Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
File: RtlEd8i1TRLsiz97bZrnjlELI9g.cer (raw, json)
Hash identifier: EzSwn9FGzzw2OgHCzuzLXN2XyNNzDk2i4kfkOFh1F+E=
Subject key identifier: 46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E08D2278C73327898E77620DC8CB3DC5B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 04 Mar 2024 09:36:14 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 28855
AS: 51243
AS: 210770
IP: 80.91.215.0/24
IP: 91.194.60.0/23
IP: 178.251.200.0/21
IP: 185.34.32.0/22
IP: 185.205.32.0/22
IP: 185.215.168.0/22
IP: 217.24.80.0/20
IP: 2001:67c:288::/48
IP: 2001:1b78::/32
IP: 2a00:6a40::/32
IP: 2a00:99a0::/32
IP: 2a12:9b40::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:08:d2:27:8c:73:32:78:98:e7:76:20:dc:8c:b3:dc:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 4 09:36:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e7:77:00:d8:14:4e:10:cd:e1:bf:6c:ff:7c:
22:3e:3d:ff:ab:f2:8c:91:44:75:5c:74:ac:85:f3:
67:15:0b:a0:95:fe:60:9f:4a:74:cb:ee:2d:43:8f:
0c:c3:61:4d:3d:29:41:d1:59:4d:d2:10:0c:0d:31:
33:4d:f7:85:d0:2e:74:53:3e:22:fb:1d:46:b2:96:
43:57:1c:a0:b1:37:d3:2d:d5:4c:6f:e3:06:ca:ba:
d5:32:45:54:b9:80:04:bb:15:76:d2:44:95:ba:b8:
47:d1:ea:42:44:2f:35:66:22:8a:c4:80:b8:6e:0c:
3d:a7:c3:9b:ed:f1:03:c5:9e:64:88:45:9a:13:d6:
30:6a:c0:16:3e:8c:13:66:8c:b8:2a:78:2a:e5:e1:
ee:2c:1d:9d:80:e9:62:63:60:36:3e:95:ff:12:bb:
a3:d0:e9:2a:e5:a6:87:65:f5:58:45:92:f0:0e:58:
a9:1f:a1:41:4c:f0:96:ce:97:00:fe:8b:06:18:10:
a8:05:b5:82:b0:6c:33:32:e9:bc:9d:2d:94:af:a3:
62:20:ed:ae:67:92:95:34:2e:04:e6:35:19:34:de:
d2:ac:f5:b0:13:25:ab:0a:cd:d1:23:4a:31:15:92:
ec:96:6f:ca:06:cb:cb:53:49:6a:9c:e7:80:07:a1:
bb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.215.0/24
91.194.60.0/23
178.251.200.0/21
185.34.32.0/22
185.205.32.0/22
185.215.168.0/22
217.24.80.0/20
IPv6:
2001:67c:288::/48
2001:1b78::/32
2a00:6a40::/32
2a00:99a0::/32
2a12:9b40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28855
51243
210770
Signature Algorithm: sha256WithRSAEncryption
5b:14:ec:63:ea:a4:37:9e:4a:f1:ca:f7:27:44:72:42:72:4d:
17:ba:4d:ab:4e:84:fb:6a:47:73:8d:5d:23:e0:6a:0d:59:2f:
72:66:3b:96:b3:8c:60:29:b9:c9:a5:d4:8b:90:d3:1c:b5:dc:
4d:af:58:3e:8c:c3:eb:88:c7:e8:cc:e5:bc:eb:0f:b5:7d:e3:
