Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SqtlhzyyeC8Tw3j1VDxpFEPRb3k.cer
File: SqtlhzyyeC8Tw3j1VDxpFEPRb3k.cer (raw, json)
Hash identifier: 9jAaFBuO1KPOhU1zxbqyWAQkHZ9PbR5mWoHcJHgL28w=
Subject key identifier: 4A:AB:65:87:3C:B2:78:2F:13:C3:78:F5:54:3C:69:14:43:D1:6F:79
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC79416E74DC2979556FA1EAC1BB833D0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/SqtlhzyyeC8Tw3j1VDxpFEPRb3k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:30:20 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.201.4.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:16:e7:4d:c2:97:95:56:fa:1e:ac:1b:b8:33:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4aab65873cb2782f13c378f5543c691443d16f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:80:6f:4d:fe:87:95:c8:e9:83:c1:22:12:a7:
bd:a2:19:73:04:a0:3e:f0:76:69:ae:c8:83:ca:a7:
db:69:1a:43:83:53:fb:6f:aa:1d:9b:47:0d:54:28:
8d:fa:bc:05:6b:56:c9:bc:61:cc:24:d6:9c:bc:a6:
fe:c2:5d:1b:6c:6e:65:ff:aa:e8:f1:50:2c:65:6c:
cc:86:fa:d2:85:84:4d:54:04:60:c4:3a:6c:8c:96:
fb:14:c6:f2:6a:7c:a7:8b:88:81:40:78:d2:dd:b0:
0b:ca:05:23:90:d6:7d:ff:a2:ce:13:73:76:80:7a:
1b:86:6e:d1:08:1c:66:7a:8d:d1:84:74:4d:5d:57:
e9:d8:a3:ca:10:03:13:27:a1:b9:81:98:46:1c:3e:
69:4f:44:60:8e:f3:f3:dd:00:24:bb:04:b8:35:28:
68:ba:ab:b0:e4:a0:21:cc:c6:05:5a:60:a0:e9:5e:
8e:69:7d:d9:8e:c0:51:fc:6a:1d:f5:c7:b0:fd:a8:
b1:d5:9b:25:1a:1c:ce:7b:ba:d1:e0:a4:73:02:fe:
6a:78:e3:45:e5:3a:77:89:bf:d8:65:ec:eb:2f:f6:
0a:97:cd:08:88:5b:79:ae:f4:07:ab:d8:6a:5d:4b:
7f:8b:a4:fa:9c:d8:6a:32:7e:bd:57:be:97:a7:a5:
8a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:AB:65:87:3C:B2:78:2F:13:C3:78:F5:54:3C:69:14:43:D1:6F:79
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/SqtlhzyyeC8Tw3j1VDxpFEPRb3k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.4.0/22
Signature Algorithm: sha256WithRSAEncryption
29:28:f6:8a:08:22:29:f9:81:46:cc:bc:55:c0:e4:fc:a4:4c:
a9:69:29:9d:80:cb:5f:8a:6c:1b:d0:46:2d:87:9e:df:a6:18:
b7:ad:8a:9f:d5:de:f9:c7:b4:78:9f:1c:ec:99:ff:49:cf:69:
a7:41:ed:e3:91:86:2f:29:b5:41:79:20:6d:8b:b5:96:15:8f:
e7:98:d9:3c:11:66:ec:13:16:3c:04:ec:0e:6c:59:78:5e:c5:
47:54:9c:a1:3b:e2:bc:8c:97:43:43:2d:ad:bc:ff:d3:ee:a5:
c9:7c:28:32:cc:d4:73:82:d6:a7:23:1c:26:d9:22:00:a2:5a:
e8:83:32:bd:5f:0d:d9:92:66:55:80:2c:1e:5d:6f:94:48:94:
fe:4e:f6:88:31:3a:e6:98:4d:d4:4e:32:0e:33:32:37:1b:95:
b6:d6:9f:0f:ec:96:2c:92:42:c4:3a:57:a1:1b:6d:dc:df:c3:
10:24:72:78:89:0b:49:99:27:25:66:1f:99:a9:99:35:07:4a:
92:f1:7a:b0:15:3b:51:2c:36:8b:8e:68:ff:71:cc:1c:b5:e9:
f4:b4:fa:6f:6e:33:2b:03:22:8c:67:96:3b:3a:61:92:9b:94:
f7:7f:c0:f6:13:5b:64:a8:a0:ed:b5:ff:09:cf:b2:2c:2b:8c:
a7:fb:7a:cb
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzHlBbnTcKXlVb6HqwbuDPQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDAzMDIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YWFiNjU4NzNjYjI3ODJmMTNjMzc4ZjU1NDNjNjkxNDQzZDE2Zjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIBvTf6Hlcjpg8EiEqe9ohlzBKA+
8HZprsiDyqfbaRpDg1P7b6odm0cNVCiN+rwFa1bJvGHMJNacvKb+wl0bbG5l/6ro
8VAsZWzMhvrShYRNVARgxDpsjJb7FMbyanyni4iBQHjS3bALygUjkNZ9/6LOE3N2
gHobhm7RCBxmeo3RhHRNXVfp2KPKEAMTJ6G5gZhGHD5pT0RgjvPz3QAkuwS4NSho
uquw5KAhzMYFWmCg6V6OaX3ZjsBR/God9cew/aix1ZslGhzOe7rR4KRzAv5qeONF
5Tp3ib/YZezrL/YKl80IiFt5rvQHq9hqXUt/i6T6nNhqMn69V76Xp6WK8QIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFEqrZYc8sngvE8N49VQ8aRRD0W95MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YyL2FhMTc5
Ny00MzczLTRhMmYtYTA3NC1jNzNjYmU3MGFiYjkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIvYWExNzk3
LTQzNzMtNGEyZi1hMDc0LWM3M2NiZTcwYWJiOS8xL1NxdGxoenl5ZUM4VHczajFW
RHhwRkVQUmIzay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCuckEMA0GCSqGSIb3DQEBCwUAA4IBAQApKPaK
CCIp+YFGzLxVwOT8pEypaSmdgMtfimwb0EYth57fphi3rYqf1d75x7R4nxzsmf9J
z2mnQe3jkYYvKbVBeSBti7WWFY/nmNk8EWbsExY8BOwObFl4XsVHVJyhO+K8jJdD
Qy2tvP/T7qXJfCgyzNRzgtanIxwm2SIAolrogzK9Xw3ZkmZVgCweXW+USJT+TvaI
MTrmmE3UTjIOMzI3G5W21p8P7JYskkLEOlehG23c38MQJHJ4iQtJmSclZh+ZqZk1
B0qS8XqwFTtRLDaLjmj/ccwcten0tPpvbjMrAyKMZ5Y7OmGSm5T3f8D2E1tkqKDt
tf8Jz7IsK4yn+3rL
-----END CERTIFICATE-----
Generated at Fri May 3 11:33:20 2024 by rpki-client on console-ams.rpki-client.org