Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer
File: ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer (raw, json)
Hash identifier: hpoMjo5I/wfMiQhjdrUy7YEOCBv1wM4dHh7bVmdDa4w=
Subject key identifier: 66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56EDF75303A2BD9213EBF1C79BDD02E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 8548
AS: 34079
IP: 5.198.136.0/21
IP: 81.87.0.0/16
IP: 83.137.208.0/21
IP: 83.138.32.0/21
IP: 89.207.208.0/21
IP: 185.224.232.0/22
IP: 188.92.136.0/21
IP: 193.60.0.0/14
IP: 194.66.0.0/16
IP: 194.80.0.0/14
IP: 195.194.0.0/15
IP: 212.121.0.0/19
IP: 212.121.192.0/19
IP: 212.219.0.0/16
IP: 2001:630::/32
IP: 2a00:ee00::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:df:75:30:3a:2b:d9:21:3e:bf:1c:79:bd:d0:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6665dd97665a23b1b183e223822b66b5ae536a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ad:ee:34:70:5c:9c:f8:7e:17:1e:32:23:36:
5a:a2:ec:41:0d:8a:ac:f3:e9:59:cb:16:dd:91:fd:
68:c3:45:56:98:71:aa:4a:59:7c:21:f2:17:28:0f:
a6:83:69:40:a2:a5:ff:40:af:8b:a0:ed:0f:42:d1:
e9:81:81:19:8f:b5:16:ed:7e:cc:53:c8:94:9e:a5:
ad:bc:4a:b4:1e:8b:12:5f:9d:d8:21:4f:f8:e1:00:
c9:dc:c9:26:84:f1:d7:fd:1b:6c:cb:1d:d0:3d:df:
d6:32:35:bc:0f:4d:03:ca:dc:96:9d:f0:3c:92:a8:
ab:43:12:ee:c0:86:d6:26:96:32:35:25:62:dc:9c:
58:1c:64:4f:10:c4:74:42:26:f6:a3:2e:03:61:db:
14:23:de:eb:96:fb:21:b3:36:41:7d:62:fa:5c:d2:
6c:0b:71:63:e0:70:62:99:2d:3a:fb:d7:75:4b:d6:
70:a2:57:99:f0:bf:3c:eb:34:0f:3a:b6:9d:b9:f8:
b2:47:b7:6c:9f:c0:2d:a9:df:a0:f0:a9:0a:d1:a7:
fd:73:23:92:41:e3:4b:cc:6f:2c:7f:d1:7d:2f:01:
50:94:11:e9:77:ae:83:c1:69:24:f9:0c:b7:f1:ae:
9a:d4:26:8f:f8:c1:6e:58:ce:9a:8e:e1:c1:1d:11:
d4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.198.136.0/21
81.87.0.0/16
83.137.208.0/21
83.138.32.0/21
89.207.208.0/21
185.224.232.0/22
188.92.136.0/21
193.60.0.0/14
194.66.0.0/16
194.80.0.0/14
195.194.0.0/15
212.121.0.0/19
212.121.192.0/19
212.219.0.0/16
IPv6:
2001:630::/32
2a00:ee00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8548
34079
Signature Algorithm: sha256WithRSAEncryption
66:ad:07:ed:42:4d:f0:8c:e2:d7:51:d4:10:eb:3b:1c:ad:6a:
63:83:f2:04:1b:eb:5c:04:c3:48:01:2f:1c:d4:e9:28:a3:03:
8c:32:96:3f:05:4f:3a:cc:35:50:3f:3a:98:61:27:f4:cd:bc:
