Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
File: XtmdScSw5GsnhoQnMeFTSFyKxIs.cer (raw, json)
Hash identifier: aAgvY2FWzpV0GceCnHKBaXbwZ0YulthQTEHpUHlqOHA=
Subject key identifier: 5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC492D3E0DDD68B23CC9EE4A29026E6F8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:06 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 47538
IP: 91.209.170.0/24
IP: 194.150.160.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:d3:e0:dd:d6:8b:23:cc:9e:e4:a2:90:26:e6:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ed99d49c4b0e46b2786842731e153485c8ac48b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:67:0b:11:b4:7c:38:ee:a1:11:28:a9:c4:e4:
db:44:65:97:5f:8d:1c:7e:bc:ba:8e:15:19:f3:08:
07:53:7a:91:14:fa:91:8f:7b:f2:dc:ff:fa:d6:f2:
24:da:27:96:a8:43:ee:89:3f:3f:9c:b0:4e:91:79:
80:8e:09:1d:0a:c8:72:31:17:dd:f9:d5:b1:e8:42:
90:8e:f5:c0:48:d4:f8:6a:58:ec:80:d9:98:e1:82:
f0:8a:d7:ac:63:22:55:1f:c5:f8:4f:18:f7:de:3d:
4e:ff:1c:45:cc:07:3a:02:8f:ab:43:e8:01:da:58:
4b:46:5a:bd:82:8e:2d:43:cf:a4:da:67:75:ec:45:
61:90:33:51:79:b4:0f:39:55:67:29:2f:94:a6:58:
09:57:e9:f3:05:38:3d:cb:21:7b:11:a6:cb:01:fc:
fc:e7:a4:c0:f4:c8:f5:bd:c6:d3:c0:60:af:39:ec:
ef:70:10:16:d6:95:98:da:8c:f7:c5:c2:2e:7e:eb:
35:f3:bc:0b:38:bb:2b:ed:7e:26:12:5f:39:be:df:
a0:fb:be:71:bd:4d:f7:70:a6:8f:06:92:93:43:65:
fd:ae:57:19:42:60:4b:07:55:e8:10:08:3a:f6:6a:
48:55:23:b9:c5:f6:03:57:62:e0:3a:24:87:a9:3e:
0c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.170.0/24
194.150.160.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47538
Signature Algorithm: sha256WithRSAEncryption
02:ba:0d:f6:ba:ee:c4:61:c2:c7:16:af:3f:d0:72:de:18:19:
0d:8e:e1:e5:07:20:78:bc:6e:aa:26:30:ad:76:55:fe:55:9d:
9e:b2:ce:d3:f7:e3:78:8a:0d:b9:06:19:cb:ec:24:24:05:0c:
47:6f:ca:ab:59:3b:15:b9:b5:9a:66:0e:29:13:86:bb:2b:ab:
91:2b:64:c8:74:0c:61:d0:dd:46:f4:5f:1a:57:3d:53:2a:84:
45:26:4f:82:1b:dc:82:41:a1:27:8d:87:6b:86:6b:6f:d9:ce:
37:b9:d2:4d:6b:c2:50:7f:67:6a:07:77:8e:f2:c9:12:f5:bb:
14:f3:cb:e1:31:7c:41:99:d8:4c:09:d3:36:d8:cf:a0:9f:42:
c2:04:a5:2d:e9:c9:b3:90:02:b4:74:8a:ef:67:60:01:17:51:
19:5f:ea:6b:ce:52:f1:70:22:71:bd:5e:07:c3:61:2c:c5:81:
9e:87:cc:23:f2:f9:0f:9c:e9:f8:8b:dc:75:c0:05:99:84:e8:
5a:fb:16:6e:d7:93:6a:5b:41:af:8e:d3:bf:d0:a7:2e:a4:f5:
f7:25:e4:29:e4:af:4c:58:18:56:a9:8a:e6:4f:7f:53:2d:1d:
24:b0:58:f4:e0:9c:d5:5d:32:0f:e3:a8:df:b9:70:11:28:1d:
03:14:16:bc
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAYzEktPg3daLI8ye5KKQJub4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTAzMDA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZWQ5OWQ0OWM0YjBlNDZiMjc4Njg0MjczMWUxNTM0ODVjOGFjNDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmcLEbR8OO6hESipxOTbRGWXX40c
fry6jhUZ8wgHU3qRFPqRj3vy3P/61vIk2ieWqEPuiT8/nLBOkXmAjgkdCshyMRfd
+dWx6EKQjvXASNT4aljsgNmY4YLwitesYyJVH8X4Txj33j1O/xxFzAc6Ao+rQ+gB
2lhLRlq9go4tQ8+k2md17EVhkDNRebQPOVVnKS+UplgJV+nzBTg9yyF7EabLAfz8
56TA9Mj1vcbTwGCvOezvcBAW1pWY2oz3xcIufus187wLOLsr7X4mEl85vt+g+75x
vU33cKaPBpKTQ2X9rlcZQmBLB1XoEAg69mpIVSO5xfYDV2LgOiSHqT4MlwIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFF7ZnUnEsORrJ4aEJzHhU0hcisSLMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVlLzliODkz
ZS03YjBjLTQxYWEtYTk1MS05MGMzYWZjN2M5NDcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUvOWI4OTNl
LTdiMGMtNDFhYS1hOTUxLTkwYzNhZmM3Yzk0Ny8xL1h0bWRTY1N3NUdzbmhvUW5N
ZUZUU0Z5S3hJcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQAW9GqAwQBwpagMBoGCCsGAQUFBwEIAQH/BAsw
CaAHMAUCAwC5sjANBgkqhkiG9w0BAQsFAAOCAQEAAroN9rruxGHCxxavP9By3hgZ
DY7h5QcgeLxuqiYwrXZV/lWdnrLO0/fjeIoNuQYZy+wkJAUMR2/Kq1k7Fbm1mmYO
KROGuyurkStkyHQMYdDdRvRfGlc9UyqERSZPghvcgkGhJ42Ha4Zrb9nON7nSTWvC
UH9nagd3jvLJEvW7FPPL4TF8QZnYTAnTNtjPoJ9CwgSlLenJs5ACtHSK72dgARdR
GV/qa85S8XAicb1eB8NhLMWBnofMI/L5D5zp+IvcdcAFmYToWvsWbteTaltBr47T
v9CnLqT19yXkKeSvTFgYVqmK5k9/Uy0dJLBY9OCc1V0yD+Oo37lwESgdAxQWvA==
-----END CERTIFICATE-----
Generated at Fri May 3 03:04:55 2024 by rpki-client on console-fra.rpki-client.org