Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/S9H1DfJj_lCfxd6cWkc6KOOBJjk.cer
File: S9H1DfJj_lCfxd6cWkc6KOOBJjk.cer (raw, json)
Hash identifier: PrUGIdXpY+pg9kLOAYjk0svbLnRRS4wvwHQCCtUPxT0=
Subject key identifier: 4B:D1:F5:0D:F2:63:FE:50:9F:C5:DE:9C:5A:47:3A:28:E3:81:26:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94DA9FCBF2882C43B67EA7AAE1D3521
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:32:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212597
IP: 98.158.238.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:a9:fc:bf:28:82:c4:3b:67:ea:7a:ae:1d:35:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:32:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4bd1f50df263fe509fc5de9c5a473a28e3812639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ed:18:ca:33:c0:0a:60:66:5a:7e:cb:95:30:
48:41:83:7c:5d:b7:5f:fd:99:21:12:a8:62:31:ee:
b4:be:62:22:d2:b1:f5:be:8d:df:f3:20:57:27:9b:
a6:34:ba:b0:2e:f8:2d:f5:71:3c:e9:70:b1:fc:b7:
72:65:87:03:40:d1:06:99:78:fb:5e:d8:89:35:43:
41:d2:54:72:63:1f:c1:23:3c:0c:cc:77:1f:14:b1:
13:e4:94:04:86:10:d3:00:c1:fd:84:88:1b:e1:05:
12:ce:07:03:73:af:39:03:93:32:b4:73:18:89:09:
66:54:6d:9b:76:99:67:bc:26:8a:ca:5c:5f:f9:1c:
27:8f:4b:7f:18:09:05:b4:b5:76:60:a4:ed:16:54:
6a:6b:98:df:71:55:d6:d3:72:7a:51:2f:db:20:94:
a3:30:c1:96:e4:65:f8:5a:33:53:00:0a:ee:01:84:
d8:e9:1d:f2:ed:e0:a7:83:2d:c6:ca:5c:52:a8:b9:
00:08:21:ec:ab:67:22:44:cc:8e:18:9c:5c:2f:f5:
8d:bc:0d:2b:7a:26:b6:6b:98:3b:75:47:4b:15:77:
da:b4:fc:d2:4e:a7:d5:54:8c:01:7b:2a:3b:12:2c:
f3:f9:df:cc:de:12:c6:02:9f:76:fb:b1:77:fb:b1:
e7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D1:F5:0D:F2:63:FE:50:9F:C5:DE:9C:5A:47:3A:28:E3:81:26:39
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
98.158.238.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212597
Signature Algorithm: sha256WithRSAEncryption
55:75:77:33:25:37:0d:f2:b2:44:34:d8:0e:a0:f7:63:4f:8d:
18:e8:3b:92:39:8c:3d:5b:3c:5b:22:42:6e:20:be:dd:97:07:
27:88:de:22:a8:a6:44:35:88:53:86:5a:ab:ea:5a:1f:02:4d:
f6:df:fe:6c:cc:ae:9c:fb:06:81:a4:d6:2a:ee:5b:19:8c:6c:
71:22:8e:ca:91:07:24:af:a3:9a:8f:3a:32:4f:ef:be:31:22:
21:f7:d0:93:7b:46:bd:89:d9:c1:d1:5e:3d:c4:ec:e8:60:4b:
f4:69:63:4c:93:7f:02:f5:eb:b1:ce:07:d4:3f:dd:30:f8:d1:
c6:be:4b:2c:c7:96:03:a0:57:ac:aa:1c:27:9d:ca:33:c2:aa:
3e:2e:ff:4a:54:4a:b6:0b:11:b1:90:c8:63:35:1d:ee:a5:48:
60:31:f3:9d:09:2a:8f:2f:29:f3:85:54:d0:fb:a7:bf:cd:45:
41:7f:d4:a4:21:5f:72:d6:80:a7:72:74:d4:cd:0f:c2:ea:ee:
9f:8d:d3:47:e4:5d:8b:7c:07:db:a4:67:7b:26:32:0a:04:a9:
6c:95:c4:62:5a:98:de:35:38:9c:91:a7:cc:78:c8:f0:c5:86:
0a:a2:0b:3c:35:85:0d:54:30:32:d0:2c:91:ef:8a:24:df:a8:
e9:89:53:5a
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYzJTan8vyiCxDtn6nquHTUhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDgzMjM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YmQxZjUwZGYyNjNmZTUwOWZjNWRlOWM1YTQ3M2EyOGUzODEyNjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvu0YyjPACmBmWn7LlTBIQYN8Xbdf
/ZkhEqhiMe60vmIi0rH1vo3f8yBXJ5umNLqwLvgt9XE86XCx/LdyZYcDQNEGmXj7
XtiJNUNB0lRyYx/BIzwMzHcfFLET5JQEhhDTAMH9hIgb4QUSzgcDc685A5MytHMY
iQlmVG2bdplnvCaKylxf+Rwnj0t/GAkFtLV2YKTtFlRqa5jfcVXW03J6US/bIJSj
MMGW5GX4WjNTAAruAYTY6R3y7eCngy3GylxSqLkACCHsq2ciRMyOGJxcL/WNvA0r
eia2a5g7dUdLFXfatPzSTqfVVIwBeyo7Eizz+d/M3hLGAp92+7F3+7HngwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFEvR9Q3yY/5Qn8XenFpHOijjgSY5MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ4LzdkMjBh
Mi1iODgxLTQ2MWMtYmJmNS0yYjY4MDkzMzk3MDIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDgvN2QyMGEy
LWI4ODEtNDYxYy1iYmY1LTJiNjgwOTMzOTcwMi8xL1M5SDFEZkpqX2xDZnhkNmNX
a2M2S09PQkpqay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAYp7uMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwM+dTANBgkqhkiG9w0BAQsFAAOCAQEAVXV3MyU3DfKyRDTYDqD3Y0+NGOg7kjmM
PVs8WyJCbiC+3ZcHJ4jeIqimRDWIU4Zaq+paHwJN9t/+bMyunPsGgaTWKu5bGYxs
cSKOypEHJK+jmo86Mk/vvjEiIffQk3tGvYnZwdFePcTs6GBL9GljTJN/AvXrsc4H
1D/dMPjRxr5LLMeWA6BXrKocJ53KM8KqPi7/SlRKtgsRsZDIYzUd7qVIYDHznQkq
jy8p84VU0Punv81FQX/UpCFfctaAp3J01M0Pwurun43TR+Rdi3wH26RneyYyCgSp
bJXEYlqY3jU4nJGnzHjI8MWGCqILPDWFDVQwMtAske+KJN+o6YlTWg==
-----END CERTIFICATE-----
Generated at Fri May 3 13:17:33 2024 by rpki-client on console-fra.rpki-client.org