Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer
File: S-CVOnswPWoemgKHFgwvRg8H8iY.cer (raw, json)
Hash identifier: rwP0PRiV+joZV4HSfvLYnSqUE2vV3zT/0lf8UqcYU38=
Subject key identifier: 4B:E0:95:3A:7B:30:3D:6A:1E:9A:02:87:16:0C:2F:46:0F:07:F2:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7932A449E7294878D08A8DDE79A7D31
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:29:19 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.105.9.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:2a:44:9e:72:94:87:8d:08:a8:dd:e7:9a:7d:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:29:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4be0953a7b303d6a1e9a0287160c2f460f07f226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:47:d6:3e:ee:80:5e:70:2f:42:f7:f9:e6:68:
18:a2:d3:ee:c0:f6:22:81:b4:ca:0a:63:7b:b1:45:
4d:f9:a5:ae:4c:51:04:2a:b4:74:43:c5:b4:13:b9:
bf:0c:ea:71:98:03:f0:8e:f2:76:f2:14:54:2a:20:
06:59:8b:d3:27:5a:ff:7a:5d:2e:2a:5e:68:26:b4:
fd:fd:19:8f:80:65:5e:82:cc:fa:af:cd:11:5d:ae:
71:f8:a9:a9:44:28:11:01:1b:3d:47:82:51:c7:2a:
0d:8e:0d:f3:de:39:9a:44:e1:e7:95:fd:43:67:e9:
57:35:a6:c4:bf:90:e4:61:52:d1:b5:e7:77:1c:52:
26:a7:02:4f:f7:0c:60:db:6a:b5:bc:35:02:b0:c1:
70:7b:60:11:eb:57:aa:bf:9f:35:ba:79:85:12:9a:
21:13:34:5b:79:d1:70:b7:39:38:41:c4:96:dc:44:
b9:9f:f0:d7:8e:47:0e:f3:70:aa:97:32:aa:52:3c:
39:e2:4d:90:9a:28:c5:5d:22:88:bc:36:df:8f:f8:
c4:01:e8:65:8a:d7:fe:db:49:d6:d0:b9:0e:43:d9:
80:12:c5:f3:a7:75:d1:cb:b9:a7:b0:f0:ba:3c:80:
0c:e0:ff:7a:96:7f:09:97:fc:76:40:91:fc:da:2b:
3a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E0:95:3A:7B:30:3D:6A:1E:9A:02:87:16:0C:2F:46:0F:07:F2:26
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.9.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:98:c3:07:6c:9d:83:98:86:94:2b:3b:14:cd:0c:65:42:99:
71:72:64:4f:fd:14:b7:2f:e8:b9:a9:4d:e0:a3:92:b7:9a:51:
e3:34:9e:e5:9f:f2:ed:42:78:6c:44:7f:50:fb:d9:59:ea:3c:
9e:47:9e:fc:d1:cb:4b:08:bf:b0:5b:96:7a:21:da:83:18:2d:
bf:9a:41:34:6e:c6:ad:50:6d:f3:53:7a:ba:70:0a:08:36:fe:
aa:f8:35:ec:19:9f:b0:0d:57:65:38:84:d9:36:31:7d:e9:61:
c0:86:11:01:39:a0:93:98:e7:b1:66:a4:4c:8e:2b:bf:35:be:
e5:b8:ad:93:fb:5c:84:40:85:4c:29:e7:79:19:15:f3:3f:e4:
4a:a6:20:43:6f:a5:2b:2e:e7:4f:53:c2:0e:20:c4:07:77:6e:
f9:7b:70:ce:bc:63:2a:28:a3:7d:d2:65:7a:a8:de:82:3d:7c:
c5:1c:ce:52:a8:fd:72:42:16:82:c9:b9:3f:a8:d1:2b:07:d7:
69:bf:6f:b4:8d:bb:5a:d4:50:79:8b:35:05:b5:cc:bc:6a:eb:
99:b5:6e:16:2a:51:7a:96:a8:56:8a:78:91:4f:5a:f2:42:5a:
67:38:67:1b:d9:17:bf:8b:7e:7f:d1:f2:7f:d7:17:1c:96:6e:
f0:c7:27:a2
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzHkypEnnKUh40IqN3nmn0xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDAyOTE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YmUwOTUzYTdiMzAzZDZhMWU5YTAyODcxNjBjMmY0NjBmMDdmMjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEfWPu6AXnAvQvf55mgYotPuwPYi
gbTKCmN7sUVN+aWuTFEEKrR0Q8W0E7m/DOpxmAPwjvJ28hRUKiAGWYvTJ1r/el0u
Kl5oJrT9/RmPgGVegsz6r80RXa5x+KmpRCgRARs9R4JRxyoNjg3z3jmaROHnlf1D
Z+lXNabEv5DkYVLRted3HFImpwJP9wxg22q1vDUCsMFwe2AR61eqv581unmFEpoh
EzRbedFwtzk4QcSW3ES5n/DXjkcO83CqlzKqUjw54k2QmijFXSKIvDbfj/jEAehl
itf+20nW0LkOQ9mAEsXzp3XRy7mnsPC6PIAM4P96ln8Jl/x2QJH82is6twIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFEvglTp7MD1qHpoChxYML0YPB/ImMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEyL2U0NWM1
Mi0xNzFmLTRjNWMtYWJlOC1lZTk2ZDBkZjAwMDMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTIvZTQ1YzUy
LTE3MWYtNGM1Yy1hYmU4LWVlOTZkMGRmMDAwMy8xL1MtQ1ZPbnN3UFdvZW1nS0hG
Z3d2Umc4SDhpWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwWkJMA0GCSqGSIb3DQEBCwUAA4IBAQA6mMMH
bJ2DmIaUKzsUzQxlQplxcmRP/RS3L+i5qU3go5K3mlHjNJ7ln/LtQnhsRH9Q+9lZ
6jyeR5780ctLCL+wW5Z6IdqDGC2/mkE0bsatUG3zU3q6cAoINv6q+DXsGZ+wDVdl
OITZNjF96WHAhhEBOaCTmOexZqRMjiu/Nb7luK2T+1yEQIVMKed5GRXzP+RKpiBD
b6UrLudPU8IOIMQHd275e3DOvGMqKKN90mV6qN6CPXzFHM5SqP1yQhaCybk/qNEr
B9dpv2+0jbta1FB5izUFtcy8auuZtW4WKlF6lqhWiniRT1ryQlpnOGcb2Re/i35/
0fJ/1xcclm7wxyei
-----END CERTIFICATE-----
Generated at Fri May 3 13:17:24 2024 by rpki-client on console-fra.rpki-client.org