Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SDQ4fr_s2mN6duERmeHNAwfC9Mo.cer
File: SDQ4fr_s2mN6duERmeHNAwfC9Mo.cer (raw, json)
Hash identifier: ZLVgdaKKeVS2U40V+sImVhMIDqi9m7hqO9coLKs1obg=
Subject key identifier: 48:34:38:7E:BF:EC:DA:63:7A:76:E1:11:99:E1:CD:03:07:C2:F4:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4245727520CBC87B9E7E554E7AFDE6F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210847
IP: 193.37.84.0/22
IP: 2a0c:1b40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:57:27:52:0c:bc:87:b9:e7:e5:54:e7:af:de:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4834387ebfecda637a76e11199e1cd0307c2f4ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:07:7c:78:21:20:c2:c5:db:bd:0b:75:72:cb:
4a:76:2b:ee:0e:47:23:db:16:a6:b8:f4:d0:69:15:
65:c0:11:23:b0:4e:f5:73:6d:8a:7c:4a:9a:a8:13:
b8:b6:a8:29:2e:67:a0:76:d7:f6:93:1d:11:15:e5:
8a:bd:93:5d:b6:da:88:8a:bc:bd:66:40:db:62:ea:
1f:40:8f:ef:60:a4:ea:92:da:0d:a3:fc:ec:fc:ca:
94:59:30:d9:74:2e:26:6e:1c:59:e0:4f:bd:c9:c5:
aa:50:5f:22:c7:fe:9b:ce:06:d3:f6:33:0c:ee:32:
93:c5:5d:2e:a4:34:dd:f4:06:b8:68:93:42:1c:61:
ae:37:b3:43:f7:77:0e:8d:b1:84:c0:d0:73:d1:dd:
21:fa:8b:ec:bc:40:81:85:7a:27:36:c0:bd:55:0b:
5e:3d:d8:10:fc:1c:b6:30:d1:1c:02:f7:3e:45:b8:
ad:b4:87:24:10:a1:c0:7d:76:51:cf:5e:3d:84:30:
00:9b:0d:ae:05:40:8f:8d:b0:eb:8e:28:79:5a:0d:
ba:3e:65:2f:44:9e:8a:87:23:be:61:66:d7:ce:9f:
62:85:d9:eb:a7:29:be:26:29:15:4c:ac:6e:a4:f4:
96:9f:b0:7c:5a:e0:5a:5a:e3:ab:42:06:db:4f:cf:
ba:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:34:38:7E:BF:EC:DA:63:7A:76:E1:11:99:E1:CD:03:07:C2:F4:CA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.84.0/22
IPv6:
2a0c:1b40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210847
Signature Algorithm: sha256WithRSAEncryption
52:b8:4f:d8:c3:d3:a8:9e:46:81:97:3e:0e:ac:1b:64:e8:d6:
1d:a5:b2:6b:b4:2b:4d:35:96:e9:47:4d:d5:de:d2:f5:72:6a:
26:a9:46:2d:a0:a9:e6:5f:10:c1:b2:65:a1:3a:16:d5:a3:93:
ff:08:df:8e:6c:f1:22:ed:27:19:99:f8:bd:43:d7:30:46:1e:
26:42:85:9b:2d:42:89:cb:f7:f0:b5:76:89:85:ed:73:79:b6:
76:64:a1:b8:5d:82:05:bd:21:b0:47:59:a0:72:d2:97:c7:5d:
1b:d7:5d:1d:74:02:f1:9c:3c:24:e4:f2:9c:05:4d:9d:f3:c4:
e3:e5:06:f3:54:01:16:dd:e5:40:de:5d:c9:b7:80:0c:43:59:
ed:77:d1:b5:36:6f:cc:cf:71:4e:31:e8:0b:f4:a7:3e:a7:5d:
48:f5:90:ba:f8:bb:e2:be:bb:3a:8f:27:e3:27:f4:19:cc:1e:
59:d3:2d:1d:cb:56:72:aa:09:8a:3d:56:86:c0:6f:9c:07:2b:
9c:1c:1e:f9:2f:0b:14:df:f4:f0:b4:70:d9:fe:09:ef:c9:d3:
74:48:8f:02:6c:87:6a:a6:34:e1:f0:58:3c:b8:16:fa:f2:a2:
a9:ce:3d:c6:d9:e4:15:44:bd:ad:0f:a6:36:dc:6e:8c:25:c1:
1e:ba:fa:13
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzEJFcnUgy8h7nn5VTnr95vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDgyOTI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODM0Mzg3ZWJmZWNkYTYzN2E3NmUxMTE5OWUxY2QwMzA3YzJmNGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ad8eCEgwsXbvQt1cstKdivuDkcj
2xamuPTQaRVlwBEjsE71c22KfEqaqBO4tqgpLmegdtf2kx0RFeWKvZNdttqIiry9
ZkDbYuofQI/vYKTqktoNo/zs/MqUWTDZdC4mbhxZ4E+9ycWqUF8ix/6bzgbT9jMM
7jKTxV0upDTd9Aa4aJNCHGGuN7ND93cOjbGEwNBz0d0h+ovsvECBhXonNsC9VQte
PdgQ/By2MNEcAvc+RbittIckEKHAfXZRz149hDAAmw2uBUCPjbDrjih5Wg26PmUv
RJ6KhyO+YWbXzp9ihdnrpym+JikVTKxupPSWn7B8WuBaWuOrQgbbT8+6SQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFEg0OH6/7NpjenbhEZnhzQMHwvTKMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E1LzllZTZj
OC1mM2UyLTRmYWUtOTk4YS01OTFhMmE0MTk0Y2QvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTUvOWVlNmM4
LWYzZTItNGZhZS05OThhLTU5MWEyYTQxOTRjZC8xL1NEUTRmcl9zMm1ONmR1RVJt
ZUhOQXdmQzlNby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCwSVUMA0EAgACMAcDBQMqDBtAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM3nzANBgkqhkiG9w0BAQsFAAOCAQEAUrhP2MPTqJ5G
gZc+DqwbZOjWHaWya7QrTTWW6UdN1d7S9XJqJqlGLaCp5l8QwbJloToW1aOT/wjf
jmzxIu0nGZn4vUPXMEYeJkKFmy1Cicv38LV2iYXtc3m2dmShuF2CBb0hsEdZoHLS
l8ddG9ddHXQC8Zw8JOTynAVNnfPE4+UG81QBFt3lQN5dybeADENZ7XfRtTZvzM9x
TjHoC/SnPqddSPWQuvi74r67Oo8n4yf0GcweWdMtHctWcqoJij1WhsBvnAcrnBwe
+S8LFN/08LRw2f4J78nTdEiPAmyHaqY04fBYPLgW+vKiqc49xtnkFUS9rQ+mNtxu
jCXBHrr6Ew==
-----END CERTIFICATE-----
Generated at Fri May 3 10:15:32 2024 by rpki-client on console-fra.rpki-client.org