Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SwzeTE-TKZljaA1sT8BgT3yEJDs.cer
File: SwzeTE-TKZljaA1sT8BgT3yEJDs.cer (raw, json)
Hash identifier: hGz45HWeuB5T9XurwNpg9W0o2SM62P3eZ+IKfbfiTUw=
Subject key identifier: 4B:0C:DE:4C:4F:93:29:99:63:68:0D:6C:4F:C0:60:4F:7C:84:24:3B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B6A783D5DCCFA3659D193F3E954D96
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 141.43.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:a7:83:d5:dc:cf:a3:65:9d:19:3f:3e:95:4d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b0cde4c4f93299963680d6c4fc0604f7c84243b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8e:35:dc:31:7c:c7:eb:02:39:3b:a1:fe:9b:
c6:8a:f3:26:8b:e4:0c:00:3e:0f:64:d1:5e:e5:97:
aa:8f:b0:ac:53:91:34:55:77:df:3c:26:11:d9:cb:
d8:2d:8c:ee:eb:d4:9b:c7:3e:1a:17:bc:ae:e8:d1:
ab:60:e1:66:81:39:2b:71:1b:b6:8b:c1:f1:35:fd:
fd:ce:47:c7:66:07:52:8f:5d:ec:02:45:e0:0e:f0:
16:e6:45:a1:7b:40:62:14:ee:4c:6a:c5:08:63:bd:
61:ca:38:f9:7d:06:ea:a8:36:c2:b8:dd:5a:2e:1a:
3a:54:fe:5e:21:c8:ab:7f:57:73:aa:8c:34:e3:28:
bb:80:20:c3:43:7f:51:44:4d:eb:d8:07:1f:97:a0:
2f:7a:19:f4:0b:03:0a:d6:71:b1:0b:2e:29:44:1c:
03:56:40:b5:b5:30:13:4c:e3:7e:7a:4c:7e:e5:92:
4a:57:99:cb:54:60:de:f4:a0:91:9e:cc:39:c8:e1:
e1:66:2f:98:52:d7:68:48:9e:83:e1:bb:73:6c:82:
8b:4c:03:33:f1:67:8f:39:86:ee:ac:8b:62:5e:2e:
5e:a6:f7:0b:0b:5d:3f:79:05:78:00:34:ba:c2:97:
61:19:bd:a6:cd:b7:c7:be:ff:53:6f:f0:40:43:d9:
27:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:0C:DE:4C:4F:93:29:99:63:68:0D:6C:4F:C0:60:4F:7C:84:24:3B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.43.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7b:93:ac:60:1b:f3:42:e1:1b:28:97:90:d6:0a:ea:7b:3f:bf:
e6:2e:f5:5a:e3:63:56:24:68:fb:45:e2:92:e9:c1:e0:0d:f9:
1b:ad:d5:e1:18:f5:86:76:4b:c3:a5:b2:d3:d2:fa:52:93:00:
19:d6:0f:b4:34:ae:a6:b6:a7:65:d5:35:db:b9:dc:62:9a:c0:
ce:1d:5b:a4:23:c7:f9:9f:99:d0:1a:d6:34:82:42:d5:22:d1:
0f:05:50:6e:44:cd:f2:b2:58:ec:52:25:b7:59:eb:83:38:16:
e3:32:41:bc:12:1a:a1:ec:10:80:b3:e8:73:3c:75:5d:93:df:
d2:92:08:d2:d3:10:04:de:dc:8c:75:45:80:71:74:46:45:6b:
46:16:4a:c7:e3:e0:b4:be:27:20:ef:11:16:a1:d8:f6:ce:e0:
24:8c:2c:d2:9e:0f:79:21:d7:38:31:05:db:5e:e2:8e:75:9f:
e2:fa:f5:02:5b:25:36:6b:fd:00:fc:f3:f2:bc:12:8a:5b:17:
ae:87:c6:62:6f:96:b0:67:92:2a:de:29:00:1c:71:7f:92:36:
fa:e4:57:19:44:db:bf:1d:a3:94:48:b2:8d:4e:9d:3b:86:e1:
ea:97:53:ea:08:de:c1:b1:31:7a:e4:f8:d1:e9:83:86:0d:72:
eb:35:b5:a9
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgISAYzDtqeD1dzPo2WdGT8+lU2WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDYyOTM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjBjZGU0YzRmOTMyOTk5NjM2ODBkNmM0ZmMwNjA0ZjdjODQyNDNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApI413DF8x+sCOTuh/pvGivMmi+QM
AD4PZNFe5Zeqj7CsU5E0VXffPCYR2cvYLYzu69Sbxz4aF7yu6NGrYOFmgTkrcRu2
i8HxNf39zkfHZgdSj13sAkXgDvAW5kWhe0BiFO5MasUIY71hyjj5fQbqqDbCuN1a
Lho6VP5eIcirf1dzqow04yi7gCDDQ39RRE3r2Acfl6Avehn0CwMK1nGxCy4pRBwD
VkC1tTATTON+ekx+5ZJKV5nLVGDe9KCRnsw5yOHhZi+YUtdoSJ6D4btzbIKLTAMz
8WePOYburItiXi5epvcLC10/eQV4ADS6wpdhGb2mzbfHvv9Tb/BAQ9knWwIDAQAB
o4ICgzCCAn8wHQYDVR0OBBYEFEsM3kxPkymZY2gNbE/AYE98hCQ7MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZiLzZhM2Ji
Ny03MDY3LTQyZTgtODA5Ny04OTYyMGMyNTE1MGUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmIvNmEzYmI3
LTcwNjctNDJlOC04MDk3LTg5NjIwYzI1MTUwZS8xL1N3emVURS1US1psamFBMXNU
OEJnVDN5RUpEcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF
BwEHAQH/BA8wDTALBAIAATAFAwMAjSswDQYJKoZIhvcNAQELBQADggEBAHuTrGAb
80LhGyiXkNYK6ns/v+Yu9VrjY1YkaPtF4pLpweAN+Rut1eEY9YZ2S8OlstPS+lKT
ABnWD7Q0rqa2p2XVNdu53GKawM4dW6Qjx/mfmdAa1jSCQtUi0Q8FUG5EzfKyWOxS
JbdZ64M4FuMyQbwSGqHsEICz6HM8dV2T39KSCNLTEATe3Ix1RYBxdEZFa0YWSsfj
4LS+JyDvERah2PbO4CSMLNKeD3kh1zgxBdte4o51n+L69QJbJTZr/QD88/K8Eopb
F66HxmJvlrBnkireKQAccX+SNvrkVxlE278do5RIso1OnTuG4eqXU+oI3sGxMXrk
+NHpg4YNcus1tak=
-----END CERTIFICATE-----
Generated at Fri May 3 10:16:12 2024 by rpki-client on console-fra.rpki-client.org