Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer
File: Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer (raw, json)
Hash identifier: owB66TZBt/RaXogT1oF9oNNZJD16pqQ5Acu0k7doE+4=
Subject key identifier: 4E:69:B4:02:B6:7D:75:93:6F:45:DC:8B:C5:4B:86:81:4E:06:36:BA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DAEE0F688582F8BF4DEC85CA6D2D9A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 206013
IP: 80.89.160.0/20
IP: 80.94.208.0/20
IP: 88.83.128.0/19
IP: 2a00:6e80::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:ee:0f:68:85:82:f8:bf:4d:ec:85:ca:6d:2d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e69b402b67d75936f45dc8bc54b86814e0636ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b9:7f:80:a7:f3:42:30:1f:7e:8f:34:75:03:
0a:c5:8f:d1:0e:d3:87:f6:39:f0:57:32:32:d4:0d:
ce:32:17:6f:6b:98:df:2a:bb:6a:cf:89:c0:85:a6:
dc:28:b5:85:11:cf:f5:e4:11:2e:0c:14:d0:cb:97:
ad:99:83:7c:b0:97:8a:ba:ac:61:f7:ef:6c:8b:b7:
a0:28:17:33:73:ac:cd:4e:71:a9:2b:15:85:94:9e:
24:8c:49:96:16:20:c6:91:34:97:9a:cb:e7:98:73:
e5:00:c2:5c:30:75:a5:0d:16:31:76:ef:54:0a:c3:
4d:19:52:92:60:31:28:2d:16:e8:30:51:c2:fe:3e:
3c:aa:0f:d1:2c:c4:c7:05:bc:1e:8c:92:26:aa:5e:
02:c6:78:82:d0:df:58:cb:15:b7:3d:69:88:f3:9d:
98:c7:d4:c3:50:bd:36:00:41:4b:22:73:7f:6a:fe:
10:03:8e:79:34:a1:1d:be:41:5b:d7:00:fd:e9:9f:
0c:5c:f5:12:d5:24:0f:e6:00:6b:4b:90:15:2d:04:
60:2f:8f:6d:a2:8f:65:f0:89:ce:35:04:6b:23:51:
3d:62:7b:21:ec:bf:10:f1:03:b6:56:3c:0e:10:e6:
8a:6b:ad:29:df:91:bd:be:10:7b:76:e2:c9:57:03:
70:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:69:B4:02:B6:7D:75:93:6F:45:DC:8B:C5:4B:86:81:4E:06:36:BA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.89.160.0/20
80.94.208.0/20
88.83.128.0/19
IPv6:
2a00:6e80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206013
Signature Algorithm: sha256WithRSAEncryption
11:fd:5f:e3:7f:1e:cf:c0:fc:ba:e1:08:e1:99:1b:f7:f5:e4:
44:61:2c:5a:a6:b2:08:af:52:a1:e5:83:d8:c3:1a:1c:87:30:
a9:0a:45:87:17:e1:25:f0:29:63:db:96:3b:6c:94:07:ea:dc:
b0:cc:9e:c9:86:5f:40:a0:e1:4e:82:d7:cc:ad:ab:f5:b5:da:
b2:58:de:53:8c:32:b0:37:a0:72:44:29:69:0a:ea:d8:ad:3e:
31:2a:59:25:e3:4d:4f:74:7d:a9:0d:bb:5b:9b:93:ba:58:14:
f4:fc:9b:ea:d8:93:b7:c9:34:6a:51:aa:5d:87:11:9c:fd:84:
e5:05:21:3f:f5:20:57:9b:b3:45:9e:69:47:cd:34:23:67:20:
65:43:86:38:57:b7:a0:e0:08:16:6c:69:45:27:cf:c3:d3:f3:
68:e8:ea:ce:bc:83:40:8a:59:19:5a:55:f4:47:68:42:62:4e:
2a:f7:53:47:2e:2e:b0:e1:fe:80:e1:48:fc:ec:fc:d8:8f:6e:
08:80:5a:fe:51:7c:7a:dd:44:22:e0:2f:86:7c:c4:a1:43:1d:
82:33:66:19:54:aa:ec:b2:6f:4d:f3:d6:53:ce:20:81:30:9f:
e5:27:dd:34:b4:3f:9a:97:a7:d8:11:01:22:64:69:f7:fb:75:
c3:e1:3e:e0
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgISAYzC2u4PaIWC+L9N7IXKbS2aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDIyOTM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTY5YjQwMmI2N2Q3NTkzNmY0NWRjOGJjNTRiODY4MTRlMDYzNmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbl/gKfzQjAffo80dQMKxY/RDtOH
9jnwVzIy1A3OMhdva5jfKrtqz4nAhabcKLWFEc/15BEuDBTQy5etmYN8sJeKuqxh
9+9si7egKBczc6zNTnGpKxWFlJ4kjEmWFiDGkTSXmsvnmHPlAMJcMHWlDRYxdu9U
CsNNGVKSYDEoLRboMFHC/j48qg/RLMTHBbwejJImql4CxniC0N9YyxW3PWmI852Y
x9TDUL02AEFLInN/av4QA455NKEdvkFb1wD96Z8MXPUS1SQP5gBrS5AVLQRgL49t
oo9l8InONQRrI1E9Ynsh7L8Q8QO2VjwOEOaKa60p35G9vhB7duLJVwNwYwIDAQAB
o4ICuzCCArcwHQYDVR0OBBYEFE5ptAK2fXWTb0Xci8VLhoFOBja6MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NkLzY4OWFi
NS0zMGQyLTQ2YTMtOGM1NC0xNmI0MTk2ZmEyOTQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2QvNjg5YWI1
LTMwZDItNDZhMy04YzU0LTE2YjQxOTZmYTI5NC8xL1RtbTBBclo5ZFpOdlJkeUx4
VXVHZ1U0R05yby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF
BwEHAQH/BCswKTAYBAIAATASAwQEUFmgAwQEUF7QAwQFWFOAMA0EAgACMAcDBQAq
AG6AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMkvTANBgkqhkiG9w0BAQsFAAOC
AQEAEf1f438ez8D8uuEI4Zkb9/XkRGEsWqayCK9SoeWD2MMaHIcwqQpFhxfhJfAp
Y9uWO2yUB+rcsMyeyYZfQKDhToLXzK2r9bXasljeU4wysDegckQpaQrq2K0+MSpZ
JeNNT3R9qQ27W5uTulgU9Pyb6tiTt8k0alGqXYcRnP2E5QUhP/UgV5uzRZ5pR800
I2cgZUOGOFe3oOAIFmxpRSfPw9PzaOjqzryDQIpZGVpV9EdoQmJOKvdTRy4usOH+
gOFI/Oz82I9uCIBa/lF8et1EIuAvhnzEoUMdgjNmGVSq7LJvTfPWU84ggTCf5Sfd
NLQ/mpen2BEBImRp9/t1w+E+4A==
-----END CERTIFICATE-----
Generated at Fri May 3 11:33:54 2024 by rpki-client on console-ams.rpki-client.org