Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RTY5ZC-dK0ZyNDr42C_HVUfNmFE.cer
File: RTY5ZC-dK0ZyNDr42C_HVUfNmFE.cer (raw, json)
Hash identifier: kCRBlOtKkpF7f5KeBOPC/yFk1YEJLfdQhm/pE8bGHPk=
Subject key identifier: 45:36:39:64:2F:9D:2B:46:72:34:3A:F8:D8:2F:C7:55:47:CD:98:51
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC34951F8D6885EA920CE23AC9063F542
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/14/6728ad-9070-4b11-aa98-c2e5fdb925f3/1/RTY5ZC-dK0ZyNDr42C_HVUfNmFE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/14/6728ad-9070-4b11-aa98-c2e5fdb925f3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:30:11 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 217.198.183.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:51:f8:d6:88:5e:a9:20:ce:23:ac:90:63:f5:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=453639642f9d2b4672343af8d82fc75547cd9851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:92:ac:08:f8:97:b0:e5:04:00:fa:8b:0e:77:
a1:1a:e1:2c:f8:49:d4:bd:37:00:5a:d0:bd:2f:41:
1e:e1:6a:ac:0b:d2:25:9d:41:00:d0:14:bc:b0:f9:
aa:41:a1:ba:30:78:b1:8c:0c:73:c7:5e:a9:49:5e:
43:81:f7:85:d2:dc:4c:23:02:4a:db:ac:d2:90:f5:
8e:9c:dd:6b:8d:82:19:30:b1:69:53:83:b1:0b:fb:
c8:3e:fd:52:3c:fc:c6:ed:cf:9c:54:52:29:60:f9:
05:31:b4:4b:1a:75:d6:20:82:ce:c2:2e:86:31:c9:
44:df:75:e9:08:bf:84:28:1e:51:99:33:76:24:ac:
b4:2d:ca:d0:fe:53:f9:03:d2:18:c9:78:01:78:d2:
9f:f4:ec:91:a3:f1:e8:3d:9b:53:66:43:1d:c4:1c:
f7:64:99:5d:ca:d3:98:11:3f:89:6b:4c:21:59:c0:
bb:e1:01:71:e8:e6:49:87:fa:76:c5:69:a9:b0:da:
9d:22:47:2d:e4:ed:3a:36:21:05:59:84:91:6e:f2:
07:15:3d:77:6b:ee:4a:72:94:ff:c7:21:ab:0e:6f:
6a:4c:e1:e9:3c:e7:09:ac:d0:b3:6a:5f:ec:59:dc:
53:ec:0e:46:48:03:20:e9:68:45:e6:24:a4:96:7d:
c4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:36:39:64:2F:9D:2B:46:72:34:3A:F8:D8:2F:C7:55:47:CD:98:51
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6728ad-9070-4b11-aa98-c2e5fdb925f3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6728ad-9070-4b11-aa98-c2e5fdb925f3/1/RTY5ZC-dK0ZyNDr42C_HVUfNmFE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.198.183.0/24
Signature Algorithm: sha256WithRSAEncryption
39:33:b5:74:16:a9:cf:38:3f:3e:09:37:38:71:da:84:6a:0b:
11:8c:e9:0a:11:c0:5c:f4:6d:c3:5a:a1:56:3c:79:66:8e:52:
5f:f9:65:7c:7f:1b:8b:d7:bd:1a:e1:9f:b4:0d:fa:cf:f6:05:
b1:3c:60:2b:5c:ea:f4:fa:d2:bb:a1:2b:2c:cf:b8:52:10:58:
71:cf:5d:37:23:f4:00:02:42:5a:c3:78:c4:61:13:5e:b7:6b:
38:e8:71:4c:42:11:0b:6f:c6:46:53:9d:ed:12:ec:86:40:92:
81:04:d8:14:08:c2:ce:8e:53:40:73:36:1e:75:be:20:db:84:
10:ab:22:01:44:06:b9:61:4c:78:79:01:1d:8e:f0:bd:f4:c2:
4f:ef:18:4f:05:2c:81:45:96:8e:6f:0c:3c:93:1e:e7:d2:cf:
61:a9:bd:d7:cf:81:3a:6b:77:a0:b3:ac:27:0a:e5:95:f4:bb:
ff:8d:63:ab:1e:aa:da:d4:7c:47:fd:7e:8a:41:2f:ec:c9:96:
b3:ac:a9:dd:f5:ba:a9:10:3f:31:6a:a0:fb:78:81:0c:70:6e:
88:b1:98:2b:1a:6a:c8:bb:ab:58:2c:2e:c9:00:6f:1d:ae:29:
e3:fc:ad:9e:d3:b1:65:c9:f1:73:02:4c:fd:ea:0f:57:da:24:
c7:84:d9:81
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzDSVH41oheqSDOI6yQY/VCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDQzMDExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTM2Mzk2NDJmOWQyYjQ2NzIzNDNhZjhkODJmYzc1NTQ3Y2Q5ODUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZKsCPiXsOUEAPqLDnehGuEs+EnU
vTcAWtC9L0Ee4WqsC9IlnUEA0BS8sPmqQaG6MHixjAxzx16pSV5DgfeF0txMIwJK
26zSkPWOnN1rjYIZMLFpU4OxC/vIPv1SPPzG7c+cVFIpYPkFMbRLGnXWIILOwi6G
MclE33XpCL+EKB5RmTN2JKy0LcrQ/lP5A9IYyXgBeNKf9OyRo/HoPZtTZkMdxBz3
ZJldytOYET+Ja0whWcC74QFx6OZJh/p2xWmpsNqdIkct5O06NiEFWYSRbvIHFT13
a+5KcpT/xyGrDm9qTOHpPOcJrNCzal/sWdxT7A5GSAMg6WhF5iSkln3EYQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFEU2OWQvnStGcjQ6+Ngvx1VHzZhRMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE0LzY3Mjhh
ZC05MDcwLTRiMTEtYWE5OC1jMmU1ZmRiOTI1ZjMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQvNjcyOGFk
LTkwNzAtNGIxMS1hYTk4LWMyZTVmZGI5MjVmMy8xL1JUWTVaQy1kSzBaeU5EcjQy
Q19IVlVmTm1GRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQA2ca3MA0GCSqGSIb3DQEBCwUAA4IBAQA5M7V0
FqnPOD8+CTc4cdqEagsRjOkKEcBc9G3DWqFWPHlmjlJf+WV8fxuL170a4Z+0DfrP
9gWxPGArXOr0+tK7oSssz7hSEFhxz103I/QAAkJaw3jEYRNet2s46HFMQhELb8ZG
U53tEuyGQJKBBNgUCMLOjlNAczYedb4g24QQqyIBRAa5YUx4eQEdjvC99MJP7xhP
BSyBRZaObww8kx7n0s9hqb3Xz4E6a3egs6wnCuWV9Lv/jWOrHqra1HxH/X6KQS/s
yZazrKnd9bqpED8xaqD7eIEMcG6IsZgrGmrIu6tYLC7JAG8drinj/K2e07FlyfFz
Akz96g9X2iTHhNmB
-----END CERTIFICATE-----
Generated at Fri May 3 01:44:54 2024 by rpki-client on console-ams.rpki-client.org