0e:20:fe:b3:4c:04:43:e5:ea:42:c2:0c:ac:28:80:fb:32:93:
3f:87:45:2b:5e:29:ab:3f:a7:c1:49:9f:42:fb:11:9f:ee:e7:
01:3e:ac:59:b8:bb:fe:06:34:fe:0f:b8:4f:ed:e7:66:b5:e6:
60:2c:bb:24:a5:bb:b4:e5:25:df:f3:a5:37:97:cd:a7:93:d9:
08:c8:10:8e:3b:b4:6b:37:4c:04:b3:94:d1:c8:77:9d:ab:72:
6a:f3:43:50:57:0e:ef:d5:7c:3b:8c:69:39:16:52:1f:a2:d8:
f1:d6:14:6d:74:dd:b9:ee:6d:1c:0b:ac:09:d4:e1:84:af:50:
91:d6:f4:c6:c9:bf:69:80:51:31:47:68:af:ee:27:ad:60:40:
dd:11:9f:6b:04:aa:ae:1e:b9:13:eb:c4:9b:76:63:ee:9c:ae:
b1:f7:42:05:a2:ca:c5:1f:c4:bb:ae:e6:0d:7b:9c:71:87:76:
2d:9f:b1:27
-----BEGIN CERTIFICATE-----
MIIF7jCCBNagAwIBAgISAY4I0ieMczJ4mOd2INyMs9xbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMzA0MDkzNjE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NmQ5NDQ3N2M4YjU0ZDEyZWM4YjNmN2I2ZDlhZTc4ZTUxMGIyM2Q4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Od3ANgUThDN4b9s/3wiPj3/q/KM
kUR1XHSshfNnFQuglf5gn0p0y+4tQ48Mw2FNPSlB0VlN0hAMDTEzTfeF0C50Uz4i
+x1GspZDVxygsTfTLdVMb+MGyrrVMkVUuYAEuxV20kSVurhH0epCRC81ZiKKxIC4
bgw9p8Ob7fEDxZ5kiEWaE9YwasAWPowTZoy4Kngq5eHuLB2dgOliY2A2PpX/Eruj
0Okq5aaHZfVYRZLwDlipH6FBTPCWzpcA/osGGBCoBbWCsGwzMum8nS2Ur6NiIO2u
Z5KVNC4E5jUZNN7SrPWwEyWrCs3RI0oxFZLslm/KBsvLU0lqnOeAB6G7ewIDAQAB
o4IC+jCCAvYwHQYDVR0OBBYEFEbZRHfItU0S7Is/e22a545RCyPYMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY5LzU0YTQ1
Ny0zYzQ4LTRlMDEtOTBiMC01ZWI3NWMyMzE4YWEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkvNTRhNDU3
LTNjNDgtNGUwMS05MGIwLTVlYjc1YzIzMThhYS8xL1J0bEVkOGkxVFJMc2l6OTdi
WnJuamxFTEk5Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHAGCCsGAQUF
BwEHAQH/BGEwXzAwBAIAATAqAwQAUFvXAwQBW8I8AwQDsvvIAwQCuSIgAwQCuc0g
AwQCudeoAwQE2RhQMCsEAgACMCUDBwAgAQZ8AogDBQAgARt4AwUAKgBqQAMFACoA
maADBQAqEptAMCMGCCsGAQUFBwEIAQH/BBQwEqAQMA4CAnC3AgMAyCsCAwM3UjAN
BgkqhkiG9w0BAQsFAAOCAQEAWxTsY+qkN55K8cr3J0RyQnJNF7pNq06E+2pHc41d
I+BqDVkvcmY7lrOMYCm5yaXUi5DTHLXcTa9YPozD64jH6MzlvOsPtX3jDiD+s0wE
Q+XqQsIMrCiA+zKTP4dFK14pqz+nwUmfQvsRn+7nAT6sWbi7/gY0/g+4T+3nZrXm
YCy7JKW7tOUl3/OlN5fNp5PZCMgQjju0azdMBLOU0ch3natyavNDUFcO79V8O4xp
ORZSH6LY8dYUbXTdue5tHAusCdThhK9Qkdb0xsm/aYBRMUdor+4nrWBA3RGfawSq
rh65E+vEm3Zj7pyusfdCBaLKxR/Eu67mDXuccYd2LZ+xJw==
-----END CERTIFICATE-----
Generated at Fri May 3 02:59:17 2024 by rpki-client on console-fra.rpki-client.org