Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VwFSjCouLEaRPAsoyjVw84gPGlY.cer
File: VwFSjCouLEaRPAsoyjVw84gPGlY.cer (raw, json)
Hash identifier: bhPIF0xJgy53j41EJfazgWiAfiWOZ5SAmz6fVOTiipA=
Subject key identifier: 57:01:52:8C:2A:2E:2C:46:91:3C:0B:28:CA:35:70:F3:88:0F:1A:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB551A2B002C730E1A091142CD2F75
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:30:03 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.242.124.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:55:1a:2b:00:2c:73:0e:1a:09:11:42:cd:2f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5701528c2a2e2c46913c0b28ca3570f3880f1a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:81:9d:99:a4:bd:91:a4:34:0e:33:dd:74:0f:
df:ee:99:dc:38:88:f8:ad:f9:a3:ab:88:e5:60:16:
3a:96:8e:f7:53:55:74:5f:36:dd:13:e7:0e:fa:b7:
52:92:7e:29:57:54:17:fd:24:87:83:6d:56:3f:b1:
7d:be:c4:f4:e9:1d:29:c6:fc:44:56:b8:45:1a:0b:
0f:5c:11:54:25:f4:97:9d:0e:4d:5c:98:3a:8e:a1:
0d:b0:2f:3e:8b:00:59:8a:b3:b6:aa:12:65:77:0e:
d2:55:e4:91:8e:79:f4:1c:31:bf:71:b5:f8:09:1f:
24:06:df:44:91:33:5e:56:f1:2d:c2:2c:36:eb:04:
0c:a3:2c:d0:90:31:84:87:49:1c:83:2a:c7:e9:e3:
b8:b0:9d:3e:00:58:5d:1c:3e:4d:36:62:45:13:1d:
d1:c7:29:dc:bb:ca:84:fa:d8:0c:dd:d7:fa:35:7d:
66:e2:fa:b2:83:fa:3e:ec:b1:3c:62:a9:2d:56:fe:
2f:06:0f:40:59:0e:80:d4:66:85:dc:11:1a:43:06:
02:2f:7d:08:cc:ff:d1:6b:e6:7a:21:7d:3d:a3:79:
a9:c2:02:c5:dc:9e:60:65:0c:f4:bc:c9:a7:3e:96:
0c:e9:07:7a:3a:20:01:4c:ed:28:4c:d3:85:63:a7:
b7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:01:52:8C:2A:2E:2C:46:91:3C:0B:28:CA:35:70:F3:88:0F:1A:56
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.242.124.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:ca:2f:cc:1d:ad:5c:7d:80:49:a8:b1:84:f5:71:ad:0c:0c:
d7:d4:cd:fd:6f:55:ff:ce:03:71:2d:ca:09:f3:c1:3d:4e:fc:
79:8d:c4:12:eb:e1:ce:72:bb:9f:f1:96:d9:33:37:ad:5f:9b:
b7:82:25:6b:81:2d:72:82:17:29:23:c3:7c:92:a5:61:d2:2d:
29:10:da:5f:ca:7d:f7:5f:91:a2:39:d0:6f:94:be:5f:68:13:
0e:eb:6a:e6:fc:91:e8:f2:4e:5d:80:f0:7e:7f:cb:91:11:67:
63:a4:b9:c4:78:a6:ac:0c:50:6a:8d:17:5e:73:1f:13:a1:99:
32:97:74:f6:08:ef:8e:8c:4e:ec:71:26:06:05:55:ea:49:23:
b9:38:7e:ed:d5:d8:6c:6a:b7:29:7f:76:14:ac:22:56:b6:1d:
57:e6:53:bf:c0:6b:08:6a:62:11:d4:ad:ce:8e:36:9e:25:27:
20:bd:85:62:21:ff:8c:d0:7a:25:a3:60:ae:89:99:a9:39:e5:
6b:4c:06:39:97:38:92:05:bb:4f:cc:2c:38:44:aa:3c:cb:d3:
b5:e1:8e:49:f7:87:ca:90:d1:ca:c9:43:ea:10:ec:f3:44:70:
b4:9f:8d:41:4a:0c:09:c9:0a:a8:22:3d:de:ac:59:20:ac:ec:
07:fe:44:2a
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzC21UaKwAscw4aCRFCzS91MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDIzMDAzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzAxNTI4YzJhMmUyYzQ2OTEzYzBiMjhjYTM1NzBmMzg4MGYxYTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4GdmaS9kaQ0DjPddA/f7pncOIj4
rfmjq4jlYBY6lo73U1V0XzbdE+cO+rdSkn4pV1QX/SSHg21WP7F9vsT06R0pxvxE
VrhFGgsPXBFUJfSXnQ5NXJg6jqENsC8+iwBZirO2qhJldw7SVeSRjnn0HDG/cbX4
CR8kBt9EkTNeVvEtwiw26wQMoyzQkDGEh0kcgyrH6eO4sJ0+AFhdHD5NNmJFEx3R
xyncu8qE+tgM3df6NX1m4vqyg/o+7LE8YqktVv4vBg9AWQ6A1GaF3BEaQwYCL30I
zP/Ra+Z6IX09o3mpwgLF3J5gZQz0vMmnPpYM6Qd6OiABTO0oTNOFY6e3kQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFFcBUowqLixGkTwLKMo1cPOIDxpWMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhhL2E0MWM2
ZC1mMTQyLTRjMjUtODk5Ny02M2ZhZTM4OWE0ZGIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGEvYTQxYzZk
LWYxNDItNGMyNS04OTk3LTYzZmFlMzg5YTRkYi8xL1Z3RlNqQ291TEVhUlBBc295
alZ3ODRnUEdsWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwfJ8MA0GCSqGSIb3DQEBCwUAA4IBAQAuyi/M
Ha1cfYBJqLGE9XGtDAzX1M39b1X/zgNxLcoJ88E9Tvx5jcQS6+HOcruf8ZbZMzet
X5u3giVrgS1yghcpI8N8kqVh0i0pENpfyn33X5GiOdBvlL5faBMO62rm/JHo8k5d
gPB+f8uREWdjpLnEeKasDFBqjRdecx8ToZkyl3T2CO+OjE7scSYGBVXqSSO5OH7t
1dhsarcpf3YUrCJWth1X5lO/wGsIamIR1K3OjjaeJScgvYViIf+M0Holo2CuiZmp
OeVrTAY5lziSBbtPzCw4RKo8y9O14Y5J94fKkNHKyUPqEOzzRHC0n41BSgwJyQqo
Ij3erFkgrOwH/kQq
-----END CERTIFICATE-----
Generated at Fri May 3 07:38:36 2024 by rpki-client on console-fra.rpki-client.org