Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/To25ZDiURsq8r3lBzRmDQsIzbdA.cer
File: To25ZDiURsq8r3lBzRmDQsIzbdA.cer (raw, json)
Hash identifier: 70DFO+kRsZxuiQ3RhXJpcEZfNnlDh05lDxHmjmRjE5U=
Subject key identifier: 4E:8D:B9:64:38:94:46:CA:BC:AF:79:41:CD:19:83:42:C2:33:6D:D0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5002BC0E7F7F45ADAB30C92C6F07996
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:29:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 200565
IP: 185.11.64.0/22
IP: 185.99.136.0/22
IP: 2a12:4540::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:2b:c0:e7:f7:f4:5a:da:b3:0c:92:c6:f0:79:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e8db964389446cabcaf7941cd198342c2336dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c8:94:ba:d5:41:eb:8e:f3:bb:c1:1c:12:91:
aa:af:4e:9a:9a:4e:bb:93:38:a7:52:83:d6:9c:9c:
0a:7c:08:3a:e3:9a:8f:bd:32:d2:74:0d:13:45:0b:
d0:11:c6:c2:df:31:27:ef:d4:22:ae:57:68:ff:00:
c0:e2:37:a6:a8:af:93:f6:9c:d4:2f:48:ab:95:48:
49:4c:b9:e7:e5:55:7c:65:26:01:28:bd:dd:a8:63:
aa:cf:58:f6:a4:1f:70:a5:60:d5:87:cf:1a:28:7d:
19:2f:03:66:14:4d:0e:01:f3:00:2d:f0:c1:da:68:
ca:4e:2f:64:f2:52:5d:7d:82:ae:de:27:59:ab:1f:
d8:61:d8:28:58:4d:6f:83:af:a2:62:23:ff:d6:aa:
f6:24:5d:51:f7:17:70:b0:7b:8e:a0:71:e6:04:f2:
5f:cd:15:3c:2c:69:1e:29:18:1c:d7:26:c4:07:2f:
35:11:c7:e7:da:d7:82:11:7b:f1:49:5b:fb:98:99:
2a:17:c1:90:b9:d2:be:f3:eb:eb:04:d6:9e:aa:03:
33:0c:45:8a:6c:2a:39:62:8c:fd:86:16:87:9b:e8:
0d:98:81:cd:a7:6a:e7:5d:57:77:a1:fc:bf:0b:b8:
78:2f:aa:d1:a1:77:ca:ae:83:ef:fc:f7:f9:dc:da:
9e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:8D:B9:64:38:94:46:CA:BC:AF:79:41:CD:19:83:42:C2:33:6D:D0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.64.0/22
185.99.136.0/22
IPv6:
2a12:4540::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200565
Signature Algorithm: sha256WithRSAEncryption
34:df:a9:54:e7:07:99:e5:f3:6e:1a:cf:66:24:bc:1c:75:99:
80:02:9b:87:44:bf:8c:53:ac:08:6a:8f:98:2d:ff:ee:2e:36:
2b:8c:26:88:02:eb:05:ae:40:e1:d0:47:91:95:8e:f3:74:9a:
af:09:e0:ad:bf:23:0e:ff:5b:8a:ea:c0:9a:4d:1a:c0:d6:79:
7c:d2:7d:e2:5a:1a:83:42:ac:93:c4:c9:80:f9:2a:3f:54:4a:
55:75:df:c5:77:30:de:5b:41:31:d0:a4:3b:f3:63:68:67:6f:
d4:59:ad:70:21:b5:36:6c:1c:85:fa:b7:58:62:fa:01:f6:e5:
86:9f:01:38:37:26:07:66:89:f4:ce:d6:da:96:f4:d3:81:08:
d8:78:24:e6:a3:79:78:a4:02:08:bf:71:2f:b4:d7:98:5a:d0:
d7:5b:d2:e7:de:06:4e:37:26:3b:9b:77:ee:1b:94:dc:45:60:
8c:5b:d2:f5:ea:2d:64:5d:4d:52:25:9f:e2:fa:9a:5a:a0:66:
97:d7:49:31:09:a2:9d:2f:ec:be:08:6b:b4:38:e5:de:c4:ff:
8d:73:c6:0e:04:7a:5c:3f:64:24:63:a5:57:8a:72:4f:6e:7e:
2b:15:fc:21:fc:a4:6c:c2:7e:00:58:83:6a:b1:21:d5:fb:30:
28:91:f3:56
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAYzFACvA5/f0WtqzDJLG8HmWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTIyOTMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZThkYjk2NDM4OTQ0NmNhYmNhZjc5NDFjZDE5ODM0MmMyMzM2ZGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssiUutVB647zu8EcEpGqr06amk67
kzinUoPWnJwKfAg645qPvTLSdA0TRQvQEcbC3zEn79Qirldo/wDA4jemqK+T9pzU
L0irlUhJTLnn5VV8ZSYBKL3dqGOqz1j2pB9wpWDVh88aKH0ZLwNmFE0OAfMALfDB
2mjKTi9k8lJdfYKu3idZqx/YYdgoWE1vg6+iYiP/1qr2JF1R9xdwsHuOoHHmBPJf
zRU8LGkeKRgc1ybEBy81Ecfn2teCEXvxSVv7mJkqF8GQudK+8+vrBNaeqgMzDEWK
bCo5Yoz9hhaHm+gNmIHNp2rnXVd3ofy/C7h4L6rRoXfKroPv/Pf53NqeAwIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFE6NuWQ4lEbKvK95Qc0Zg0LCM23QMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVlL2IzOTYx
Yy0zZjY4LTQ1YzEtYTA0ZS05NTQ2OWJmMDkzNDAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUvYjM5NjFj
LTNmNjgtNDVjMS1hMDRlLTk1NDY5YmYwOTM0MC8xL1RvMjVaRGlVUnNxOHIzbEJ6
Um1EUXNJemJkQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQCuQtAAwQCuWOIMA0EAgACMAcDBQMqEkVAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMPdTANBgkqhkiG9w0BAQsFAAOCAQEANN+p
VOcHmeXzbhrPZiS8HHWZgAKbh0S/jFOsCGqPmC3/7i42K4wmiALrBa5A4dBHkZWO
83Sarwngrb8jDv9biurAmk0awNZ5fNJ94loag0Ksk8TJgPkqP1RKVXXfxXcw3ltB
MdCkO/NjaGdv1FmtcCG1Nmwchfq3WGL6Afblhp8BODcmB2aJ9M7W2pb004EI2Hgk
5qN5eKQCCL9xL7TXmFrQ11vS594GTjcmO5t37huU3EVgjFvS9eotZF1NUiWf4vqa
WqBml9dJMQminS/svghrtDjl3sT/jXPGDgR6XD9kJGOlV4pyT25+KxX8IfykbMJ+
AFiDarEh1fswKJHzVg==
-----END CERTIFICATE-----
Generated at Fri May 3 09:08:25 2024 by rpki-client on console-ams.rpki-client.org