Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZdnpJm7sq8D9SmB36wuo-p873ic.cer
File: ZdnpJm7sq8D9SmB36wuo-p873ic.cer (raw, json)
Hash identifier: rG40XX9W95G4kf13pDvAGrenJFe1XjHmmqBg+evNkKw=
Subject key identifier: 65:D9:E9:26:6E:EC:AB:C0:FD:4A:60:77:EB:0B:A8:FA:9F:3B:DE:27
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856B636E6A601DDC1CE0F01A02727E9070
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 03:32:36 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 95.214.48.0/22
IP: 2a09:d680::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 May 2023 06:17:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:63:6e:6a:60:1d:dc:1c:e0:f0:1a:02:72:7e:90:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:32:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65d9e9266eecabc0fd4a6077eb0ba8fa9f3bde27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a2:bf:36:2e:f5:fd:5b:16:48:12:ac:2c:7c:
3d:51:9f:b8:5d:70:e4:de:f0:07:9f:2a:36:c4:d3:
81:fd:8f:6e:ff:0a:34:89:ba:59:0b:1e:35:d4:fb:
a3:50:db:46:88:7a:3c:19:61:e4:94:5f:a9:35:cb:
67:b7:f1:30:f6:6c:a5:4b:cd:f8:f2:91:0d:89:7c:
c8:c8:31:06:21:bb:f1:b8:32:f1:3a:0b:a7:ac:6a:
99:3e:f3:37:50:21:f1:f6:43:9f:1e:89:84:06:7f:
ff:42:21:52:fc:95:30:99:ec:21:4f:a5:7f:68:c6:
2e:53:ab:3f:8d:11:00:e9:74:22:f8:93:53:0f:4d:
e4:fc:75:d2:bc:2f:b8:09:eb:61:8a:6e:d6:5e:42:
0e:05:39:4b:32:56:e1:4d:9f:9a:9b:b9:eb:9b:10:
34:3d:6d:46:73:5d:9b:b0:49:80:10:ef:df:8b:10:
20:55:ca:c6:dc:63:b9:e9:4b:fe:6d:80:f7:19:df:
a0:95:1c:41:6b:df:af:e6:e1:20:6b:e6:59:5f:1d:
a3:fe:2b:93:16:37:bd:0d:54:7a:fd:f9:44:d2:e9:
4c:ad:76:4d:b2:ea:7e:cc:7d:cd:4d:25:a7:a4:a9:
36:31:95:65:54:57:62:a8:b2:16:90:0c:89:bb:60:
1f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D9:E9:26:6E:EC:AB:C0:FD:4A:60:77:EB:0B:A8:FA:9F:3B:DE:27
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.48.0/22
IPv6:
2a09:d680::/29
Signature Algorithm: sha256WithRSAEncryption
83:54:cc:aa:2d:26:8d:3f:c2:c8:94:4e:6b:c2:fe:9f:ec:d5:
70:b8:6b:29:35:4b:e7:50:70:1d:6d:36:0e:e2:13:e5:56:49:
86:13:c0:9d:4e:b9:c8:c8:a1:fb:c5:a7:2a:0c:d4:35:18:63:
28:a9:69:7f:91:ca:38:42:98:8b:04:7e:c6:bb:d2:04:64:2b:
6e:56:45:e4:35:d5:19:77:95:ce:34:ff:75:42:14:b6:c9:3e:
76:72:9b:75:6f:56:12:3a:58:c2:10:8d:44:32:18:57:60:f4:
c7:c9:8e:a3:57:f8:92:83:7d:d6:53:9b:31:5e:55:da:84:50:
6a:fe:30:7b:0d:33:c8:13:75:7d:1b:7f:c6:69:21:44:da:2c:
a6:30:82:23:ee:78:17:3e:65:7f:35:47:a2:d7:ee:8c:77:69:
d1:7b:60:ac:81:ce:19:d5:49:e2:e7:61:61:fc:6c:74:9c:b3:
02:17:d7:18:99:74:dd:ac:be:15:2c:c3:41:2e:f9:ae:09:d9:
b8:cd:2a:3e:8d:88:e8:d6:95:bf:b9:34:fc:4a:b2:75:93:e5:
b2:1e:1c:dc:b8:3b:b7:89:9c:34:16:ea:b6:48:85:d6:13:d0:
a8:9d:9c:14:f3:d0:12:0c:5d:7e:2d:e5:92:1e:05:2c:4a:30:
70:c8:3d:27
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVrY25qYB3cHODwGgJyfpBwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDMzMjM2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NWQ5ZTkyNjZlZWNhYmMwZmQ0YTYwNzdlYjBiYThmYTlmM2JkZTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqK/Ni71/VsWSBKsLHw9UZ+4XXDk
3vAHnyo2xNOB/Y9u/wo0ibpZCx411PujUNtGiHo8GWHklF+pNctnt/Ew9mylS834
8pENiXzIyDEGIbvxuDLxOgunrGqZPvM3UCHx9kOfHomEBn//QiFS/JUwmewhT6V/
aMYuU6s/jREA6XQi+JNTD03k/HXSvC+4Cethim7WXkIOBTlLMlbhTZ+am7nrmxA0
PW1Gc12bsEmAEO/fixAgVcrG3GO56Uv+bYD3Gd+glRxBa9+v5uEga+ZZXx2j/iuT
Fje9DVR6/flE0ulMrXZNsup+zH3NTSWnpKk2MZVlVFdiqLIWkAyJu2AfeQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFGXZ6SZu7KvA/Upgd+sLqPqfO94nMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZiL2JhNDAy
Yy1iMDBlLTRhMjYtYmY1My04ZTc0N2UzNGUxNjIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmIvYmE0MDJj
LWIwMGUtNGEyNi1iZjUzLThlNzQ3ZTM0ZTE2Mi8xL1pkbnBKbTdzcThEOVNtQjM2
d3VvLXA4NzNpYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCX9YwMA0EAgACMAcDBQMqCdaAMA0GCSqGSIb3
DQEBCwUAA4IBAQCDVMyqLSaNP8LIlE5rwv6f7NVwuGspNUvnUHAdbTYO4hPlVkmG
E8CdTrnIyKH7xacqDNQ1GGMoqWl/kco4QpiLBH7Gu9IEZCtuVkXkNdUZd5XONP91
QhS2yT52cpt1b1YSOljCEI1EMhhXYPTHyY6jV/iSg33WU5sxXlXahFBq/jB7DTPI
E3V9G3/GaSFE2iymMIIj7ngXPmV/NUei1+6Md2nRe2Csgc4Z1Uni52Fh/Gx0nLMC
F9cYmXTdrL4VLMNBLvmuCdm4zSo+jYjo1pW/uTT8SrJ1k+WyHhzcuDu3iZw0Fuq2
SIXWE9ConZwU89ASDF1+LeWSHgUsSjBwyD0n
-----END CERTIFICATE-----
Generated at Wed May 3 14:26:07 2023 by rpki-client on console-ams.rpki-client.org