Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Znbf9hqDBWdZd-hvUu7mdF1kKPQ.cer
File: Znbf9hqDBWdZd-hvUu7mdF1kKPQ.cer (raw, json)
Hash identifier: 1dLgs2lN4IsxbYtbABNRZ/qg0aHM1twzYmzIMTv/RIA=
Subject key identifier: 66:76:DF:F6:1A:83:05:67:59:77:E8:6F:52:EE:E6:74:5D:64:28:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB406A1DC23D54125FF5D79CD3ED43
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/6cb23e-7c65-46b3-9b6d-7c6635da892d/1/Znbf9hqDBWdZd-hvUu7mdF1kKPQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/6cb23e-7c65-46b3-9b6d-7c6635da892d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:57 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 199952
IP: 45.66.64.0/22
IP: 92.119.108.0/22
IP: 152.89.100.0/22
IP: 185.29.68.0/22
IP: 185.69.8.0/22
IP: 185.88.52.0/22
IP: 185.110.76.0/22
IP: 185.223.240.0/22
IP: 185.227.8.0/22
IP: 2a03:7ce0::/32
IP: 2a04:41c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:40:6a:1d:c2:3d:54:12:5f:f5:d7:9c:d3:ed:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6676dff61a8305675977e86f52eee6745d6428f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:03:03:d5:df:a7:22:9d:97:0a:82:21:c9:65:
2a:c0:32:08:ec:5e:86:29:a6:7e:2e:95:e5:f7:98:
58:1a:6e:83:ff:6f:b9:7a:39:16:95:30:bb:25:4f:
63:60:8b:55:bc:f0:69:be:3d:50:b8:ef:b9:2a:f9:
29:a4:ac:52:8c:9b:ce:b5:8e:0f:ce:0a:b2:51:b1:
7f:b6:5f:ec:e1:5e:20:1d:b4:8f:b4:1b:86:17:a7:
ee:28:8f:72:a2:58:b7:f7:30:67:b2:c1:ba:fe:27:
0c:1d:c5:ef:09:18:a8:75:6b:5b:28:4f:9c:14:33:
82:d4:81:1f:4e:c3:75:1a:1b:7d:9b:f9:6a:9b:fe:
f3:b5:e8:d9:00:8f:c3:19:89:83:c2:ce:dd:b0:c6:
9d:4e:37:8a:15:c1:62:76:a5:ec:e8:00:4e:80:76:
c3:91:91:95:3d:1c:7f:d6:a6:70:22:7a:94:49:9e:
30:03:0f:3f:fa:05:b1:b9:c0:20:5d:1c:7a:f0:43:
62:85:27:db:55:71:51:e8:7e:09:4f:3d:35:db:3c:
30:a3:6f:f2:14:34:42:57:ad:b5:d2:0b:7f:21:94:
5d:19:35:32:c4:fc:cd:3c:5d:96:f3:0f:0c:55:8c:
8d:98:00:91:60:6e:1b:01:55:38:48:00:84:34:70:
24:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:76:DF:F6:1A:83:05:67:59:77:E8:6F:52:EE:E6:74:5D:64:28:F4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6cb23e-7c65-46b3-9b6d-7c6635da892d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6cb23e-7c65-46b3-9b6d-7c6635da892d/1/Znbf9hqDBWdZd-hvUu7mdF1kKPQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.64.0/22
92.119.108.0/22
152.89.100.0/22
185.29.68.0/22
185.69.8.0/22
185.88.52.0/22
185.110.76.0/22
185.223.240.0/22
185.227.8.0/22
IPv6:
2a03:7ce0::/32
2a04:41c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199952
