Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
File: U-8ohOShM1XbZJo0k1J8RCKJc7g.cer (raw, json)
Hash identifier: n8d9K0x3IuoOicjf14k2rbF/6epxZLAMpAMDXrpMmTo=
Subject key identifier: 53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7953729F9F8B6D91BC9A74D844F091B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:31:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 202591
IP: 45.154.164.0/22
IP: 92.119.28.0/22
IP: 185.150.184.0/22
IP: 2a07:7280::/29
IP: 2a09:b340::/29
IP: 2a0f:bd00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:37:29:f9:f8:b6:d9:1b:c9:a7:4d:84:4f:09:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53ef2884e4a13355db649a3493527c44228973b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0c:d4:16:ec:be:4c:02:b7:1e:fa:ce:74:01:
5a:af:16:09:92:44:da:e5:3f:6f:9f:e5:f0:c3:e3:
83:e8:c5:84:61:44:76:06:1c:21:6d:76:b6:51:cd:
bf:9f:85:56:ae:ce:17:e8:5a:5d:a7:68:fb:76:00:
d7:58:94:2c:5d:79:b9:f7:60:c2:63:65:82:f5:89:
f6:96:a1:0e:d6:34:57:3f:e6:8e:38:37:0a:10:c9:
cc:1d:e7:2c:51:ef:d3:e8:d5:72:b0:4f:81:32:33:
be:4f:5c:e0:90:b9:ee:48:01:5f:ff:05:c3:00:d6:
cf:67:88:0c:98:da:c3:3b:2c:1d:34:19:da:e0:50:
fd:5c:dd:4d:ec:cb:9a:1e:55:27:e6:d5:d3:21:45:
fa:07:33:91:bb:e7:c8:33:fd:24:ac:5a:49:8d:80:
08:d4:f7:f2:d5:c5:83:c6:97:bf:4f:ad:6a:ac:e7:
55:0c:12:14:33:b5:b5:46:2e:af:08:52:1b:aa:f6:
a2:13:a6:e5:11:18:82:3b:97:1c:8b:6e:f0:2c:09:
81:aa:e9:4a:79:32:fd:35:d6:27:1f:e1:65:4b:28:
53:36:0f:e7:74:e4:3b:89:1c:37:6d:c5:8d:94:1a:
39:6e:71:9e:64:24:9e:9f:e1:cd:c1:fc:f6:27:d6:
03:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.164.0/22
92.119.28.0/22
185.150.184.0/22
IPv6:
2a07:7280::/29
2a09:b340::/29
2a0f:bd00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202591
Signature Algorithm: sha256WithRSAEncryption
8e:dc:4e:34:e8:35:95:7f:bd:30:49:56:bf:8e:b0:33:0f:45:
d1:53:68:14:58:e6:ab:6a:4e:c8:8d:72:79:00:41:41:a4:44:
57:42:55:ba:cb:69:1b:38:03:03:03:a2:61:22:ae:42:bf:6e:
11:96:db:74:d2:3d:43:35:a7:c9:dc:35:11:95:80:e5:c3:82:
21:ba:7d:21:49:d2:29:cc:56:2f:5b:91:ed:57:f3:3d:f8:52:
8e:06:2e:46:63:9f:b1:a4:ca:9a:73:7c:3d:bf:81:66:2c:15:
18:b6:45:d2:31:95:09:0b:4c:42:65:aa:c5:72:40:36:b6:0c:
fa:50:6e:56:30:5b:e6:1d:d0:ab:07:c6:67:1c:30:f1:3c:04:
76:1a:55:17:98:88:1a:93:c5:5a:dc:5d:90:9b:81:10:f8:34:
1d:7c:11:4a:3b:45:bc:98:52:98:af:07:22:73:64:cc:54:9e:
44:bf:de:f7:e8:68:62:46:6d:37:ab:ac:e7:f0:a6:c8:94:3f:
95:05:da:34:4e:ef:ad:32:db:83:91:6a:3c:97:2a:12:d5:8a:
86:22:e3:89:b8:da:dc:83:3b:b2:80:4e:8e:f6:d3:9d:d9:9d:
3b:e5:e0:b1:b5:57:42:ea:e9:30:75:7b:72:7c:f1:b8:ac:27:
be:d7:cd:9e
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgISAYzHlTcp+fi22RvJp02ETwkbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDAzMTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1M2VmMjg4NGU0YTEzMzU1ZGI2NDlhMzQ5MzUyN2M0NDIyODk3M2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAzUFuy+TAK3HvrOdAFarxYJkkTa
5T9vn+Xww+OD6MWEYUR2BhwhbXa2Uc2/n4VWrs4X6Fpdp2j7dgDXWJQsXXm592DC
Y2WC9Yn2lqEO1jRXP+aOODcKEMnMHecsUe/T6NVysE+BMjO+T1zgkLnuSAFf/wXD
ANbPZ4gMmNrDOywdNBna4FD9XN1N7MuaHlUn5tXTIUX6BzORu+fIM/0krFpJjYAI
1Pfy1cWDxpe/T61qrOdVDBIUM7W1Ri6vCFIbqvaiE6blERiCO5cci27wLAmBqulK
eTL9NdYnH+FlSyhTNg/ndOQ7iRw3bcWNlBo5bnGeZCSen+HNwfz2J9YDQwIDAQAB
o4ICyTCCAsUwHQYDVR0OBBYEFFPvKITkoTNV22SaNJNSfEQiiXO4MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U5LzEzYTU3
Yy1jYzRmLTQ1YmMtYWY5Zi05MzY3ZTQyMzg5ZDkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkvMTNhNTdj
LWNjNGYtNDViYy1hZjlmLTkzNjdlNDIzODlkOS8xL1UtOG9oT1NoTTFYYlpKbzBr
MUo4UkNLSmM3Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEgGCCsGAQUF
BwEHAQH/BDkwNzAYBAIAATASAwQCLZqkAwQCXHccAwQCuZa4MBsEAgACMBUDBQMq
B3KAAwUDKgmzQAMFAyoPvQAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAxdfMA0G
CSqGSIb3DQEBCwUAA4IBAQCO3E406DWVf70wSVa/jrAzD0XRU2gUWOarak7IjXJ5
AEFBpERXQlW6y2kbOAMDA6JhIq5Cv24Rltt00j1DNafJ3DURlYDlw4Ihun0hSdIp
zFYvW5HtV/M9+FKOBi5GY5+xpMqac3w9v4FmLBUYtkXSMZUJC0xCZarFckA2tgz6
UG5WMFvmHdCrB8ZnHDDxPAR2GlUXmIgak8Va3F2Qm4EQ+DQdfBFKO0W8mFKYrwci
c2TMVJ5Ev9736GhiRm03q6zn8KbIlD+VBdo0Tu+tMtuDkWo8lyoS1YqGIuOJuNrc
gzuygE6O9tOd2Z075eCxtVdC6ukwdXtyfPG4rCe+182e
-----END CERTIFICATE-----
Generated at Fri May 3 09:08:32 2024 by rpki-client on console-ams.rpki-client.org