Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TOlmOD4HjvQLXtgi5uKjAbBRDs4.cer
File: TOlmOD4HjvQLXtgi5uKjAbBRDs4.cer (raw, json)
Hash identifier: iFzIvhql+I3f7K7bPwQU8BuuyLzDXetrsznrczqYNBk=
Subject key identifier: 4C:E9:66:38:3E:07:8E:F4:0B:5E:D8:22:E6:E2:A3:01:B0:51:0E:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DF307123D2CC98473CFBD31FD45D98
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/66bb8b-cc0d-4d33-8b47-3723d6e6b6ef/1/TOlmOD4HjvQLXtgi5uKjAbBRDs4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/66bb8b-cc0d-4d33-8b47-3723d6e6b6ef/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:31:59 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 51307
IP: 194.213.118.0/23
IP: 2001:67c:298::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:30:71:23:d2:cc:98:47:3c:fb:d3:1f:d4:5d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:31:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ce966383e078ef40b5ed822e6e2a301b0510ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9e:6f:51:31:76:a0:d8:d0:a4:77:ac:ba:e6:
bd:78:50:d9:8c:38:03:ff:3e:8e:bf:43:2e:b2:8e:
87:fa:68:38:68:5d:03:38:1d:d3:49:86:1e:95:f0:
01:c2:ff:d8:18:d1:ef:bd:bc:f0:c4:98:b6:5f:43:
d6:e7:e2:ee:04:cb:2a:e6:0c:ca:05:e5:7c:f0:7a:
f9:89:6f:8e:66:5c:af:14:4b:dc:dd:2e:f3:74:82:
c5:89:74:37:d4:8d:46:0e:cf:19:c9:f1:d4:ad:7a:
a3:8f:07:8d:57:b5:e1:12:39:94:eb:ca:98:a7:b2:
d3:d2:02:98:07:58:8c:9b:c5:d5:f5:44:77:3a:b2:
b6:45:78:9c:d8:68:05:89:0a:13:f0:20:4b:fb:c5:
63:78:15:ad:04:4e:0e:c6:4a:d8:de:58:0f:2f:d4:
6d:0b:ca:4d:43:32:f0:2b:2f:13:13:7b:88:88:96:
5e:39:d7:08:f6:46:26:9e:99:1d:25:80:57:4a:dc:
67:7a:13:a6:87:ee:a8:06:93:9a:c9:fa:c9:55:3e:
24:0d:80:43:86:8d:41:07:de:a4:a2:ee:f6:fd:f0:
a4:d9:91:9e:d7:d8:3b:9c:41:29:8c:fc:0c:a5:12:
9a:ea:34:56:0b:c3:45:a0:5c:6e:17:da:f9:80:d2:
08:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E9:66:38:3E:07:8E:F4:0B:5E:D8:22:E6:E2:A3:01:B0:51:0E:CE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/66bb8b-cc0d-4d33-8b47-3723d6e6b6ef/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/66bb8b-cc0d-4d33-8b47-3723d6e6b6ef/1/TOlmOD4HjvQLXtgi5uKjAbBRDs4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.213.118.0/23
IPv6:
2001:67c:298::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51307
Signature Algorithm: sha256WithRSAEncryption
