Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer
File: XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer (raw, json)
Hash identifier: ceKN/AD9EBXSij5u8XCIipnWh9JzIOpQyzN0IvaGyl8=
Subject key identifier: 5E:86:8B:02:E5:19:DD:7E:69:4C:7A:F1:E7:08:BD:D6:63:69:BD:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8015B01B8211E5248B1C94B6820966F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:41 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 196772
IP: 91.212.199.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:5b:01:b8:21:1e:52:48:b1:c9:4b:68:20:96:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e868b02e519dd7e694c7af1e708bdd66369bddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:68:8b:51:03:75:0a:ca:0b:ac:1d:2d:60:0c:
04:f7:91:c9:6d:1e:48:20:e7:e4:44:04:65:2a:75:
7f:37:33:14:24:80:61:aa:7e:7b:26:e1:d3:61:ef:
01:5e:e8:98:16:db:40:46:cf:88:ae:0b:26:0a:09:
5b:83:a8:d1:ba:7c:38:7d:e5:98:d6:df:5d:86:89:
33:29:d6:cc:8a:19:1a:d5:e3:db:01:04:b4:eb:6d:
4c:f4:de:35:9f:0f:48:fe:8c:b6:50:77:27:b7:e6:
89:6e:5f:6b:c1:b4:66:c9:86:3f:5f:30:09:d0:82:
69:30:ad:f8:35:e2:be:42:a2:d8:cd:be:be:7d:55:
78:8d:d0:07:2a:a9:43:60:bb:09:49:6b:83:e9:91:
a2:3a:fd:76:78:08:9b:b0:d9:f1:e3:eb:90:6f:5b:
9a:02:7b:85:24:7b:b1:ab:53:b6:44:ba:fa:9c:8b:
80:4d:f6:88:01:b8:c9:3d:5e:8d:44:90:73:63:fc:
ee:58:b5:e3:fb:d9:b2:39:59:88:02:a4:e5:b0:ab:
5f:00:8e:d3:ea:1f:41:6f:b4:58:8d:79:5b:93:be:
24:1c:21:9c:d3:52:a9:1c:a4:f0:82:18:28:99:6c:
91:23:ff:e1:48:17:26:c3:1d:27:84:44:a1:45:28:
1c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:86:8B:02:E5:19:DD:7E:69:4C:7A:F1:E7:08:BD:D6:63:69:BD:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.199.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
196772
Signature Algorithm: sha256WithRSAEncryption
20:90:1e:af:28:11:27:7b:06:ce:ef:d5:5f:a0:9b:34:d7:12:
58:f7:2e:c4:9d:71:e5:5e:1f:f8:e2:d2:7f:72:b6:75:21:ac:
c3:e1:06:eb:6a:d9:e6:2b:65:d8:b7:14:de:9d:71:ed:bf:33:
f8:b8:c0:b5:6f:51:ad:eb:61:a3:b8:74:c5:0a:bf:2e:13:13:
98:94:35:28:76:ce:c4:d5:3c:0c:01:b6:33:91:03:55:fa:32:
39:2c:f3:ee:61:2b:2a:ec:bf:a3:df:d5:88:92:d7:37:49:a5:
59:d5:b1:1c:1a:3e:c1:0a:56:ce:c6:8b:46:9c:90:18:6f:cb:
2f:56:8b:6b:d6:78:8c:b9:30:d8:e5:de:35:86:ca:15:31:ee:
69:37:53:5f:92:b6:2f:3f:d5:e9:82:88:e9:9c:15:ae:45:55:
f2:27:8a:41:c0:c9:1d:d6:68:0c:89:4e:f4:13:92:82:5e:75:
b8:7b:42:6b:19:4d:67:a6:fb:a9:88:ac:8d:bd:40:bc:95:db:
74:74:f2:b2:5f:bc:6d:93:33:66:21:dc:8e:7c:d2:50:e2:a7:
bc:9f:e8:28:82:01:90:5c:2b:80:55:8a:98:97:fa:0c:e2:06:
d0:72:78:75:56:87:c5:42:51:4b:71:ad:33:99:53:13:63:d8:
a3:e1:ea:ad
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYzIAVsBuCEeUkixyUtoIJZvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDIyOTQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZTg2OGIwMmU1MTlkZDdlNjk0YzdhZjFlNzA4YmRkNjYzNjliZGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8WiLUQN1CsoLrB0tYAwE95HJbR5I
IOfkRARlKnV/NzMUJIBhqn57JuHTYe8BXuiYFttARs+IrgsmCglbg6jRunw4feWY
1t9dhokzKdbMihka1ePbAQS0621M9N41nw9I/oy2UHcnt+aJbl9rwbRmyYY/XzAJ
0IJpMK34NeK+QqLYzb6+fVV4jdAHKqlDYLsJSWuD6ZGiOv12eAibsNnx4+uQb1ua
AnuFJHuxq1O2RLr6nIuATfaIAbjJPV6NRJBzY/zuWLXj+9myOVmIAqTlsKtfAI7T
6h9Bb7RYjXlbk74kHCGc01KpHKTwghgomWyRI//hSBcmwx0nhEShRSgc4QIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFF6GiwLlGd1+aUx68ecIvdZjab3fMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAxLzgwMmUw
NS0wZDViLTQ1ODktOTE2Yi05MGMxN2ViNzUxZjQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDEvODAyZTA1
LTBkNWItNDU4OS05MTZiLTkwYzE3ZWI3NTFmNC8xL1hvYUxBdVVaM1g1cFRIcng1
d2k5MW1OcHZkOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW9THMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwMApDANBgkqhkiG9w0BAQsFAAOCAQEAIJAerygRJ3sGzu/VX6CbNNcSWPcuxJ1x
5V4f+OLSf3K2dSGsw+EG62rZ5itl2LcU3p1x7b8z+LjAtW9Rretho7h0xQq/LhMT
mJQ1KHbOxNU8DAG2M5EDVfoyOSzz7mErKuy/o9/ViJLXN0mlWdWxHBo+wQpWzsaL
RpyQGG/LL1aLa9Z4jLkw2OXeNYbKFTHuaTdTX5K2Lz/V6YKI6ZwVrkVV8ieKQcDJ
HdZoDIlO9BOSgl51uHtCaxlNZ6b7qYisjb1AvJXbdHTysl+8bZMzZiHcjnzSUOKn
vJ/oKIIBkFwrgFWKmJf6DOIG0HJ4dVaHxUJRS3GtM5lTE2PYo+HqrQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:10:28 2024 by rpki-client on console-fra.rpki-client.org