Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U1ULI4LgD6ffGU5khf4UJYNiE_8.cer
File: U1ULI4LgD6ffGU5khf4UJYNiE_8.cer (raw, json)
Hash identifier: 5hwaKN94mLqGX/eWpRew6l3uLUsPcrGsZLy8aw+Bql8=
Subject key identifier: 53:55:0B:23:82:E0:0F:A7:DF:19:4E:64:85:FE:14:25:83:62:13:FF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA991E617BAD103EE8951C6B56D4DC58
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 14:34:41 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 13244
IP: 194.9.170.0/24
IP: 194.153.171.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:1e:61:7b:ad:10:3e:e8:95:1c:6b:56:d4:dc:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 14:34:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53550b2382e00fa7df194e6485fe1425836213ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d0:b5:5f:c3:31:32:ac:dc:44:96:7f:b4:00:
9f:24:1e:da:b5:98:5c:34:20:f7:73:a6:5a:a7:81:
25:59:c1:91:9a:ab:02:2c:9d:7d:3e:f5:73:5a:2b:
4b:24:7b:8b:35:e8:9e:01:91:cf:e7:ca:10:5d:41:
88:40:c2:15:01:6c:c5:67:bf:49:0d:ef:07:59:eb:
1b:a3:02:5e:a0:0b:f3:76:b3:89:db:b8:27:52:87:
0b:df:f6:dc:92:9b:13:09:4c:7e:d2:a1:93:1b:7a:
e8:70:ea:7b:57:5a:85:72:43:20:26:99:f7:76:ce:
4e:72:ce:64:18:62:00:29:7b:72:83:3d:a9:86:29:
b4:14:c2:f5:0a:28:93:31:9d:63:a1:f1:db:bb:48:
cd:54:39:ae:25:e7:a5:f7:49:bc:73:bb:56:98:4c:
ae:ba:7b:ab:80:3a:08:a5:4c:7c:c7:6e:81:ad:3b:
cd:aa:a0:3c:c9:59:e2:85:d4:4a:d4:93:c3:e3:a5:
ab:69:5b:d3:06:1b:f7:df:56:63:e5:3e:25:3b:95:
eb:31:4e:c8:6f:5c:46:66:df:10:af:b3:9b:7b:d0:
98:9b:cf:fe:8c:55:ef:dc:86:f6:e6:5d:43:27:8c:
8d:e3:74:e9:95:96:99:7c:94:19:4f:3b:4a:3c:3e:
ee:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:55:0B:23:82:E0:0F:A7:DF:19:4E:64:85:FE:14:25:83:62:13:FF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.9.170.0/24
194.153.171.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13244
Signature Algorithm: sha256WithRSAEncryption
8f:a0:e9:fe:3c:21:09:9f:c3:3f:fe:65:7c:0d:df:d7:ef:a6:
0f:91:d9:f7:16:51:56:a4:c9:12:d3:c8:51:b8:8c:2e:36:92:
ab:c4:6a:4e:cf:f6:b1:00:e5:40:e1:4b:bc:0d:2c:64:e2:e9:
83:4b:66:7c:be:46:84:ff:bc:57:2b:ca:5e:32:86:6c:4c:51:
1b:11:33:95:0a:f8:3d:4d:56:8d:18:6a:78:29:42:cb:20:c2:
12:1d:64:a2:1b:e9:b0:23:d8:bb:69:0f:da:bb:69:16:e5:b4:
40:7c:0e:5f:a7:d3:f7:54:11:0a:da:6a:af:ec:87:08:83:3d:
4a:b8:13:41:0c:4e:c3:18:e9:6d:b1:e3:92:76:9b:59:c7:18:
42:89:2b:a8:98:3c:9b:f4:35:d4:8e:7c:b2:bf:6a:6e:7d:81:
e9:d8:87:12:0b:9c:96:37:4e:16:71:13:99:dd:e8:93:86:7a:
2a:18:51:02:8f:a2:a4:6c:96:bf:48:64:09:c9:e2:9a:59:4b:
69:f3:bf:41:99:11:43:60:ac:47:6e:ef:9a:16:5a:63:4c:7d:
c5:29:61:ae:ca:ae:02:de:65:76:7a:ce:87:1f:a5:a9:4c:fb:
e0:6e:b1:06:ab:99:59:39:d0:34:9f:7c:dd:b9:5f:70:32:90:
97:c5:2d:1d
-----BEGIN CERTIFICATE-----
MIIFmTCCBIGgAwIBAgISAYzKmR5he60QPuiVHGtW1NxYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTQzNDQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzU1MGIyMzgyZTAwZmE3ZGYxOTRlNjQ4NWZlMTQyNTgzNjIxM2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytC1X8MxMqzcRJZ/tACfJB7atZhc
NCD3c6Zap4ElWcGRmqsCLJ19PvVzWitLJHuLNeieAZHP58oQXUGIQMIVAWzFZ79J
De8HWesbowJeoAvzdrOJ27gnUocL3/bckpsTCUx+0qGTG3rocOp7V1qFckMgJpn3
ds5Ocs5kGGIAKXtygz2phim0FML1CiiTMZ1jofHbu0jNVDmuJeel90m8c7tWmEyu
unurgDoIpUx8x26BrTvNqqA8yVnihdRK1JPD46WraVvTBhv331Zj5T4lO5XrMU7I
b1xGZt8Qr7Obe9CYm8/+jFXv3Ib25l1DJ4yN43TplZaZfJQZTztKPD7uGQIDAQAB
o4ICpTCCAqEwHQYDVR0OBBYEFFNVCyOC4A+n3xlOZIX+FCWDYhP/MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U3L2M1YmI2
Yi02NDI1LTQ1M2EtYjk0Mi04OWM1M2Q2MzA3NjUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcvYzViYjZi
LTY0MjUtNDUzYS1iOTQyLTg5YzUzZDYzMDc2NS8xL1UxVUxJNExnRDZmZkdVNWto
ZjRVSllOaUVfOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQAwgmqAwQAwpmrMBkGCCsGAQUFBwEIAQH/BAow
CKAGMAQCAjO8MA0GCSqGSIb3DQEBCwUAA4IBAQCPoOn+PCEJn8M//mV8Dd/X76YP
kdn3FlFWpMkS08hRuIwuNpKrxGpOz/axAOVA4Uu8DSxk4umDS2Z8vkaE/7xXK8pe
MoZsTFEbETOVCvg9TVaNGGp4KULLIMISHWSiG+mwI9i7aQ/au2kW5bRAfA5fp9P3
VBEK2mqv7IcIgz1KuBNBDE7DGOltseOSdptZxxhCiSuomDyb9DXUjnyyv2pufYHp
2IcSC5yWN04WcROZ3eiThnoqGFECj6KkbJa/SGQJyeKaWUtp879BmRFDYKxHbu+a
FlpjTH3FKWGuyq4C3mV2es6HH6WpTPvgbrEGq5lZOdA0n3zduV9wMpCXxS0d
-----END CERTIFICATE-----
Generated at Fri May 3 09:08:34 2024 by rpki-client on console-ams.rpki-client.org