Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.cer
File: ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.cer (raw, json)
Hash identifier: +RcT+Hn+Ht1tdVoX0jAQGPKgHgzdNvHPiEUwDP4FxiU=
Subject key identifier: 65:E0:06:2E:54:A5:FC:B6:A0:C9:9E:59:85:57:FE:D6:F3:7A:46:29
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5012D4BCA8D59C8FA2586B83DEF7B31
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:37 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211491
IP: 193.22.20.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:2d:4b:ca:8d:59:c8:fa:25:86:b8:3d:ef:7b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65e0062e54a5fcb6a0c99e598557fed6f37a4629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:16:b6:c2:d3:34:7d:d9:48:36:fb:0d:da:37:
68:6f:40:0c:05:71:d8:71:cb:c3:52:ca:af:d7:85:
39:82:d4:fe:4d:7b:ba:b0:1b:08:c0:8a:f8:69:94:
0a:db:d2:f5:51:eb:e6:8b:12:aa:16:c9:0f:1c:dc:
6a:2a:0a:d2:5e:a9:5a:2f:9e:ee:02:f6:21:9e:68:
f9:aa:e7:2e:22:35:3f:b6:37:84:60:81:23:d6:fe:
c7:5f:8d:73:8c:d7:86:1b:93:6a:95:f1:bd:4f:74:
6d:28:22:ec:75:10:3e:de:02:b5:20:4f:f9:fb:18:
ce:f5:78:70:8e:7d:74:89:9e:a8:a6:21:4e:09:9f:
c7:fb:98:d5:08:3a:bd:d7:a2:f0:c8:5e:8e:46:31:
78:9c:b1:29:ed:27:a2:ed:37:a2:a5:bc:6d:cb:22:
82:85:03:73:73:a1:e5:79:0e:e7:08:48:7b:4b:15:
fd:e7:1a:2b:1b:53:73:ff:37:bc:4d:8f:86:74:41:
7e:3a:80:28:9b:99:96:e9:93:c9:a9:47:a0:6f:87:
63:35:c5:45:7e:5b:28:03:19:80:9e:8c:5b:88:6a:
7d:cb:5b:c4:0e:d3:45:ef:d6:e8:5c:a8:56:4e:57:
4c:ca:32:15:f0:4b:17:a2:4d:74:cf:cd:5d:68:9e:
31:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E0:06:2E:54:A5:FC:B6:A0:C9:9E:59:85:57:FE:D6:F3:7A:46:29
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.20.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211491
Signature Algorithm: sha256WithRSAEncryption
16:2a:07:2f:26:c8:75:8e:c9:07:52:7c:1c:e8:83:e0:b5:a6:
4b:2b:80:97:41:95:02:d5:f6:ac:f6:c6:64:91:a3:fd:2e:82:
6e:c6:f3:97:14:11:c9:ac:dc:ea:c1:33:fb:29:72:80:39:e1:
1b:fe:80:98:52:33:f1:32:48:d8:31:f3:a5:10:33:8f:24:42:
9b:40:86:82:75:1e:8f:c1:b9:bb:e9:96:22:7c:9b:02:5a:44:
95:d0:3e:df:31:62:40:30:8a:cf:a3:16:03:8d:bb:ce:dd:0e:
fe:6a:39:be:ed:e3:64:bc:19:d3:8d:30:e2:00:8a:95:66:b4:
d0:45:2b:7d:54:bc:d1:ed:11:8f:e5:08:31:aa:11:6d:b6:0c:
06:14:77:3b:37:76:e0:67:a2:41:6a:71:d4:bc:8d:af:7b:bd:
90:4a:c3:31:1d:71:a9:f8:88:e8:7f:e0:71:ac:75:b2:11:74:
75:31:f9:77:18:55:94:fd:9e:35:13:e1:c2:1c:bb:8b:8a:38:
91:b2:41:b2:8c:35:19:77:82:5a:8d:11:79:d4:79:76:d1:de:
69:d5:cb:cd:16:52:9e:7d:56:31:7d:7c:04:b3:f3:5a:b9:ba:
33:18:e4:cc:a4:47:04:b8:99:5e:41:c0:a4:9c:22:37:12:ea:
db:3b:9a:08
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYzFAS1Lyo1ZyPolhrg973sxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTIzMDM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NWUwMDYyZTU0YTVmY2I2YTBjOTllNTk4NTU3ZmVkNmYzN2E0NjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxa2wtM0fdlINvsN2jdob0AMBXHY
ccvDUsqv14U5gtT+TXu6sBsIwIr4aZQK29L1UevmixKqFskPHNxqKgrSXqlaL57u
AvYhnmj5qucuIjU/tjeEYIEj1v7HX41zjNeGG5NqlfG9T3RtKCLsdRA+3gK1IE/5
+xjO9Xhwjn10iZ6opiFOCZ/H+5jVCDq916LwyF6ORjF4nLEp7Sei7TeipbxtyyKC
hQNzc6HleQ7nCEh7SxX95xorG1Nz/ze8TY+GdEF+OoAom5mW6ZPJqUegb4djNcVF
flsoAxmAnoxbiGp9y1vEDtNF79boXKhWTldMyjIV8EsXok10z81daJ4xRwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFGXgBi5Upfy2oMmeWYVX/tbzekYpMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QwLzk3NWU2
OC04NjYyLTQzYjktOGVkMi1hYWU5N2U2NTAxNWMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAvOTc1ZTY4
LTg2NjItNDNiOS04ZWQyLWFhZTk3ZTY1MDE1Yy8xL1plQUdMbFNsX0xhZ3laNVpo
VmYtMXZONlJpay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwRYUMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwM6IzANBgkqhkiG9w0BAQsFAAOCAQEAFioHLybIdY7JB1J8HOiD4LWmSyuAl0GV
AtX2rPbGZJGj/S6CbsbzlxQRyazc6sEz+ylygDnhG/6AmFIz8TJI2DHzpRAzjyRC
m0CGgnUej8G5u+mWInybAlpEldA+3zFiQDCKz6MWA427zt0O/mo5vu3jZLwZ040w
4gCKlWa00EUrfVS80e0Rj+UIMaoRbbYMBhR3Ozd24GeiQWpx1LyNr3u9kErDMR1x
qfiI6H/gcax1shF0dTH5dxhVlP2eNRPhwhy7i4o4kbJBsow1GXeCWo0RedR5dtHe
adXLzRZSnn1WMX18BLPzWrm6MxjkzKRHBLiZXkHApJwiNxLq2zuaCA==
-----END CERTIFICATE-----
Generated at Fri May 3 01:49:38 2024 by rpki-client on console-ams.rpki-client.org