05:5b:5d:38:98:f8:6e:cb:86:8f:c2:72:54:dc:8e:8e:b5:bb:
5b:da:aa:01:1f:50:59:48:6d:12:ed:39:11:59:09:db:a9:12:
84:1c:4b:d3:92:05:1b:a9:99:35:df:40:c2:1c:b1:23:7e:31:
e2:3a:b5:14:8b:57:67:64:e4:cf:71:48:96:2d:e2:11:fb:98:
62:13:29:f6:67:3b:c8:49:d7:fa:94:61:4c:4e:10:97:4a:e2:
c5:99:90:29:6f:5c:4c:c7:14:1c:3b:c0:81:5a:e2:99:60:8b:
0a:cc:8d:81:50:46:e4:20:8e:0f:18:01:49:0b:73:4d:50:a6:
19:c0:0b:be:d7:2b:fa:14:7e:af:62:53:11:d9:3f:b6:aa:64:
d8:29:39:7d:f7:3d:6c:a4:29:9e:f3:f0:d9:51:db:47:5c:0c:
cf:40:bf:5c:c3:ab:65:41:98:9b:a5:eb:3e:83:1f:21:61:f8:
cf:ad:a1:56:dc:ae:06:13:a0:0a:f6:71:34:98:bc:63:8f:07:
0e:8f:3f:0d
-----BEGIN CERTIFICATE-----
MIIF9jCCBN6gAwIBAgISAYzFbt91MDor2SE+vxx5vdAuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTQzMDI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjY1ZGQ5NzY2NWEyM2IxYjE4M2UyMjM4MjJiNjZiNWFlNTM2YTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1q3uNHBcnPh+Fx4yIzZaouxBDYqs
8+lZyxbdkf1ow0VWmHGqSll8IfIXKA+mg2lAoqX/QK+LoO0PQtHpgYEZj7UW7X7M
U8iUnqWtvEq0HosSX53YIU/44QDJ3MkmhPHX/Rtsyx3QPd/WMjW8D00DytyWnfA8
kqirQxLuwIbWJpYyNSVi3JxYHGRPEMR0Qib2oy4DYdsUI97rlvshszZBfWL6XNJs
C3Fj4HBimS06+9d1S9ZwoleZ8L886zQPOradufiyR7dsn8Atqd+g8KkK0af9cyOS
QeNLzG8sf9F9LwFQlBHpd66DwWkk+Qy38a6a1CaP+MFuWM6ajuHBHRHUEwIDAQAB
o4IDAjCCAv4wHQYDVR0OBBYEFGZl3ZdmWiOxsYPiI4IrZrWuU2ovMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRhLzMxMjUy
OS03M2Y2LTQ4MDktYWY5Yi1lOGQ3MDcxN2ZmOGEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEvMzEyNTI5
LTczZjYtNDgwOS1hZjliLWU4ZDcwNzE3ZmY4YS8xL1ptWGRsMlphSTdHeGctSWpn
aXRtdGE1VGFpOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMH0GCCsGAQUF
BwEHAQH/BG4wbDBUBAIAATBOAwQDBcaIAwMAUVcDBANTidADBANTiiADBANZz9AD
BAK54OgDBAO8XIgDAwLBPAMDAMJCAwMCwlADAwHDwgMEBdR5AAMEBdR5wAMDANTb
MBQEAgACMA4DBQAgAQYwAwUAKgDuADAeBggrBgEFBQcBCAEB/wQPMA2gCzAJAgIh
ZAIDAIUfMA0GCSqGSIb3DQEBCwUAA4IBAQBmrQftQk3wjOLXUdQQ6zscrWpjg/IE
G+tcBMNIAS8c1OkoowOMMpY/BU86zDVQPzqYYSf0zbwFW104mPhuy4aPwnJU3I6O
tbtb2qoBH1BZSG0S7TkRWQnbqRKEHEvTkgUbqZk130DCHLEjfjHiOrUUi1dnZOTP
cUiWLeIR+5hiEyn2ZzvISdf6lGFMThCXSuLFmZApb1xMxxQcO8CBWuKZYIsKzI2B
UEbkII4PGAFJC3NNUKYZwAu+1yv6FH6vYlMR2T+2qmTYKTl99z1spCme8/DZUdtH
XAzPQL9cw6tlQZibpes+gx8hYfjPraFW3K4GE6AK9nE0mLxjjwcOjz8N
-----END CERTIFICATE-----
Generated at Fri May 3 03:06:41 2024 by rpki-client on console-fra.rpki-client.org