Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Uz39bMFAxoo9O7qGulfPO4umqbc.cer
File: Uz39bMFAxoo9O7qGulfPO4umqbc.cer (raw, json)
Hash identifier: RvP0AKgKiRAP1zjcibynmzrfY9WFY6SeWWOL/2RQnLg=
Subject key identifier: 53:3D:FD:6C:C1:40:C6:8A:3D:3B:BA:86:BA:57:CF:3B:8B:A6:A9:B7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC801A2DABCD84498449F9382A7E893F8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:59 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 198701
IP: 91.238.22.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:a2:da:bc:d8:44:98:44:9f:93:82:a7:e8:93:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=533dfd6cc140c68a3d3bba86ba57cf3b8ba6a9b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c6:3e:de:dc:22:6b:b3:64:bd:a3:9f:68:b9:
a6:64:37:8a:7e:13:c5:2f:15:e7:38:ca:a4:6a:da:
56:cd:03:d6:1e:ab:79:5c:aa:ee:44:4e:10:4a:aa:
28:a0:23:f3:41:a0:44:b1:0c:19:4d:1d:78:1e:1b:
28:f1:b6:ef:c0:df:9c:9c:43:10:40:af:3a:4c:b0:
fe:a3:80:c4:57:0a:c6:49:4e:67:22:4d:c6:00:d5:
38:aa:bc:2f:8b:46:dc:37:88:11:3d:99:32:35:8e:
cd:df:4a:d4:d2:07:a2:a1:71:1c:28:5a:be:1b:cc:
6c:d7:c1:cc:e3:c9:ce:5b:4f:c4:6a:d9:81:6b:a9:
9e:2b:b3:0f:bc:0f:12:71:59:8a:ca:e7:be:25:ef:
e4:29:50:a0:bd:ea:d2:50:e6:88:58:4f:2c:2b:45:
23:a1:7c:ba:fd:2e:bb:ab:08:2f:b4:dc:07:7c:e1:
1c:e2:fb:ae:f2:ea:14:1d:98:6a:f0:ce:f2:42:5c:
6d:f8:bc:39:5c:98:d9:9e:75:6b:b3:63:94:02:de:
db:b4:6a:6e:bf:f8:67:43:0d:af:5b:95:90:73:d7:
35:f5:9d:ca:a8:e9:3f:b5:d6:b0:7a:91:b3:ae:a4:
da:b6:80:5d:f0:7a:65:af:9e:8e:19:51:8b:40:f6:
ac:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:3D:FD:6C:C1:40:C6:8A:3D:3B:BA:86:BA:57:CF:3B:8B:A6:A9:B7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.22.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198701
Signature Algorithm: sha256WithRSAEncryption
71:74:60:f0:84:b5:ef:b0:e6:27:c3:d6:24:e0:89:a3:f0:1e:
c3:d3:c8:a0:7e:27:a1:9d:17:6c:94:a0:7e:80:f9:31:2c:92:
0a:73:67:6a:4d:55:71:cd:e8:a1:56:95:6b:0e:6e:26:af:ae:
34:e0:a3:33:98:f3:55:8e:89:24:5a:6b:72:c4:52:5a:e8:ab:
4f:f4:ff:1c:8a:f3:a9:d0:37:0e:2a:3a:99:64:5a:ea:42:7e:
48:a7:94:94:ed:54:f8:6b:0d:94:72:46:02:42:99:60:52:5a:
6b:a2:c1:ac:10:6f:d2:d7:75:7a:0f:c6:cc:43:3d:0c:46:d2:
81:8a:d4:49:88:99:26:aa:af:9c:b0:7b:b9:3e:b7:df:f7:13:
87:ba:99:aa:65:f1:35:46:1f:7e:68:dd:9b:4b:c0:d6:72:1a:
2f:8a:03:5c:c6:5a:0a:09:11:83:3d:ff:d5:1d:1a:75:74:9f:
c5:43:ad:3b:24:d0:fd:b5:c4:5c:17:09:4b:48:56:f3:72:57:
f5:cb:d0:ed:98:ca:a9:c5:10:1d:6c:ab:d9:30:69:5b:a4:c0:
7a:3c:4f:07:78:93:55:6c:94:c3:bf:95:95:8c:8b:4a:ff:30:
a7:e0:6e:49:95:9b:9a:aa:e2:e1:a1:f5:eb:9d:91:03:98:34:
10:6b:c2:44
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYzIAaLavNhEmESfk4Kn6JP4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDIyOTU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzNkZmQ2Y2MxNDBjNjhhM2QzYmJhODZiYTU3Y2YzYjhiYTZhOWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMY+3twia7NkvaOfaLmmZDeKfhPF
LxXnOMqkatpWzQPWHqt5XKruRE4QSqoooCPzQaBEsQwZTR14Hhso8bbvwN+cnEMQ
QK86TLD+o4DEVwrGSU5nIk3GANU4qrwvi0bcN4gRPZkyNY7N30rU0geioXEcKFq+
G8xs18HM48nOW0/EatmBa6meK7MPvA8ScVmKyue+Je/kKVCgverSUOaIWE8sK0Uj
oXy6/S67qwgvtNwHfOEc4vuu8uoUHZhq8M7yQlxt+Lw5XJjZnnVrs2OUAt7btGpu
v/hnQw2vW5WQc9c19Z3KqOk/tdawepGzrqTatoBd8Hplr56OGVGLQPasYQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFFM9/WzBQMaKPTu6hrpXzzuLpqm3MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzViLzQyODg4
Yi1hYTNmLTQ2MTEtODAzZC0yZGI0NGM5MWFlNjAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvNDI4ODhi
LWFhM2YtNDYxMS04MDNkLTJkYjQ0YzkxYWU2MC8xL1V6MzliTUZBeG9vOU83cUd1
bGZQTzR1bXFiYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW+4WMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwMILTANBgkqhkiG9w0BAQsFAAOCAQEAcXRg8IS177DmJ8PWJOCJo/Aew9PIoH4n
oZ0XbJSgfoD5MSySCnNnak1Vcc3ooVaVaw5uJq+uNOCjM5jzVY6JJFprcsRSWuir
T/T/HIrzqdA3Dio6mWRa6kJ+SKeUlO1U+GsNlHJGAkKZYFJaa6LBrBBv0td1eg/G
zEM9DEbSgYrUSYiZJqqvnLB7uT633/cTh7qZqmXxNUYffmjdm0vA1nIaL4oDXMZa
CgkRgz3/1R0adXSfxUOtOyTQ/bXEXBcJS0hW83JX9cvQ7ZjKqcUQHWyr2TBpW6TA
ejxPB3iTVWyUw7+VlYyLSv8wp+BuSZWbmqri4aH1652RA5g0EGvCRA==
-----END CERTIFICATE-----
Generated at Fri May 3 10:18:08 2024 by rpki-client on console-fra.rpki-client.org