Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U1vkU3bViYdFK9Bka5p0z562yy0.cer
File: U1vkU3bViYdFK9Bka5p0z562yy0.cer (raw, json)
Hash identifier: ZnpV3oLEi8AYs5XccigRtfdC98urfRkOSrz42KxmZ9s=
Subject key identifier: 53:5B:E4:53:76:D5:89:87:45:2B:D0:64:6B:9A:74:CF:9E:B6:CB:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8024FBAE98EC0F86E205F0F5C368954
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:30:43 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 200069
IP: 45.14.148.0/22
IP: 87.253.232.0/21
IP: 185.189.236.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:4f:ba:e9:8e:c0:f8:6e:20:5f:0f:5c:36:89:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=535be45376d58987452bd0646b9a74cf9eb6cb2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2f:13:26:8f:da:f7:29:9b:59:b9:35:43:a0:
0b:dc:64:36:c4:cc:7a:03:ae:a8:a8:16:d7:6d:fc:
4b:e5:38:6c:df:fb:83:6d:a5:02:93:17:34:ac:86:
8a:13:09:2c:17:75:fb:35:42:fb:0b:fc:9f:b9:51:
ca:6b:ef:3b:aa:67:13:54:f5:00:c7:8b:07:c3:ff:
f8:20:d3:ff:5c:a6:5d:60:a5:76:c3:e1:7f:e7:f6:
72:34:00:d5:3c:6d:3f:45:04:07:d3:e9:e5:67:6a:
67:2b:46:d8:dc:be:f9:33:69:bc:4d:77:ac:43:d4:
5c:c2:87:24:5c:f3:28:1e:e1:2f:a7:f7:55:9f:51:
81:3b:c4:47:e5:85:7c:7c:f1:2d:fd:08:04:12:f0:
d0:38:a3:c7:f4:ac:26:f1:ed:28:24:9b:72:fd:fb:
21:8a:43:89:8f:11:b0:85:f9:e7:06:49:89:54:43:
c4:d9:c0:55:ed:be:cc:c2:4d:16:df:0d:bc:ea:05:
0d:3a:32:5b:5c:dc:70:f9:c4:ae:e1:81:93:9c:d4:
0d:29:14:93:f0:28:a1:94:ea:f9:7c:d6:e5:d4:3b:
31:40:1c:af:6d:b9:f3:01:70:45:e5:73:b4:66:04:
01:20:82:58:27:00:73:1b:01:d5:e0:4e:40:27:e4:
c3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:5B:E4:53:76:D5:89:87:45:2B:D0:64:6B:9A:74:CF:9E:B6:CB:2D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.148.0/22
87.253.232.0/21
185.189.236.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200069
Signature Algorithm: sha256WithRSAEncryption
2c:b8:84:ff:e9:0f:c6:9a:a0:94:1d:de:eb:24:49:57:ba:91:
26:a9:72:83:16:63:ed:db:16:4a:bd:5f:5b:5c:37:d0:62:11:
ee:c6:6a:d9:23:c6:82:77:5a:3b:ed:b3:b9:29:da:2f:da:5d:
c6:fc:a8:33:ea:a0:f8:26:99:fc:55:42:84:71:65:40:91:1b:
57:ba:29:ea:f7:93:e0:9f:b5:a5:2d:07:df:aa:68:9b:f7:75:
6d:be:9d:b1:b0:ac:46:79:f5:fd:48:f9:b9:c4:2f:c3:32:4e:
cf:f1:90:a5:52:0c:94:57:c3:c1:35:9e:dd:7d:65:fc:67:13:
5e:72:ae:3d:8d:9b:42:a8:15:67:8e:1a:f6:f3:c6:3c:12:01:
01:06:2d:b0:de:f8:82:de:cf:e3:b2:84:ff:d5:b1:d4:78:5d:
66:77:b3:07:dc:81:52:18:49:31:41:61:79:07:b3:c0:86:8c:
e7:1b:5b:67:aa:6a:33:1b:fe:a0:45:da:3e:60:fb:52:80:0c:
3c:c0:b3:24:ea:36:d5:7f:bc:97:fa:69:e3:a2:72:3d:d6:e1:
c3:82:cd:6d:61:9a:18:76:39:12:5b:04:59:2c:c6:99:b1:52:
dd:95:3b:a5:17:e7:ad:46:e1:1e:de:0d:9e:fb:f8:23:f7:c0:
fb:ef:c1:6f
-----BEGIN CERTIFICATE-----
MIIFoDCCBIigAwIBAgISAYzIAk+66Y7A+G4gXw9cNolUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDIzMDQzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzViZTQ1Mzc2ZDU4OTg3NDUyYmQwNjQ2YjlhNzRjZjllYjZjYjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvC8TJo/a9ymbWbk1Q6AL3GQ2xMx6
A66oqBbXbfxL5Ths3/uDbaUCkxc0rIaKEwksF3X7NUL7C/yfuVHKa+87qmcTVPUA
x4sHw//4INP/XKZdYKV2w+F/5/ZyNADVPG0/RQQH0+nlZ2pnK0bY3L75M2m8TXes
Q9RcwockXPMoHuEvp/dVn1GBO8RH5YV8fPEt/QgEEvDQOKPH9Kwm8e0oJJty/fsh
ikOJjxGwhfnnBkmJVEPE2cBV7b7Mwk0W3w286gUNOjJbXNxw+cSu4YGTnNQNKRST
8CihlOr5fNbl1DsxQByvbbnzAXBF5XO0ZgQBIIJYJwBzGwHV4E5AJ+TDBQIDAQAB
o4ICrDCCAqgwHQYDVR0OBBYEFFNb5FN21YmHRSvQZGuadM+etsstMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk1L2ZiMzlh
OC02MjNiLTQ0MzUtOTRmZS1jZWM5MmI1NzgwMDYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTUvZmIzOWE4
LTYyM2ItNDQzNS05NGZlLWNlYzkyYjU3ODAwNi8xL1UxdmtVM2JWaVlkRks5Qmth
NXAwejU2Mnl5MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF
BwEHAQH/BBwwGjAYBAIAATASAwQCLQ6UAwQDV/3oAwQCub3sMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwMNhTANBgkqhkiG9w0BAQsFAAOCAQEALLiE/+kPxpqglB3e
6yRJV7qRJqlygxZj7dsWSr1fW1w30GIR7sZq2SPGgndaO+2zuSnaL9pdxvyoM+qg
+CaZ/FVChHFlQJEbV7op6veT4J+1pS0H36pom/d1bb6dsbCsRnn1/Uj5ucQvwzJO
z/GQpVIMlFfDwTWe3X1l/GcTXnKuPY2bQqgVZ44a9vPGPBIBAQYtsN74gt7P47KE
/9Wx1HhdZnezB9yBUhhJMUFheQezwIaM5xtbZ6pqMxv+oEXaPmD7UoAMPMCzJOo2
1X+8l/pp46JyPdbhw4LNbWGaGHY5ElsEWSzGmbFS3ZU7pRfnrUbhHt4Nnvv4I/fA
++/Bbw==
-----END CERTIFICATE-----
Generated at Fri May 3 13:19:18 2024 by rpki-client on console-fra.rpki-client.org