Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
File: Y0FqyaIZN3iMrcd7ep-JttTFWko.cer (raw, json)
Hash identifier: OfrC2TnQEREW6+5+aRkTPdfkJsHApdukSU0MVJtae/8=
Subject key identifier: 63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DAB65C67D279390A8E8F6B4865861E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.222.144.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:b6:5c:67:d2:79:39:0a:8e:8f:6b:48:65:86:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:54:de:4a:2e:c7:a2:86:82:a8:14:a2:f3:7f:
91:ca:71:c9:42:6d:03:48:71:7d:f0:bc:7d:60:30:
72:64:d3:95:5c:bf:95:29:b4:fa:53:01:c7:7a:08:
d5:c0:e3:3e:9d:c5:30:02:d0:5b:28:29:cd:9c:3b:
8f:ff:b1:53:65:eb:3b:46:ee:c7:f2:21:0c:69:c4:
55:a9:24:0d:43:13:a3:46:bf:2e:76:a1:61:96:83:
27:43:8d:c5:7c:ea:82:00:60:32:8f:14:85:83:d0:
ed:a7:2e:8e:f6:ae:f0:aa:0a:ed:69:fb:f5:1d:c8:
f1:4f:4a:f1:b1:85:f5:b8:54:8e:de:9b:36:d5:cd:
ca:5b:e4:33:d5:02:92:57:00:f3:02:ce:2f:d2:90:
aa:10:d1:e8:02:c1:f4:3a:88:5e:8b:34:43:ed:6c:
71:4c:53:21:fc:a9:72:4b:19:bc:6b:3f:33:66:d2:
c9:b2:35:f1:ff:87:b9:7a:7d:44:cd:bd:e3:eb:d1:
cc:6a:67:33:86:2f:01:d5:08:85:0f:0b:f4:6a:26:
1a:fa:54:cb:d6:0b:7a:b1:4d:18:3c:66:68:47:d1:
2e:73:82:e5:e3:78:56:2d:48:4a:4d:15:e2:ef:19:
ad:1d:eb:c8:12:83:db:a0:05:57:91:a9:ad:26:8a:
b1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.144.0/22
Signature Algorithm: sha256WithRSAEncryption
57:1a:2c:a4:9c:70:64:88:3e:19:cd:fa:c6:77:da:6d:b2:f0:
8e:aa:13:d2:a6:ee:68:0a:66:a0:ef:4d:ea:b3:e3:70:6a:4a:
3a:28:dd:7c:4c:b7:68:18:cc:58:24:0f:2c:2b:b8:4f:8a:e6:
bb:a4:8f:7d:ad:45:f9:ef:96:2a:b2:83:96:32:3c:af:74:d0:
94:80:3d:15:ba:6b:5e:2d:47:3c:5a:82:6f:d3:43:34:8f:c4:
84:77:d1:67:98:d0:7b:ed:19:93:24:c8:70:bc:ac:2f:76:26:
0a:d6:cd:01:53:c9:33:ee:cc:96:56:90:51:ea:9c:cb:d2:ed:
4c:1e:87:4a:bf:7c:42:61:ab:fe:a2:3d:d9:ce:35:d6:df:8e:
63:43:bb:fa:7d:fe:0d:35:af:1e:64:9a:bb:44:95:01:e4:a6:
22:5d:6f:d3:52:68:35:ff:2b:98:28:51:1d:b4:64:7e:37:5b:
7d:fb:8f:0c:f4:0b:fb:34:c3:17:cf:88:64:d8:e5:12:fd:29:
3e:31:7d:0a:e3:98:1c:96:38:db:66:4b:b4:22:04:0c:26:3b:
9d:71:09:3b:7d:92:bf:e4:ed:4f:6a:46:dc:5d:70:ac:0f:be:
5f:aa:f8:52:33:47:82:3e:38:58:76:f0:05:26:89:a7:f6:a9:
70:34:b4:e1
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzC2rZcZ9J5OQqOj2tIZYYeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDIyOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MzQxNmFjOWEyMTkzNzc4OGNhZGM3N2I3YTlmODliNmQ0YzU1YTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1TeSi7HooaCqBSi83+RynHJQm0D
SHF98Lx9YDByZNOVXL+VKbT6UwHHegjVwOM+ncUwAtBbKCnNnDuP/7FTZes7Ru7H
8iEMacRVqSQNQxOjRr8udqFhloMnQ43FfOqCAGAyjxSFg9Dtpy6O9q7wqgrtafv1
HcjxT0rxsYX1uFSO3ps21c3KW+Qz1QKSVwDzAs4v0pCqENHoAsH0OoheizRD7Wxx
TFMh/KlySxm8az8zZtLJsjXx/4e5en1Ezb3j69HMamczhi8B1QiFDwv0aiYa+lTL
1gt6sU0YPGZoR9Euc4Ll43hWLUhKTRXi7xmtHevIEoPboAVXkamtJoqxXwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFGNBasmiGTd4jK3He3qfibbUxVpKMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MzLzgzNjA3
Zi0xNGI0LTQyMTctYjZjZC1iN2JhZTkxMGM3YWMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvODM2MDdm
LTE0YjQtNDIxNy1iNmNkLWI3YmFlOTEwYzdhYy8xL1kwRnF5YUlaTjNpTXJjZDdl
cC1KdHRURldrby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCud6QMA0GCSqGSIb3DQEBCwUAA4IBAQBXGiyk
nHBkiD4ZzfrGd9ptsvCOqhPSpu5oCmag703qs+Nwako6KN18TLdoGMxYJA8sK7hP
iua7pI99rUX575YqsoOWMjyvdNCUgD0VumteLUc8WoJv00M0j8SEd9FnmNB77RmT
JMhwvKwvdiYK1s0BU8kz7syWVpBR6pzL0u1MHodKv3xCYav+oj3ZzjXW345jQ7v6
ff4NNa8eZJq7RJUB5KYiXW/TUmg1/yuYKFEdtGR+N1t9+48M9Av7NMMXz4hk2OUS
/Sk+MX0K45gcljjbZku0IgQMJjudcQk7fZK/5O1PakbcXXCsD75fqvhSM0eCPjhY
dvAFJomn9qlwNLTh
-----END CERTIFICATE-----
Generated at Fri May 3 03:05:02 2024 by rpki-client on console-fra.rpki-client.org