Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YGVg4D7ogzLu-_ppROvRA4rg6rg.cer
File: YGVg4D7ogzLu-_ppROvRA4rg6rg.cer (raw, json)
Hash identifier: NK3K7MqKUa8j9pWNpDyiOH6N/YRC0/W5euPP8VaPuN4=
Subject key identifier: 60:65:60:E0:3E:E8:83:32:EE:FB:FA:69:44:EB:D1:03:8A:E0:EA:B8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E0A084A84F319B166A853D37C0108
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210799
IP: 176.100.45.0/24
IP: 2a11:c780::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:0a:08:4a:84:f3:19:b1:66:a8:53:d3:7c:01:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=606560e03ee88332eefbfa6944ebd1038ae0eab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:29:25:d6:be:65:39:1d:21:ea:d4:cf:f4:d2:
94:9a:2b:6d:57:6c:ea:fd:21:05:a2:ed:31:a8:e5:
39:b5:7d:38:35:5c:ab:24:bf:58:c1:89:c8:af:95:
93:8b:c1:bf:69:61:e8:36:1d:d5:79:f7:7f:0c:0e:
55:fe:a1:5b:ec:3e:73:55:02:5b:f9:fb:c2:79:3f:
9c:c3:7b:1d:01:14:6f:d9:0e:12:32:06:2b:ef:18:
24:47:66:8a:a5:38:9a:1c:57:6a:b7:84:cc:51:d8:
91:d3:3a:fe:b8:24:f3:47:90:31:73:e6:60:06:84:
89:34:f8:d4:2a:0d:0f:20:8d:65:56:89:0f:25:a0:
f5:d1:16:4b:79:98:c6:2d:0c:92:c0:26:6d:64:dd:
2f:4d:aa:25:d5:47:13:d3:7c:08:ca:70:80:ca:bd:
91:03:72:36:f7:0e:8f:c9:db:9e:ff:21:f4:08:96:
c4:9c:b2:45:71:f5:2c:ca:13:fa:50:80:62:01:b6:
72:9c:35:f3:36:09:1e:03:01:83:2e:ac:e8:6d:c7:
72:6c:62:27:90:e5:6f:3c:8a:11:e7:b8:67:4d:8f:
59:e4:f5:45:09:e7:61:b2:3d:74:2c:cc:56:54:8b:
78:6d:29:c8:b8:74:71:b8:d6:03:52:e6:2d:7f:7b:
78:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:65:60:E0:3E:E8:83:32:EE:FB:FA:69:44:EB:D1:03:8A:E0:EA:B8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.100.45.0/24
IPv6:
2a11:c780::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210799
Signature Algorithm: sha256WithRSAEncryption
11:7e:88:b2:ea:4b:40:71:bb:16:07:66:18:55:43:e9:f6:55:
a5:ef:f0:bc:9a:b4:28:54:5a:7a:d6:b0:55:5f:ac:c2:4f:9d:
19:8d:f2:71:ab:f3:61:74:b7:ee:d1:d2:94:4e:03:11:b1:ee:
3e:1e:87:4b:49:44:d8:69:78:80:25:27:62:1f:30:97:40:93:
9d:7f:a7:93:64:fe:70:e0:bf:15:25:20:89:a0:7c:53:14:f0:
9a:7c:18:7e:f8:62:06:35:f4:f1:85:d4:2d:16:1b:bd:63:c5:
bc:81:af:95:fe:75:c1:af:c5:b0:f8:16:ef:cd:a9:c7:2f:91:
a9:57:42:32:1d:c5:f7:15:4a:48:58:8d:37:02:79:51:c9:63:
f1:ff:42:33:e2:91:20:d2:c4:0e:93:18:07:ab:8f:fc:b0:ba:
cf:6a:99:fb:15:ff:21:a3:27:f2:1b:4b:f0:2c:b8:e3:0d:a1:
f8:81:61:8d:3e:88:42:ee:eb:73:31:55:77:5d:3f:7e:2b:c2:
01:8a:20:c4:80:d9:a1:5a:2b:c0:04:bf:78:15:62:32:42:09:
31:ea:e9:77:22:b2:24:92:cd:20:31:57:9c:10:69:b9:1a:e0:
e4:7c:3f:e4:e6:d6:c3:ed:38:dd:21:da:d7:0c:b7:26:16:8e:
b6:bd:aa:be
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzFbgoISoTzGbFmqFPTfAEIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTQyOTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDY1NjBlMDNlZTg4MzMyZWVmYmZhNjk0NGViZDEwMzhhZTBlYWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApykl1r5lOR0h6tTP9NKUmittV2zq
/SEFou0xqOU5tX04NVyrJL9YwYnIr5WTi8G/aWHoNh3Vefd/DA5V/qFb7D5zVQJb
+fvCeT+cw3sdARRv2Q4SMgYr7xgkR2aKpTiaHFdqt4TMUdiR0zr+uCTzR5Axc+Zg
BoSJNPjUKg0PII1lVokPJaD10RZLeZjGLQySwCZtZN0vTaol1UcT03wIynCAyr2R
A3I29w6Pydue/yH0CJbEnLJFcfUsyhP6UIBiAbZynDXzNgkeAwGDLqzobcdybGIn
kOVvPIoR57hnTY9Z5PVFCedhsj10LMxWVIt4bSnIuHRxuNYDUuYtf3t4EQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFGBlYOA+6IMy7vv6aUTr0QOK4Oq4MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhkL2Q0Yjc4
Zi04Y2JiLTQ4NDYtODY2ZS1jZjllNzE2NGMwN2YvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGQvZDRiNzhm
LThjYmItNDg0Ni04NjZlLWNmOWU3MTY0YzA3Zi8xL1lHVmc0RDdvZ3pMdS1fcHBS
T3ZSQTRyZzZyZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAsGQtMA0EAgACMAcDBQMqEceAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM3bzANBgkqhkiG9w0BAQsFAAOCAQEAEX6IsupLQHG7
FgdmGFVD6fZVpe/wvJq0KFRaetawVV+swk+dGY3ycavzYXS37tHSlE4DEbHuPh6H
S0lE2Gl4gCUnYh8wl0CTnX+nk2T+cOC/FSUgiaB8UxTwmnwYfvhiBjX08YXULRYb
vWPFvIGvlf51wa/FsPgW782pxy+RqVdCMh3F9xVKSFiNNwJ5Uclj8f9CM+KRINLE
DpMYB6uP/LC6z2qZ+xX/IaMn8htL8Cy44w2h+IFhjT6IQu7rczFVd10/fivCAYog
xIDZoVorwAS/eBViMkIJMerpdyKyJJLNIDFXnBBpuRrg5Hw/5ObWw+043SHa1wy3
JhaOtr2qvg==
-----END CERTIFICATE-----
Generated at Fri May 3 11:36:37 2024 by rpki-client on console-ams.rpki-client.org