7b:cb:d2:08:b4:fe:d3:0a:50:1a:a8:3f:f3:d0:4d:03:1f:10:
d3:5e:29:03:f6:76:b6:cf:7c:0d:b0:b2:11:6c:f0:11:cb:4d:
40:c2:0c:cf:9c:bf:48:27:0b:15:73:84:a1:b1:01:d3:dc:29:
f1:4d:e2:ec:9a:dc:cf:85:08:14:72:a4:e0:1a:ff:17:d9:45:
c0:c8:ed:75:6b:07:2a:41:a3:91:15:b6:ec:5b:c8:5f:20:d7:
a5:fc:96:71:bb:db:5c:e5:21:0e:e4:0b:be:b8:d8:00:44:20:
7f:e8:4d:d8:ff:42:b6:64:ce:ec:4e:49:73:02:f2:03:c3:5f:
31:d7:09:a8:df:df:3f:99:97:b9:e8:1d:bb:fc:9f:90:53:60:
f3:76:59:c2:fd:1e:a0:33:0b:82:d0:c4:8d:72:66:10:d1:85:
7e:6f:23:17:38:88:51:cf:0a:43:11:dc:3a:d6:4d:db:26:fb:
c8:a4:2a:37:05:40:d4:7c:81:68:40:86:ab:90:2e:1c:ad:6e:
8e:bb:72:2e:25:da:30:28:1e:ee:36:b6:e6:2a:7b:48:df:7c:
95:bc:79:7e:af:ed:ac:90:7e:ea:6a:21:7e:7d:dc:e4:52:33:
1e:b4:3e:85:e9:c7:56:48:c5:8f:c0:b5:cb:d6:cb:b0:ac:4c:
96:e0:1c:94
-----BEGIN CERTIFICATE-----
MIIFpTCCBI2gAwIBAgISAYzI3zBxI9LMmEc8+9Mf1F2YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDYzMTU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Y2U5NjYzODNlMDc4ZWY0MGI1ZWQ4MjJlNmUyYTMwMWIwNTEwZWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZ5vUTF2oNjQpHesuua9eFDZjDgD
/z6Ov0Muso6H+mg4aF0DOB3TSYYelfABwv/YGNHvvbzwxJi2X0PW5+LuBMsq5gzK
BeV88Hr5iW+OZlyvFEvc3S7zdILFiXQ31I1GDs8ZyfHUrXqjjweNV7XhEjmU68qY
p7LT0gKYB1iMm8XV9UR3OrK2RXic2GgFiQoT8CBL+8VjeBWtBE4OxkrY3lgPL9Rt
C8pNQzLwKy8TE3uIiJZeOdcI9kYmnpkdJYBXStxnehOmh+6oBpOayfrJVT4kDYBD
ho1BB96kou72/fCk2ZGe19g7nEEpjPwMpRKa6jRWC8NFoFxuF9r5gNIIvQIDAQAB
o4ICsTCCAq0wHQYDVR0OBBYEFEzpZjg+B470C17YIubiowGwUQ7OMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RjLzY2YmI4
Yi1jYzBkLTRkMzMtOGI0Ny0zNzIzZDZlNmI2ZWYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGMvNjZiYjhi
LWNjMGQtNGQzMy04YjQ3LTM3MjNkNmU2YjZlZi8xL1RPbG1PRDRIanZRTFh0Z2k1
dUtqQWJCUkRzNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF
BwEHAQH/BCEwHzAMBAIAATAGAwQBwtV2MA8EAgACMAkDBwAgAQZ8ApgwGgYIKwYB
BQUHAQgBAf8ECzAJoAcwBQIDAMhrMA0GCSqGSIb3DQEBCwUAA4IBAQB7y9IItP7T
ClAaqD/z0E0DHxDTXikD9na2z3wNsLIRbPARy01AwgzPnL9IJwsVc4ShsQHT3Cnx
TeLsmtzPhQgUcqTgGv8X2UXAyO11awcqQaORFbbsW8hfINel/JZxu9tc5SEO5Au+
uNgARCB/6E3Y/0K2ZM7sTklzAvIDw18x1wmo398/mZe56B27/J+QU2DzdlnC/R6g
MwuC0MSNcmYQ0YV+byMXOIhRzwpDEdw61k3bJvvIpCo3BUDUfIFoQIarkC4crW6O
u3IuJdowKB7uNrbmKntI33yVvHl+r+2skH7qaiF+fdzkUjMetD6F6cdWSMWPwLXL
1suwrEyW4ByU
-----END CERTIFICATE-----
Generated at Fri May 3 07:01:34 2024 by rpki-client on console-ams.rpki-client.org