Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U3h815RuENiGRqx53lfMbsWeQTI.cer
File: U3h815RuENiGRqx53lfMbsWeQTI.cer (raw, json)
Hash identifier: hSippN6pcF4ROSxBBQTfBweUHuhZ7kL+rvIHb8dIZYw=
Subject key identifier: 53:78:7C:D7:94:6E:10:D8:86:46:AC:79:DE:57:CC:6E:C5:9E:41:32
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC50096C83B4EB3A1869065D031E81D35
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/U3h815RuENiGRqx53lfMbsWeQTI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:29:59 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.54.124.0/22
IP: 2a01:bde0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:96:c8:3b:4e:b3:a1:86:90:65:d0:31:e8:1d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53787cd7946e10d88646ac79de57cc6ec59e4132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:e9:a2:e7:41:cf:d6:db:89:c9:fb:b8:5a:27:
cb:5d:95:83:fa:b6:1b:34:ac:48:ae:42:9c:58:74:
43:bf:bd:9e:61:94:f6:33:24:44:bc:b8:b4:9f:38:
51:d4:b0:62:9e:04:dc:52:21:e2:94:0d:5f:6d:b2:
d0:ca:37:c7:d7:1a:13:5e:e2:c9:4d:0d:18:0e:26:
09:fc:85:19:b6:7b:35:3b:92:5b:b1:26:35:0c:c5:
51:ad:b2:43:f1:db:eb:52:36:03:c0:fa:42:62:b8:
ee:94:eb:db:27:c9:1a:83:40:39:15:c2:49:a0:88:
d8:d3:72:4a:d0:94:f1:5c:a4:3b:02:ec:04:e4:96:
4c:7c:a1:0d:ef:15:c9:27:5c:a1:ee:3d:ba:f7:d2:
b8:6a:de:ac:99:06:62:fa:4a:5b:46:2a:19:bd:87:
29:af:4a:6f:ef:85:1e:97:3f:e5:bc:00:f1:6b:1d:
61:25:b4:e9:7b:a4:40:69:85:1c:26:0f:ac:96:f3:
be:3d:d8:7b:48:52:95:53:23:b5:68:41:68:22:f6:
d8:ca:74:f3:3c:5c:7b:6d:67:96:86:aa:2c:64:69:
21:24:c9:5d:fd:df:1f:45:24:8a:ef:5b:a3:60:32:
fa:cf:81:dd:ba:79:c3:44:18:7c:ea:20:e8:a1:28:
aa:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:78:7C:D7:94:6E:10:D8:86:46:AC:79:DE:57:CC:6E:C5:9E:41:32
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/U3h815RuENiGRqx53lfMbsWeQTI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.124.0/22
IPv6:
2a01:bde0::/32
Signature Algorithm: sha256WithRSAEncryption
75:77:47:34:b7:87:46:85:d3:5c:2a:e1:6e:04:cc:e1:87:8c:
11:1d:84:49:95:49:ce:79:75:6d:3b:5d:3a:c6:48:0d:7d:65:
f8:30:3e:7c:2d:e4:ab:bf:ba:d8:9f:fa:96:a2:f1:25:95:c3:
5b:ed:d3:98:6b:c0:d8:f4:32:a6:79:ad:0e:77:dc:5d:21:4d:
9e:98:43:01:f1:3e:96:4e:a6:f6:37:2b:ed:8f:d3:9e:c4:1f:
99:fc:bf:e9:9e:2c:ad:0e:f1:1f:ad:c5:6d:9e:4d:8f:cd:7d:
11:a5:b4:66:4e:85:f4:c8:8c:fc:71:d4:cc:0e:31:18:b7:bd:
cd:14:1e:7b:56:c9:8e:5c:90:73:c1:51:3d:f2:c7:c4:0d:5c:
99:7b:cd:29:00:d5:ca:34:b1:c9:ca:f0:c5:e1:d9:25:0a:bd:
90:49:b9:f9:17:96:35:62:cc:2f:bf:6b:e6:60:b7:38:8d:90:
c1:d7:12:fc:d9:b6:8c:83:96:fd:d7:f2:00:2f:cf:d0:c8:cb:
b0:ed:81:d3:a5:ea:97:21:52:de:3f:31:80:c2:a4:e3:9d:22:
80:d9:41:4c:f9:f0:1b:45:0d:62:2c:44:2f:95:18:bf:0e:1a:
ea:1a:1f:00:2c:d7:f4:2a:48:e4:89:a7:46:21:df:cb:42:87:
d8:a5:00:5c
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzFAJbIO06zoYaQZdAx6B01MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTIyOTU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Mzc4N2NkNzk0NmUxMGQ4ODY0NmFjNzlkZTU3Y2M2ZWM1OWU0MTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9emi50HP1tuJyfu4WifLXZWD+rYb
NKxIrkKcWHRDv72eYZT2MyREvLi0nzhR1LBingTcUiHilA1fbbLQyjfH1xoTXuLJ
TQ0YDiYJ/IUZtns1O5JbsSY1DMVRrbJD8dvrUjYDwPpCYrjulOvbJ8kag0A5FcJJ
oIjY03JK0JTxXKQ7AuwE5JZMfKEN7xXJJ1yh7j2699K4at6smQZi+kpbRioZvYcp
r0pv74Uelz/lvADxax1hJbTpe6RAaYUcJg+slvO+Pdh7SFKVUyO1aEFoIvbYynTz
PFx7bWeWhqosZGkhJMld/d8fRSSK71ujYDL6z4HdunnDRBh86iDooSiqfwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFFN4fNeUbhDYhkased5XzG7FnkEyMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RmL2M3Nzgy
NS02OGEzLTRiM2UtYmM5MC01MjNmZDg2YTA3YzcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYvYzc3ODI1
LTY4YTMtNGIzZS1iYzkwLTUyM2ZkODZhMDdjNy8xL1UzaDgxNVJ1RU5pR1JxeDUz
bGZNYnNXZVFUSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuTZ8MA0EAgACMAcDBQAqAb3gMA0GCSqGSIb3
DQEBCwUAA4IBAQB1d0c0t4dGhdNcKuFuBMzhh4wRHYRJlUnOeXVtO106xkgNfWX4
MD58LeSrv7rYn/qWovEllcNb7dOYa8DY9DKmea0Od9xdIU2emEMB8T6WTqb2Nyvt
j9OexB+Z/L/pniytDvEfrcVtnk2PzX0RpbRmToX0yIz8cdTMDjEYt73NFB57VsmO
XJBzwVE98sfEDVyZe80pANXKNLHJyvDF4dklCr2QSbn5F5Y1Yswvv2vmYLc4jZDB
1xL82baMg5b91/IAL8/QyMuw7YHTpeqXIVLePzGAwqTjnSKA2UFM+fAbRQ1iLEQv
lRi/DhrqGh8ALNf0KkjkiadGId/LQofYpQBc
-----END CERTIFICATE-----
Generated at Thu May 2 10:01:08 2024 by rpki-client on console-fra.rpki-client.org