Signature Algorithm: sha256WithRSAEncryption
3e:89:96:54:a9:52:2f:f4:87:07:91:c7:59:fd:90:d1:b5:16:
99:98:c2:fc:95:9a:bb:b0:21:9f:77:6a:0d:f7:7d:6e:ee:91:
f1:76:23:ce:0a:e1:aa:1a:7b:73:bd:52:3a:8c:d4:51:b1:7c:
8c:6d:26:ab:fd:37:3e:09:08:5e:80:54:82:52:f6:d5:5e:27:
ed:2e:e4:fc:fe:88:d5:12:90:ff:2d:db:11:d7:dc:12:86:e1:
02:51:20:11:47:99:b1:52:95:31:1e:c1:6b:34:d9:48:db:40:
c3:17:72:92:22:81:9a:02:75:51:5e:47:d2:16:b1:80:38:78:
7b:64:f8:b7:ab:04:d8:6f:39:cb:73:17:fd:d0:bf:4d:32:f3:
cd:7c:48:73:a7:8a:2b:13:96:9f:0e:5b:53:a1:f9:61:1d:ca:
5b:b3:66:1a:c9:6c:7f:f4:34:9a:f3:0c:00:b8:eb:ff:3f:09:
b7:75:2a:1b:c7:34:99:0d:49:0d:dc:9e:82:4a:d3:7f:02:59:
29:36:d1:09:e7:a3:84:8b:9b:2b:57:ed:2e:3f:fb:87:f1:79:
6b:c9:0a:c6:80:3d:59:74:f4:fb:39:83:22:46:c2:e7:f5:8e:
74:62:4d:d2:5c:c8:d3:9b:ba:d9:d7:68:0a:d4:84:83:18:bf:
bc:3f:44:df
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgISAYzC20BqHcI9VBJf9dec0+1DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDIyOTU3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Njc2ZGZmNjFhODMwNTY3NTk3N2U4NmY1MmVlZTY3NDVkNjQyOGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAMD1d+nIp2XCoIhyWUqwDII7F6G
KaZ+LpXl95hYGm6D/2+5ejkWlTC7JU9jYItVvPBpvj1QuO+5KvkppKxSjJvOtY4P
zgqyUbF/tl/s4V4gHbSPtBuGF6fuKI9yoli39zBnssG6/icMHcXvCRiodWtbKE+c
FDOC1IEfTsN1Ght9m/lqm/7ztejZAI/DGYmDws7dsMadTjeKFcFidqXs6ABOgHbD
kZGVPRx/1qZwInqUSZ4wAw8/+gWxucAgXRx68ENihSfbVXFR6H4JTz012zwwo2/y
FDRCV6210gt/IZRdGTUyxPzNPF2W8w8MVYyNmACRYG4bAVU4SACENHAk1wIDAQAB
o4IC5jCCAuIwHQYDVR0OBBYEFGZ23/YagwVnWXfob1Lu5nRdZCj0MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MzLzZjYjIz
ZS03YzY1LTQ2YjMtOWI2ZC03YzY2MzVkYTg5MmQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvNmNiMjNl
LTdjNjUtNDZiMy05YjZkLTdjNjYzNWRhODkyZC8xL1puYmY5aHFEQldkWmQtaHZV
dTdtZEYxa0tQUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGCCsGAQUF
BwEHAQH/BFYwVDA8BAIAATA2AwQCLUJAAwQCXHdsAwQCmFlkAwQCuR1EAwQCuUUI
AwQCuVg0AwQCuW5MAwQCud/wAwQCueMIMBQEAgACMA4DBQAqA3zgAwUDKgRBwDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDDRAwDQYJKoZIhvcNAQELBQADggEBAD6J
llSpUi/0hweRx1n9kNG1FpmYwvyVmruwIZ93ag33fW7ukfF2I84K4aoae3O9UjqM
1FGxfIxtJqv9Nz4JCF6AVIJS9tVeJ+0u5Pz+iNUSkP8t2xHX3BKG4QJRIBFHmbFS
lTEewWs02UjbQMMXcpIigZoCdVFeR9IWsYA4eHtk+LerBNhvOctzF/3Qv00y8818
SHOniisTlp8OW1Oh+WEdyluzZhrJbH/0NJrzDAC46/8/Cbd1KhvHNJkNSQ3cnoJK
038CWSk20Qnno4SLmytX7S4/+4fxeWvJCsaAPVl09Ps5gyJGwuf1jnRiTdJcyNOb
utnXaArUhIMYv7w/RN8=
-----END CERTIFICATE-----
Generated at Fri May 3 13:48:53 2024 by rpki-client on console-ams.rpki-client.org