Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PzTUjYQaUqQifUn6PvhbpavyIkg.cer
File: PzTUjYQaUqQifUn6PvhbpavyIkg.cer (raw, json)
Hash identifier: Ea8AHwaufeTxsoMQqYbSvBNgkyNS2sdiT6hktGs4NU0=
Subject key identifier: 3F:34:D4:8D:84:1A:52:A4:22:7D:49:FA:3E:F8:5B:A5:AB:F2:22:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E7A752809FA23DC9015351CEDAE9103F3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/eb7037-deed-4a23-b3a4-0458c15cfd0b/1/PzTUjYQaUqQifUn6PvhbpavyIkg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/eb7037-deed-4a23-b3a4-0458c15cfd0b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 26 Mar 2024 11:11:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 207318
IP: 185.139.6.0/24
IP: 2a11:d580::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7a:75:28:09:fa:23:dc:90:15:35:1c:ed:ae:91:03:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 26 11:11:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f34d48d841a52a4227d49fa3ef85ba5abf22248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:15:ca:e6:da:a5:bf:81:09:a0:68:a5:17:44:
56:b9:27:2c:33:6a:ea:bc:c7:43:c6:5c:b3:e5:63:
2f:9f:9b:1f:99:a2:b3:21:51:7a:61:93:3f:6b:22:
b1:fa:40:99:d2:c8:4f:77:82:87:ba:46:3a:b7:9b:
c9:61:0c:da:74:01:d4:3d:b7:91:2c:0e:1e:69:64:
b2:b9:d5:8d:47:c4:0e:21:2b:19:d1:9c:e0:83:27:
93:d1:c9:b9:38:2c:e0:f2:55:33:7c:a7:48:8f:10:
c2:3e:2f:3d:a6:36:a5:92:ba:fb:08:53:1e:2b:0c:
d7:38:0b:85:23:85:b7:73:f5:14:dc:60:92:78:7e:
41:6d:20:e6:81:07:db:bb:5f:55:8b:71:e4:31:46:
24:ce:5f:74:c5:e3:42:68:ca:bd:fc:51:66:1a:1c:
86:c0:fa:9d:c9:07:ed:82:7e:6d:bc:7a:a7:e3:b2:
7e:a5:5a:c9:5d:82:10:54:66:db:ad:59:a6:46:ed:
2c:bb:dd:7a:e7:b5:75:60:35:a9:a8:fb:29:1b:e5:
e6:53:82:c2:5d:d4:94:95:f5:4f:e5:77:c7:00:d5:
cc:11:5c:f6:05:df:28:fc:62:97:c2:30:a0:fa:33:
73:ca:f0:26:f7:56:bc:73:19:01:a9:b8:11:4c:db:
17:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:34:D4:8D:84:1A:52:A4:22:7D:49:FA:3E:F8:5B:A5:AB:F2:22:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/eb7037-deed-4a23-b3a4-0458c15cfd0b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/eb7037-deed-4a23-b3a4-0458c15cfd0b/1/PzTUjYQaUqQifUn6PvhbpavyIkg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.6.0/24
IPv6:
2a11:d580::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207318
Signature Algorithm: sha256WithRSAEncryption
79:82:96:e9:49:63:65:17:76:66:e4:9b:a7:f2:5b:dd:da:14:
56:f9:77:f0:61:61:ac:9d:cb:49:4f:aa:5d:ac:56:a9:a6:be:
3d:86:66:dd:ba:8f:af:7c:54:17:a1:d9:c8:c9:5f:9b:fa:22:
8c:62:90:0a:82:80:c2:78:9e:97:87:5f:a3:25:04:19:96:fa:
fe:eb:d9:2d:65:ae:19:09:86:2b:2e:cd:54:72:5d:46:1f:6a:
4b:fb:46:7c:90:32:d4:3f:f3:f1:78:f5:85:68:01:7c:3c:45:
6e:5c:9c:ec:a7:2c:45:5d:a0:e6:0d:bd:88:b1:18:9d:15:a0:
9a:ef:b9:3b:ee:c6:6b:b3:8c:ba:34:c7:cb:95:be:ca:a3:e3:
54:d1:7c:a3:be:a7:cc:72:93:e7:2f:50:30:19:19:d1:e2:5f:
b6:b3:65:91:af:d8:90:6f:94:d9:00:4a:76:4a:14:58:51:84:
03:6b:a6:c0:37:62:21:83:e7:13:4d:51:74:3a:32:c6:30:b7:
44:75:99:ae:0a:02:ea:45:ac:5d:0b:1b:68:21:a0:02:e7:ee:
11:b7:cd:bf:ad:a3:ef:20:c0:2e:c1:29:f0:87:08:f6:fe:a8:
5f:37:05:2c:99:17:fc:3e:93:af:a5:d6:17:f3:87:e0:10:87:
b7:b8:87:f3
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAY56dSgJ+iPckBU1HO2ukQPzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMzI2MTExMTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjM0ZDQ4ZDg0MWE1MmE0MjI3ZDQ5ZmEzZWY4NWJhNWFiZjIyMjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhXK5tqlv4EJoGilF0RWuScsM2rq
vMdDxlyz5WMvn5sfmaKzIVF6YZM/ayKx+kCZ0shPd4KHukY6t5vJYQzadAHUPbeR
LA4eaWSyudWNR8QOISsZ0ZzggyeT0cm5OCzg8lUzfKdIjxDCPi89pjalkrr7CFMe
KwzXOAuFI4W3c/UU3GCSeH5BbSDmgQfbu19Vi3HkMUYkzl90xeNCaMq9/FFmGhyG
wPqdyQftgn5tvHqn47J+pVrJXYIQVGbbrVmmRu0su91657V1YDWpqPspG+XmU4LC
XdSUlfVP5XfHANXMEVz2Bd8o/GKXwjCg+jNzyvAm91a8cxkBqbgRTNsXwQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFD801I2EGlKkIn1J+j74W6Wr8iJIMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YwL2ViNzAz
Ny1kZWVkLTRhMjMtYjNhNC0wNDU4YzE1Y2ZkMGIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjAvZWI3MDM3
LWRlZWQtNGEyMy1iM2E0LTA0NThjMTVjZmQwYi8xL1B6VFVqWVFhVXFRaWZVbjZQ
dmhicGF2eUlrZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAuYsGMA0EAgACMAcDBQMqEdWAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMp1jANBgkqhkiG9w0BAQsFAAOCAQEAeYKW6UljZRd2
ZuSbp/Jb3doUVvl38GFhrJ3LSU+qXaxWqaa+PYZm3bqPr3xUF6HZyMlfm/oijGKQ
CoKAwniel4dfoyUEGZb6/uvZLWWuGQmGKy7NVHJdRh9qS/tGfJAy1D/z8Xj1hWgB
fDxFblyc7KcsRV2g5g29iLEYnRWgmu+5O+7Ga7OMujTHy5W+yqPjVNF8o76nzHKT
5y9QMBkZ0eJftrNlka/YkG+U2QBKdkoUWFGEA2umwDdiIYPnE01RdDoyxjC3RHWZ
rgoC6kWsXQsbaCGgAufuEbfNv62j7yDALsEp8IcI9v6oXzcFLJkX/D6Tr6XWF/OH
4BCHt7iH8w==
-----END CERTIFICATE-----
Generated at Fri May 3 10:13:30 2024 by rpki-client on console-fra.rpki-client.org