Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TGHRGEebUiLvD4ZBZ8rFtMB8whk.cer
File: TGHRGEebUiLvD4ZBZ8rFtMB8whk.cer (raw, json)
Hash identifier: Pv3Jdsf7B7QdhV6Uy9szQNdMsro4p1gyjCQGFepsfPs=
Subject key identifier: 4C:61:D1:18:47:9B:52:22:EF:0F:86:41:67:CA:C5:B4:C0:7C:C2:19
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DE2F7650B40E343894B6DBA8319677
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:30:53 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 196858
IP: 213.5.200.0/21
IP: 2001:67c:188c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:2f:76:50:b4:0e:34:38:94:b6:db:a8:31:96:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:30:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c61d118479b5222ef0f864167cac5b4c07cc219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d4:6e:45:78:23:77:aa:26:e8:6e:8f:58:1f:
73:4a:bd:ab:c9:c9:dd:7c:01:31:aa:6e:e3:37:2c:
92:ed:1f:35:d6:26:ff:9a:8c:83:b9:11:95:02:98:
e4:ca:fe:f2:6f:74:b7:65:91:95:5c:2a:d2:07:fa:
58:d2:b1:da:77:a0:db:8e:88:a2:c3:fc:75:78:2e:
6d:17:b3:07:c2:b7:ec:48:79:05:38:c2:f3:da:9c:
d6:a6:41:9e:72:ea:c9:2e:15:2b:70:17:5d:8c:4b:
56:61:83:72:73:49:b7:ba:eb:ac:cd:65:01:07:cd:
d2:29:57:4e:6a:db:60:c1:5e:62:e7:98:ab:01:95:
80:fa:57:cd:2d:b4:df:7e:6f:14:0e:63:6d:a2:39:
cd:7e:0f:15:5a:06:81:81:fa:51:1d:88:b0:37:bb:
52:7b:ff:f2:76:6c:b2:4e:94:1b:87:3d:8e:9f:50:
f2:06:c4:61:8e:bc:31:7d:e9:91:50:46:d1:df:9f:
0c:05:6c:0d:5c:45:01:88:9a:b2:e5:e3:8d:e5:1a:
1b:8b:40:ed:ee:39:44:14:32:54:a5:8c:3a:fd:99:
75:ba:b7:74:4d:a2:ef:ee:a8:c0:16:b2:5a:3c:3e:
07:fa:47:89:4b:c0:46:75:59:df:ae:8c:7b:1a:f8:
c8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:61:D1:18:47:9B:52:22:EF:0F:86:41:67:CA:C5:B4:C0:7C:C2:19
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.5.200.0/21
IPv6:
2001:67c:188c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
196858
Signature Algorithm: sha256WithRSAEncryption
01:59:8a:62:3e:db:30:4a:ec:81:c8:1b:64:8d:c1:50:02:ee:
b3:3f:81:9d:ad:64:17:3b:86:a5:9e:8c:29:5a:d9:e1:03:5d:
4d:05:e5:db:80:02:7f:9e:73:24:0a:23:20:5d:20:42:7c:0e:
6d:91:70:dd:39:06:15:2c:e6:62:34:12:f6:53:bb:ad:7e:9c:
0d:6f:3a:0e:fc:52:4e:53:36:3a:72:1c:f0:c9:d9:2b:09:a3:
6b:a9:70:63:55:73:e8:cc:63:25:87:0c:04:b4:14:ca:5a:22:
bc:cf:57:03:b4:be:2d:54:91:03:95:58:fa:48:c1:64:7a:50:
9d:53:07:91:b1:07:ba:78:7f:bf:4f:9c:28:bc:54:e5:fb:ca:
48:6f:cf:4d:a6:88:8d:89:4a:d0:61:05:c3:46:3f:94:5e:af:
58:17:d9:00:ab:7d:95:f5:fc:80:95:f0:5e:35:07:44:86:7d:
2b:c4:b5:e0:b0:e2:a1:0f:01:ec:cf:6f:21:28:19:d5:fe:8e:
b4:00:10:2a:27:d0:d6:ee:0e:97:bf:54:e2:44:5e:ec:77:b8:
6e:23:35:69:72:68:78:b7:13:4c:6a:e6:af:b7:66:ce:d8:2c:
61:71:e3:d3:b5:54:c1:34:c2:22:41:75:28:30:0d:3c:0b:0b:
c0:cc:89:d4
-----BEGIN CERTIFICATE-----
MIIFpTCCBI2gAwIBAgISAYzI3i92ULQONDiUttuoMZZ3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDYzMDUzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzYxZDExODQ3OWI1MjIyZWYwZjg2NDE2N2NhYzViNGMwN2NjMjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdRuRXgjd6om6G6PWB9zSr2rycnd
fAExqm7jNyyS7R811ib/moyDuRGVApjkyv7yb3S3ZZGVXCrSB/pY0rHad6Dbjoii
w/x1eC5tF7MHwrfsSHkFOMLz2pzWpkGecurJLhUrcBddjEtWYYNyc0m3uuuszWUB
B83SKVdOattgwV5i55irAZWA+lfNLbTffm8UDmNtojnNfg8VWgaBgfpRHYiwN7tS
e//ydmyyTpQbhz2On1DyBsRhjrwxfemRUEbR358MBWwNXEUBiJqy5eON5Robi0Dt
7jlEFDJUpYw6/Zl1urd0TaLv7qjAFrJaPD4H+keJS8BGdVnfrox7GvjIAwIDAQAB
o4ICsTCCAq0wHQYDVR0OBBYEFExh0RhHm1Ii7w+GQWfKxbTAfMIZMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlkLzZlOWRm
ZC1jZTQ3LTRlNjEtYTMxNS1lNWFhNzQ3MDBmOWQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWQvNmU5ZGZk
LWNlNDctNGU2MS1hMzE1LWU1YWE3NDcwMGY5ZC8xL1RHSFJHRWViVWlMdkQ0WkJa
OHJGdE1COHdoay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF
BwEHAQH/BCEwHzAMBAIAATAGAwQD1QXIMA8EAgACMAkDBwAgAQZ8GIwwGgYIKwYB
BQUHAQgBAf8ECzAJoAcwBQIDAwD6MA0GCSqGSIb3DQEBCwUAA4IBAQABWYpiPtsw
SuyByBtkjcFQAu6zP4GdrWQXO4alnowpWtnhA11NBeXbgAJ/nnMkCiMgXSBCfA5t
kXDdOQYVLOZiNBL2U7utfpwNbzoO/FJOUzY6chzwydkrCaNrqXBjVXPozGMlhwwE
tBTKWiK8z1cDtL4tVJEDlVj6SMFkelCdUweRsQe6eH+/T5wovFTl+8pIb89NpoiN
iUrQYQXDRj+UXq9YF9kAq32V9fyAlfBeNQdEhn0rxLXgsOKhDwHsz28hKBnV/o60
ABAqJ9DW7g6Xv1TiRF7sd7huIzVpcmh4txNMauavt2bO2CxhcePTtVTBNMIiQXUo
MA08CwvAzInU
-----END CERTIFICATE-----
Generated at Fri May 3 13:44:56 2024 by rpki-client on console-ams.rpki-client.org