Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XpgU1DFdMK28jeMGAFVq6cPPns4.cer
File: XpgU1DFdMK28jeMGAFVq6cPPns4.cer (raw, json)
Hash identifier: gOtYG7UZzbLgNmFmDz6JqfpLNjr8qtPNbyXONRu8myY=
Subject key identifier: 5E:98:14:D4:31:5D:30:AD:BC:8D:E3:06:00:55:6A:E9:C3:CF:9E:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B6F78489E436604EB21596FA828375
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/XpgU1DFdMK28jeMGAFVq6cPPns4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:57 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.33.248.0/23
IP: 195.5.175.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:f7:84:89:e4:36:60:4e:b2:15:96:fa:82:83:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e9814d4315d30adbc8de30600556ae9c3cf9ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:74:93:3c:8a:fe:6f:71:f5:8c:6a:bb:dc:84:
f3:63:5d:bb:21:49:b8:25:29:07:1b:d5:5b:f8:8a:
d8:24:15:2f:8b:45:f1:c1:94:a4:fd:40:76:07:32:
d8:71:e9:81:ac:d6:e1:24:fe:c4:15:3a:1a:58:9d:
a7:91:d8:fc:78:51:f9:c9:3e:62:43:10:5e:41:92:
c7:0a:37:27:aa:e5:49:3f:a3:aa:7a:25:e1:b3:e8:
87:0f:f9:56:0c:32:48:7f:20:2c:e7:42:9d:57:5b:
bf:0c:cb:3c:ff:e9:c9:02:50:1c:33:2f:c6:98:d9:
5b:30:40:b2:16:27:a0:3a:76:ba:54:a1:b2:5e:fb:
82:fc:3d:f7:07:0e:5c:1c:79:05:08:51:02:b9:24:
e2:24:4f:02:93:57:f0:8c:05:78:be:e5:51:4b:4b:
06:5a:a8:12:9a:f8:e0:fa:59:8a:9c:65:3b:4b:08:
35:0d:76:04:71:3e:3f:93:28:d5:8d:4d:a0:77:a0:
be:c9:3d:78:42:85:8a:75:a4:23:e8:9c:0a:4e:6b:
17:21:19:be:f3:c8:48:1f:4b:96:f6:1b:0d:1f:ae:
94:15:32:9b:2d:8b:da:b9:90:5f:4f:58:0c:e6:b6:
f9:73:5d:c8:a3:7f:26:f3:9e:7d:3e:f0:47:a2:35:
8f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:98:14:D4:31:5D:30:AD:BC:8D:E3:06:00:55:6A:E9:C3:CF:9E:CE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/XpgU1DFdMK28jeMGAFVq6cPPns4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.248.0/23
195.5.175.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:b2:15:7d:ec:3b:f7:e3:3e:a9:3c:88:9b:26:54:16:07:83:
95:e1:14:89:ec:36:6a:29:49:5a:ad:a4:35:aa:cd:2e:b2:4c:
ca:3a:dd:2f:e2:e0:09:22:ef:56:b8:4d:c4:25:c9:fa:b0:e6:
06:50:e4:9c:55:b3:05:5c:7d:ff:ef:f1:df:62:fc:84:13:6f:
3f:7f:c4:e0:f9:de:8e:7e:9e:ed:32:8c:46:9e:29:8d:41:9b:
d6:d0:23:79:19:3c:23:d9:14:36:c2:bc:6a:71:82:c7:f3:eb:
f7:16:14:c9:d5:f9:d8:a3:4e:b1:17:4d:f1:1f:37:00:c4:ba:
56:85:da:27:f5:68:9b:b2:ec:73:9b:bb:fd:b2:74:f8:35:b3:
f9:fa:ef:a5:f0:d0:d6:76:55:50:88:1d:af:e4:4f:10:0d:14:
9d:da:b4:8c:36:1f:62:93:f5:23:33:04:21:5c:04:b8:0b:e1:
b6:09:3f:6b:ee:92:a9:46:e0:a6:66:6e:a6:2a:ef:a3:52:66:
b0:32:26:3d:aa:0c:6f:8c:f1:8b:91:7f:bf:ac:d1:d9:ac:e9:
15:59:81:61:14:73:52:17:d7:0f:38:11:11:3d:2b:61:a6:b6:
f4:1f:41:cd:df:62:ed:f7:6e:75:06:5d:26:55:04:54:82:e2:
7a:74:34:26
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgISAYzDtveEieQ2YE6yFZb6goN1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDYyOTU3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZTk4MTRkNDMxNWQzMGFkYmM4ZGUzMDYwMDU1NmFlOWMzY2Y5ZWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXSTPIr+b3H1jGq73ITzY127IUm4
JSkHG9Vb+IrYJBUvi0XxwZSk/UB2BzLYcemBrNbhJP7EFToaWJ2nkdj8eFH5yT5i
QxBeQZLHCjcnquVJP6OqeiXhs+iHD/lWDDJIfyAs50KdV1u/DMs8/+nJAlAcMy/G
mNlbMECyFiegOna6VKGyXvuC/D33Bw5cHHkFCFECuSTiJE8Ck1fwjAV4vuVRS0sG
WqgSmvjg+lmKnGU7Swg1DXYEcT4/kyjVjU2gd6C+yT14QoWKdaQj6JwKTmsXIRm+
88hIH0uW9hsNH66UFTKbLYvauZBfT1gM5rb5c13Io38m8559PvBHojWPCQIDAQAB
o4ICijCCAoYwHQYDVR0OBBYEFF6YFNQxXTCtvI3jBgBVaunDz57OMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZhLzdhNzhk
NC0wMzQwLTQyMjctYjE0Ny0zNWI1M2QyMzc2ZDIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEvN2E3OGQ0
LTAzNDAtNDIyNy1iMTQ3LTM1YjUzZDIzNzZkMi8xL1hwZ1UxREZkTUsyOGplTUdB
RlZxNmNQUG5zNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQBwSH4AwQAwwWvMA0GCSqGSIb3DQEBCwUAA4IB
AQB+shV97Dv34z6pPIibJlQWB4OV4RSJ7DZqKUlaraQ1qs0uskzKOt0v4uAJIu9W
uE3EJcn6sOYGUOScVbMFXH3/7/HfYvyEE28/f8Tg+d6Ofp7tMoxGnimNQZvW0CN5
GTwj2RQ2wrxqcYLH8+v3FhTJ1fnYo06xF03xHzcAxLpWhdon9Wibsuxzm7v9snT4
NbP5+u+l8NDWdlVQiB2v5E8QDRSd2rSMNh9ik/UjMwQhXAS4C+G2CT9r7pKpRuCm
Zm6mKu+jUmawMiY9qgxvjPGLkX+/rNHZrOkVWYFhFHNSF9cPOBERPSthprb0H0HN
32Lt9251Bl0mVQRUguJ6dDQm
-----END CERTIFICATE-----
Generated at Fri May 3 13:47:40 2024 by rpki-client on console-ams.rpki-client.org