:
3f:a7:37:6c:1d:1d:e2:cf:76:d9:3a:06:53:60:6e:
fa:1d:2d:a4:b3:f8:09:ee:6d:7a:55:f6:8b:72:28:
cb:c9:6e:30:ea:b9:f3:01:68:dd:6d:62:4b:15:c9:
d9:db:d7:16:a0:e3:20:79:e7:b7:bc:32:6b:80:9f:
fc:bd:f5:60:c2:c7:20:34:da:0d:ec:64:13:f3:76:
0a:4f:b0:bf:92:23:75:e2:ec:50:db:3b:59:2b:6b:
db:1a:eb:a7:60:59:1b:1d:3a:ac:36:d0:d6:e1:38:
f4:a5:eb:be:51:18:8c:43:48:7d:7a:6e:d0:e2:b9:
21:71:b7:1d:db:12:8f:99:78:e1:66:22:12:89:68:
88:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.208.0/21
87.121.28.0/22
94.156.254.0/23
176.56.192.0/19
185.159.86.0/24
Signature Algorithm: sha256WithRSAEncryption
77:52:7c:b0:94:16:2c:fd:90:21:95:82:c9:24:fb:52:b9:23:
17:de:9c:9a:85:c0:9d:d0:22:c7:ca:df:73:98:db:b9:fc:e5:
fe:5a:8d:81:ed:49:22:09:6a:13:02:38:fa:57:97:80:ed:f2:
92:26:0b:19:e8:ed:67:9e:46:8b:d1:93:0b:53:ef:a9:6e:0c:
e7:ad:a2:9a:8d:4b:45:18:91:71:41:5e:bd:ba:e6:52:b9:7f:
66:ac:d4:ae:2a:91:c7:b5:ce:4b:67:c9:d3:92:92:1e:9e:68:
2f:94:97:57:2b:7a:66:bf:3a:d5:70:88:a9:0e:8c:81:4f:9c:
81:53:21:86:cf:a1:47:c2:4a:c8:bd:c1:1d:9a:45:92:95:58:
bd:19:ee:14:62:4e:82:ad:3f:c0:63:a3:1a:1c:1f:c5:b3:5c:
13:67:78:74:82:a5:d5:3b:98:c7:f5:9e:a0:13:81:9c:d9:31:
59:2c:a0:b2:68:23:02:69:88:e3:20:ea:2e:75:f8:20:a5:f7:
c8:de:04:cc:3f:29:2f:0f:4c:dc:fd:be:65:6f:95:e3:c1:98:
40:cf:21:86:58:2c:72:d2:2b:fe:b3:7e:16:d1:be:58:77:b9:
29:fe:9a:45:eb:88:79:9c:69:8a:d0:c7:4c:68:f8:22:47:51:
18:13:bc:49
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgISAYzKmSZ89p42aH5A8DT6Gp+XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTQzNDQzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZWNkNTNjNjY0MjRjM2YzNjljYTg4ZWU3YWY3NmFkYjI1ZTE4NDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37G57itKF5RmAE4uePUJLGrngyww
N72WhE7L/sRTRQVfsy26aerujjAwpi2p0o453s0ZCuCK9AdM1WLMG1ay30ONtfIx
Z5+NZgHrVvrmEbXge1Eu3haEqJV9kMKMiBbwY4GrhWrD6visv8bqtypLsZh4m1B+
ekc/pzdsHR3iz3bZOgZTYG76HS2ks/gJ7m16VfaLcijLyW4w6rnzAWjdbWJLFcnZ
29cWoOMgeee3vDJrgJ/8vfVgwscgNNoN7GQT83YKT7C/kiN14uxQ2ztZK2vbGuun
YFkbHTqsNtDW4Tj0peu+URiMQ0h9em7Q4rkhcbcd2xKPmXjhZiISiWiIPQIDAQAB
o4ICnDCCApgwHQYDVR0OBBYEFD7NU8ZkJMPzacqI7nr3atsl4YRRMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA5L2U2NWFk
YS00ZDRhLTQwNGQtODcwMC1jMjI1NjgwNGU5MjIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkvZTY1YWRh
LTRkNGEtNDA0ZC04NzAwLWMyMjU2ODA0ZTkyMi8xL1BzMVR4bVFrd19OcHlvanVl
dmRxMnlYaGhGRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUF
BwEHAQH/BCgwJjAkBAIAATAeAwQDV3jQAwQCV3kcAwQBXpz+AwQFsDjAAwQAuZ9W
MA0GCSqGSIb3DQEBCwUAA4IBAQB3UnywlBYs/ZAhlYLJJPtSuSMX3pyahcCd0CLH
yt9zmNu5/OX+Wo2B7UkiCWoTAjj6V5eA7fKSJgsZ6O1nnkaL0ZMLU++pbgznraKa
jUtFGJFxQV69uuZSuX9mrNSuKpHHtc5LZ8nTkpIenmgvlJdXK3pmvzrVcIipDoyB
T5yBUyGGz6FHwkrIvcEdmkWSlVi9Ge4UYk6CrT/AY6MaHB/Fs1wTZ3h0gqXVO5jH
9Z6gE4Gc2TFZLKCyaCMCaYjjIOoudfggpffI3gTMPykvD0zc/b5lb5XjwZhAzyGG
WCxy0iv+s34W0b5Yd7kp/ppF64h5nGmK0MdMaPgiR1EYE7xJ
-----END CERTIFICATE-----
Generated at Fri May 3 09:06:07 2024 by rpki-client on console-ams.rpki-client.org