Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XcYkXKggiZ1-tBQDAsIQQbXbygY.cer
File: XcYkXKggiZ1-tBQDAsIQQbXbygY.cer (raw, json)
Hash identifier: Bktlj4JAWgGllYYR3zxKoPzc3u7cZqQMC0JKHqZQVk4=
Subject key identifier: 5D:C6:24:5C:A8:20:89:9D:7E:B4:14:03:02:C2:10:41:B5:DB:CA:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CEEE2043F0BDCA8B1575D11637B42FFBA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 09 Jan 2024 15:40:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 38984
IP: 185.23.228.0/22
IP: 188.65.232.0/21
IP: 195.135.236.0/22
IP: 2a03:7f00::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ee:e2:04:3f:0b:dc:a8:b1:57:5d:11:63:7b:42:ff:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 9 15:40:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5dc6245ca820899d7eb4140302c21041b5dbca06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ab:9a:08:31:88:e8:a5:31:94:c2:d8:ed:d0:
7c:d6:f3:8e:d7:b2:e6:32:b9:72:ae:4c:69:e0:70:
65:5a:ed:ed:87:1e:c9:f6:10:89:8a:6a:f7:16:4b:
48:28:78:68:20:68:db:ac:17:fb:26:d3:35:b4:5b:
02:3c:a2:27:d8:0c:33:f4:07:64:1a:20:1a:f3:53:
78:3f:2f:4b:32:19:1f:57:f7:1b:39:3c:d5:de:34:
c7:90:59:7f:21:78:fd:2b:51:e3:a9:6c:bc:96:2d:
38:b4:0a:66:37:6c:68:6e:31:f9:51:fb:de:c5:66:
99:99:88:f1:0e:70:66:08:2d:e4:61:d8:b9:d5:81:
67:96:d5:6d:c3:79:bf:36:60:1a:47:6d:cb:a3:51:
5e:9e:a4:fb:f7:f0:44:c3:69:f5:e1:26:7e:fb:90:
39:54:de:be:bc:b9:a0:86:af:e0:0d:97:34:28:64:
69:55:d6:a3:60:2e:9f:dd:5f:0d:98:b3:01:4d:d1:
ec:83:86:a4:10:50:ec:c6:82:e1:69:f1:48:5b:6b:
84:cc:1e:0b:0f:45:81:fb:eb:3f:90:a5:ba:32:45:
94:37:19:71:43:6b:9b:0f:c5:d9:5d:17:57:ee:22:
8e:38:8d:e8:4e:37:83:26:0b:28:ab:74:98:fe:07:
d0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C6:24:5C:A8:20:89:9D:7E:B4:14:03:02:C2:10:41:B5:DB:CA:06
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.228.0/22
188.65.232.0/21
195.135.236.0/22
IPv6:
2a03:7f00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38984
Signature Algorithm: sha256WithRSAEncryption
55:36:92:24:08:bc:3f:1f:55:14:c2:59:18:cb:0f:69:94:da:
b4:ec:1a:d7:7b:e9:0c:a8:77:dc:18:b1:a9:bc:56:bd:c9:f9:
80:fa:fe:3b:ee:12:7b:6c:18:9a:a8:d1:56:c7:05:49:8c:7c:
a1:ac:d3:40:e0:f6:e4:83:1f:b5:8d:91:51:32:45:f1:57:6a:
ab:20:83:ae:7a:bb:91:f5:51:c9:3a:90:c5:25:6b:d7:64:cd:
81:be:06:d5:dd:02:0d:37:df:e0:7a:43:d4:bc:dc:dd:7f:81:
10:cb:7d:8a:3d:71:52:6a:fe:87:5c:54:b5:a1:52:ea:a7:84:
ad:8d:25:de:81:06:90:b4:5a:9b:54:ba:9c:5e:8f:eb:37:6f:
5b:ee:42:8d:18:45:a2:81:29:f5:f1:f2:7c:bf:f2:31:68:f0:
9b:a3:49:6e:ac:46:cf:ba:b5:72:7c:ae:4b:96:3e:71:9c:51:
e0:d6:72:da:c5:b1:9c:0c:fe:e2:e3:5b:da:d1:26:e8:ed:56:
41:b3:9e:7a:26:25:89:13:f4:4f:5f:ee:45:57:a1:90:a8:90:
fb:b7:ed:e5:cd:19:44:6f:ca:8c:be:3a:53:72:e2:30:e3:60:
f2:ef:33:4a:d8:65:2f:5c:24:87:53:b3:31:5d:e6:91:35:34:
e2:ea:88:5c
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgISAYzu4gQ/C9yosVddEWN7Qv+6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTA5MTU0MDM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZGM2MjQ1Y2E4MjA4OTlkN2ViNDE0MDMwMmMyMTA0MWI1ZGJjYTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzquaCDGI6KUxlMLY7dB81vOO17Lm
Mrlyrkxp4HBlWu3thx7J9hCJimr3FktIKHhoIGjbrBf7JtM1tFsCPKIn2Awz9Adk
GiAa81N4Py9LMhkfV/cbOTzV3jTHkFl/IXj9K1HjqWy8li04tApmN2xobjH5Ufve
xWaZmYjxDnBmCC3kYdi51YFnltVtw3m/NmAaR23Lo1FenqT79/BEw2n14SZ++5A5
VN6+vLmghq/gDZc0KGRpVdajYC6f3V8NmLMBTdHsg4akEFDsxoLhafFIW2uEzB4L
D0WB++s/kKW6MkWUNxlxQ2ubD8XZXRdX7iKOOI3oTjeDJgsoq3SY/gfQGQIDAQAB
o4ICuzCCArcwHQYDVR0OBBYEFF3GJFyoIImdfrQUAwLCEEG128oGMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EyLzhhNDMw
Zi00MGM1LTQ3NGItOGZkOS0wNzRlZDcwYjQ2NzMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvOGE0MzBm
LTQwYzUtNDc0Yi04ZmQ5LTA3NGVkNzBiNDY3My8xL1hjWWtYS2dnaVoxLXRCUURB
c0lRUWJYYnlnWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF
BwEHAQH/BCswKTAYBAIAATASAwQCuRfkAwQDvEHoAwQCw4fsMA0EAgACMAcDBQAq
A38AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCYSDANBgkqhkiG9w0BAQsFAAOC
AQEAVTaSJAi8Px9VFMJZGMsPaZTatOwa13vpDKh33BixqbxWvcn5gPr+O+4Se2wY
mqjRVscFSYx8oazTQOD25IMftY2RUTJF8VdqqyCDrnq7kfVRyTqQxSVr12TNgb4G
1d0CDTff4HpD1Lzc3X+BEMt9ij1xUmr+h1xUtaFS6qeErY0l3oEGkLRam1S6nF6P
6zdvW+5CjRhFooEp9fHyfL/yMWjwm6NJbqxGz7q1cnyuS5Y+cZxR4NZy2sWxnAz+
4uNb2tEm6O1WQbOeeiYliRP0T1/uRVehkKiQ+7ft5c0ZRG/KjL46U3LiMONg8u8z
SthlL1wkh1OzMV3mkTU04uqIXA==
-----END CERTIFICATE-----
Generated at Fri May 3 07:04:01 2024 by rpki-client on console-ams.rpki-client.org