Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/W9AP2CBMnXtEUUQbJICDOn98g5A.cer
File: W9AP2CBMnXtEUUQbJICDOn98g5A.cer (raw, json)
Hash identifier: s5FkT7FByW6SGuIH/INSLX8Ff+UaNmcKC2JgrURiqvA=
Subject key identifier: 5B:D0:0F:D8:20:4C:9D:7B:44:51:44:1B:24:80:83:3A:7F:7C:83:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94CBF7781DC79E56D9A8C0CC5FCF49A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba14b-312a-48c8-a80f-3bd35fff4076/1/W9AP2CBMnXtEUUQbJICDOn98g5A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba14b-312a-48c8-a80f-3bd35fff4076/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:31:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.208.119.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:bf:77:81:dc:79:e5:6d:9a:8c:0c:c5:fc:f4:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:31:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5bd00fd8204c9d7b4451441b2480833a7f7c8390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2d:3f:6c:b7:57:73:38:2a:18:8f:e4:11:e4:
b8:12:70:da:79:72:49:98:68:ad:31:bf:3d:c9:16:
ba:38:3e:4b:64:0b:2c:32:9f:cf:6f:0f:9a:10:cf:
06:49:d6:45:e0:56:f7:b9:c7:fc:9a:2a:14:34:3c:
9e:58:c7:11:99:1e:7e:f2:a0:af:19:d1:ac:6e:58:
5c:5b:12:a6:2a:cc:f5:19:22:9b:bd:42:77:e5:08:
27:99:c0:11:50:80:86:29:3c:98:e0:1a:2c:b5:fc:
20:53:91:00:87:ff:34:30:6d:41:4b:1d:b4:04:49:
c9:5a:70:fb:06:0f:56:06:56:74:0a:9c:1e:1e:8f:
35:03:bd:ca:cd:70:83:e5:a2:3f:87:fe:d2:88:b7:
a4:cf:79:c3:f8:40:91:ce:33:9c:80:17:dd:30:9a:
23:ac:5c:de:5c:df:40:d2:7d:18:a5:e2:87:28:c4:
df:3b:07:af:c2:55:39:88:64:28:de:50:e4:a6:e8:
57:77:01:16:dc:78:54:db:15:85:79:96:7e:96:a9:
3a:cd:e4:84:e1:da:f5:8b:fd:0f:32:4e:8c:42:1a:
e4:3d:bf:79:ee:ee:a1:fe:48:4a:61:78:16:b8:bc:
ea:a9:2b:8a:16:46:51:90:f6:97:00:bf:81:95:f7:
fa:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D0:0F:D8:20:4C:9D:7B:44:51:44:1B:24:80:83:3A:7F:7C:83:90
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba14b-312a-48c8-a80f-3bd35fff4076/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba14b-312a-48c8-a80f-3bd35fff4076/1/W9AP2CBMnXtEUUQbJICDOn98g5A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.119.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:47:7c:81:4b:2b:9c:01:d8:ae:b2:1f:1c:98:51:a0:3a:5d:
54:fb:10:38:e0:d3:e9:8d:61:b2:c8:e4:da:69:3f:18:74:0d:
f4:3c:f4:8b:ee:d0:b8:00:d2:02:97:7e:a5:77:6f:c8:07:7d:
85:b0:d6:12:c2:9b:68:a4:d1:c3:fd:21:2e:cd:19:b3:de:a3:
90:0c:35:e4:8a:c0:27:f3:07:b6:ac:54:6a:f6:c9:ee:ff:ff:
57:6f:64:23:6f:55:5e:1d:0c:4f:d3:4b:f6:f8:ea:28:95:bb:
1e:0e:9f:46:b6:bb:72:74:61:2a:4e:63:98:cd:3a:de:4e:c6:
96:b5:33:b4:58:d1:2d:9c:22:b6:87:91:ff:86:5b:d9:e6:f6:
86:23:31:aa:92:e9:0a:71:74:11:43:a9:d0:94:ca:f3:8e:41:
6b:ed:20:1b:03:bd:4e:03:e1:bf:01:2e:8b:24:62:c6:33:75:
7a:3a:47:11:8e:73:63:4a:cd:fc:35:a0:32:c9:79:90:e2:f1:
f0:17:04:c0:46:a9:11:0f:ae:74:4a:28:61:69:df:e2:3f:a0:
c5:4d:c9:14:6d:bd:cd:86:b3:1d:1d:a0:af:95:e1:02:1f:52:
5a:3d:9a:f7:81:10:52:e3:12:84:56:d3:f7:84:db:06:96:20:
aa:a8:bb:68
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzJTL93gdx55W2ajAzF/PSaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDgzMTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YmQwMGZkODIwNGM5ZDdiNDQ1MTQ0MWIyNDgwODMzYTdmN2M4MzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApy0/bLdXczgqGI/kEeS4EnDaeXJJ
mGitMb89yRa6OD5LZAssMp/Pbw+aEM8GSdZF4Fb3ucf8mioUNDyeWMcRmR5+8qCv
GdGsblhcWxKmKsz1GSKbvUJ35QgnmcARUICGKTyY4BostfwgU5EAh/80MG1BSx20
BEnJWnD7Bg9WBlZ0CpweHo81A73KzXCD5aI/h/7SiLekz3nD+ECRzjOcgBfdMJoj
rFzeXN9A0n0YpeKHKMTfOwevwlU5iGQo3lDkpuhXdwEW3HhU2xWFeZZ+lqk6zeSE
4dr1i/0PMk6MQhrkPb957u6h/khKYXgWuLzqqSuKFkZRkPaXAL+Blff6kwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFFvQD9ggTJ17RFFEGySAgzp/fIOQMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y2LzZiYTE0
Yi0zMTJhLTQ4YzgtYTgwZi0zYmQzNWZmZjQwNzYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvNmJhMTRi
LTMxMmEtNDhjOC1hODBmLTNiZDM1ZmZmNDA3Ni8xL1c5QVAyQ0JNblh0RVVVUWJK
SUNET245OGc1QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW9B3MA0GCSqGSIb3DQEBCwUAA4IBAQALR3yB
SyucAdiush8cmFGgOl1U+xA44NPpjWGyyOTaaT8YdA30PPSL7tC4ANICl36ld2/I
B32FsNYSwptopNHD/SEuzRmz3qOQDDXkisAn8we2rFRq9snu//9Xb2Qjb1VeHQxP
00v2+OoolbseDp9GtrtydGEqTmOYzTreTsaWtTO0WNEtnCK2h5H/hlvZ5vaGIzGq
kukKcXQRQ6nQlMrzjkFr7SAbA71OA+G/AS6LJGLGM3V6OkcRjnNjSs38NaAyyXmQ
4vHwFwTARqkRD650Sihhad/iP6DFTckUbb3NhrMdHaCvleECH1JaPZr3gRBS4xKE
VtP3hNsGliCqqLto
-----END CERTIFICATE-----
Generated at Fri May 3 07:38:48 2024 by rpki-client on console-fra.rpki-client.org