Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TblS7RzXo4A89Nv9NA6nSWMmi6A.cer
File: TblS7RzXo4A89Nv9NA6nSWMmi6A.cer (raw, json)
Hash identifier: xnIS6x4NCzMEvSAKr+v1aiydDnzfxWAsh/A6v3wPG3Y=
Subject key identifier: 4D:B9:52:ED:1C:D7:A3:80:3C:F4:DB:FD:34:0E:A7:49:63:26:8B:A0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC794F80F88DE3C2C3FEED04864A0350D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:31:18 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 50578
IP: 91.238.50.0/24
IP: 2001:678:260::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:f8:0f:88:de:3c:2c:3f:ee:d0:48:64:a0:35:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4db952ed1cd7a3803cf4dbfd340ea74963268ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:02:4b:db:51:e3:20:cc:19:05:34:1b:89:e1:
86:3e:ee:f1:fa:65:1b:4d:40:01:df:68:d8:f5:f1:
37:32:f1:08:2e:ee:e5:73:52:c1:07:af:f0:3d:78:
c3:67:09:10:2c:97:43:db:15:43:e3:7f:ee:bb:fd:
a3:b8:52:f0:30:44:6f:d9:ad:36:35:e7:10:14:8d:
ef:f3:a1:3f:f7:eb:52:70:21:4b:ca:ee:a8:ca:a9:
c4:80:68:55:55:a0:f4:de:55:98:dc:06:df:69:75:
a3:48:3c:e2:bb:04:07:81:52:bd:7f:53:d0:ea:1a:
2b:7e:08:65:db:12:09:ca:4d:7f:5a:8c:6c:bc:87:
6d:c7:f0:df:21:df:83:4f:77:5e:dd:3d:9d:b9:b7:
30:4f:42:43:50:3b:81:13:5b:f9:ad:4a:85:9d:bd:
7c:e3:43:ce:78:09:3f:9b:89:da:b0:bc:1d:5e:8a:
b3:71:0d:14:c5:88:7f:f5:1f:6e:dc:a0:8f:72:a5:
3c:79:29:0f:0b:7a:90:27:a8:bf:3e:25:48:be:b8:
00:2e:ae:3c:09:8f:d9:09:5e:6d:d9:17:ea:fc:4c:
d7:7d:fa:12:f6:02:a7:d2:5f:f2:11:91:e1:d5:ed:
3d:cd:f8:71:6c:22:0b:71:2d:8b:88:0d:f3:6f:88:
00:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B9:52:ED:1C:D7:A3:80:3C:F4:DB:FD:34:0E:A7:49:63:26:8B:A0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.50.0/24
IPv6:
2001:678:260::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50578
Signature Algorithm: sha256WithRSAEncryption
08:72:87:59:ed:49:6b:f2:47:e7:ee:64:c7:a1:86:ec:72:9e:
33:85:71:a0:20:1c:c3:75:5b:7f:38:1a:14:06:d0:26:b4:ae:
5e:b6:a8:0d:19:b0:4c:43:55:3b:b4:a6:60:d1:fa:9d:73:20:
8e:4c:dc:f1:f8:21:ae:11:96:a5:93:60:37:f1:ad:3e:64:f1:
2f:ae:41:71:1f:f6:8e:8b:36:c8:ec:8c:51:0f:7d:8b:1e:ab:
37:77:8a:6d:61:82:d7:02:04:78:7a:2d:01:2b:31:69:f5:d7:
2a:9a:1b:13:0d:5b:6d:03:c8:62:2d:a9:dc:60:1d:8d:0e:28:
56:0e:21:6d:8c:53:91:83:bd:58:fb:27:67:bf:70:df:ba:9a:
a3:e0:73:f1:bf:1f:c3:c5:47:c3:7d:b1:a8:bc:3d:4d:3a:3c:
16:a3:90:95:e8:58:07:fe:21:51:5e:f3:9d:35:dc:61:54:d3:
77:0c:3f:c3:fb:8d:97:df:86:f8:8e:3c:fa:65:10:04:c6:b4:
ea:c0:7a:e6:7a:be:0e:20:c3:ae:cf:10:5e:83:e6:67:3e:7a:
9a:e3:a7:3b:ac:93:f2:9b:5d:ba:57:2c:07:72:85:09:5b:80:
91:77:94:0f:98:eb:d6:4f:df:c7:aa:b5:69:c6:1e:aa:1c:0c:
c1:c2:86:64
-----BEGIN CERTIFICATE-----
MIIFpTCCBI2gAwIBAgISAYzHlPgPiN48LD/u0EhkoDUNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDAzMTE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZGI5NTJlZDFjZDdhMzgwM2NmNGRiZmQzNDBlYTc0OTYzMjY4YmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgJL21HjIMwZBTQbieGGPu7x+mUb
TUAB32jY9fE3MvEILu7lc1LBB6/wPXjDZwkQLJdD2xVD43/uu/2juFLwMERv2a02
NecQFI3v86E/9+tScCFLyu6oyqnEgGhVVaD03lWY3AbfaXWjSDziuwQHgVK9f1PQ
6horfghl2xIJyk1/WoxsvIdtx/DfId+DT3de3T2dubcwT0JDUDuBE1v5rUqFnb18
40POeAk/m4nasLwdXoqzcQ0UxYh/9R9u3KCPcqU8eSkPC3qQJ6i/PiVIvrgALq48
CY/ZCV5t2Rfq/EzXffoS9gKn0l/yEZHh1e09zfhxbCILcS2LiA3zb4gADQIDAQAB
o4ICsTCCAq0wHQYDVR0OBBYEFE25Uu0c16OAPPTb/TQOp0ljJougMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEwL2M0ZjJl
Mi0wMTg4LTRhNDMtODUwMy1kMjYwMWNjMTIzNzcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTAvYzRmMmUy
LTAxODgtNGE0My04NTAzLWQyNjAxY2MxMjM3Ny8xL1RibFM3UnpYbzRBODlOdjlO
QTZuU1dNbWk2QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF
BwEHAQH/BCEwHzAMBAIAATAGAwQAW+4yMA8EAgACMAkDBwAgAQZ4AmAwGgYIKwYB
BQUHAQgBAf8ECzAJoAcwBQIDAMWSMA0GCSqGSIb3DQEBCwUAA4IBAQAIcodZ7Ulr
8kfn7mTHoYbscp4zhXGgIBzDdVt/OBoUBtAmtK5etqgNGbBMQ1U7tKZg0fqdcyCO
TNzx+CGuEZalk2A38a0+ZPEvrkFxH/aOizbI7IxRD32LHqs3d4ptYYLXAgR4ei0B
KzFp9dcqmhsTDVttA8hiLancYB2NDihWDiFtjFORg71Y+ydnv3Dfupqj4HPxvx/D
xUfDfbGovD1NOjwWo5CV6FgH/iFRXvOdNdxhVNN3DD/D+42X34b4jjz6ZRAExrTq
wHrmer4OIMOuzxBeg+ZnPnqa46c7rJPym126VywHcoUJW4CRd5QPmOvWT9/HqrVp
xh6qHAzBwoZk
-----END CERTIFICATE-----
Generated at Fri May 3 03:00:58 2024 by rpki-client on console-fra.rpki-client.org