Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
File: _NenIe2kWevfmOAp-HyQqYDoHZQ.cer (raw, json)
Hash identifier: oODrqV3iaav6Z2Iu4kT6Q6KffS/OGxXB+q1jOOuCMX4=
Subject key identifier: FC:D7:A7:21:ED:A4:59:EB:DF:98:E0:29:F8:7C:90:A9:80:E8:1D:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D033CFDF35ABEDF1FC3B7946FC4D6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 46.235.152.0/21
IP: 185.180.48.0/22
IP: 2a0a:9180::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:03:3c:fd:f3:5a:be:df:1f:c3:b7:94:6f:c4:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fcd7a721eda459ebdf98e029f87c90a980e81d94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:87:83:5d:49:a4:b0:8f:d0:7e:23:a2:11:54:
ea:c8:16:4b:b3:ad:4f:1c:98:84:d3:92:66:24:8d:
22:2a:de:15:b1:85:87:b5:d9:04:79:7b:4c:f6:fd:
a2:6a:f3:37:84:52:d3:81:e0:30:c1:2b:8e:11:a8:
35:c6:d2:e4:b8:ca:49:ad:fe:d3:d2:e5:5a:d6:92:
13:c4:76:29:ee:29:41:da:07:9f:b7:6f:fd:ac:ff:
97:9e:6f:06:b0:5f:c3:57:72:4c:32:31:5b:3e:cb:
18:d9:e0:ae:8f:15:72:92:7b:7d:b3:e7:24:96:47:
ae:85:82:b1:94:36:ff:46:3b:2b:97:b1:ed:43:58:
95:57:25:7b:34:3a:af:e6:61:73:c2:6b:3c:7e:0e:
31:66:a1:60:b5:d8:f1:44:41:fb:f5:ad:07:e6:21:
eb:b2:cb:1e:23:6f:ec:7e:24:65:39:46:98:cc:79:
fc:82:7a:b8:3d:dd:29:08:49:87:8a:fb:81:77:c8:
ce:69:a1:98:a6:51:1d:83:2c:34:e7:6f:84:39:58:
2a:07:7b:cf:93:64:83:26:c6:11:69:13:d9:9e:3f:
24:4d:08:92:8b:91:82:ea:4d:2e:44:3a:09:f8:63:
87:22:f5:95:09:a2:27:61:db:72:c3:07:d7:d8:4f:
ea:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D7:A7:21:ED:A4:59:EB:DF:98:E0:29:F8:7C:90:A9:80:E8:1D:94
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.152.0/21
185.180.48.0/22
IPv6:
2a0a:9180::/32
Signature Algorithm: sha256WithRSAEncryption
26:fb:06:ac:3d:d1:d1:41:81:e3:0b:70:bd:d8:aa:74:94:94:
a8:4a:a5:ab:ec:d0:f6:fd:3d:15:47:e5:3e:56:8b:5c:5d:e9:
7b:39:52:1c:59:05:91:80:02:26:66:56:68:c1:90:b2:d4:b9:
86:79:58:3a:4b:e9:eb:e7:94:b3:de:2d:f4:0f:a4:60:54:62:
ac:b2:2d:d0:a3:20:20:a0:ba:1d:35:b5:4e:b0:4c:da:5c:b5:
31:fa:e8:92:f2:27:7d:3b:4c:f4:92:0f:18:5f:2a:09:29:b6:
0a:1e:ef:67:14:ed:18:c4:b4:7d:6c:86:d0:9c:c2:f5:ca:a4:
58:4d:d9:14:26:5d:74:ec:d2:9a:83:07:87:8a:94:83:49:b1:
46:ac:a4:77:56:1c:d9:d0:fe:92:e5:97:a3:8c:bd:b4:c5:bd:
7f:da:c4:06:8b:c7:9f:8a:55:1a:0d:68:85:99:3e:8c:8c:ac:
c8:73:cf:07:48:f7:b7:de:3e:3d:05:9a:50:35:ae:e9:39:86:
ba:b7:a1:c8:f8:78:f4:89:ba:3c:ef:57:d7:4e:2a:5b:89:b2:
f6:15:e1:3d:35:01:ad:0f:72:85:0a:a5:66:3e:3d:9c:6b:ab:
4c:73:84:e9:14:b6:f5:52:77:f9:09:9b:32:a6:5a:8a:3e:51:
b9:58:33:67
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgISAYzCbQM8/fNavt8fw7eUb8TWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDAyOTMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmY2Q3YTcyMWVkYTQ1OWViZGY5OGUwMjlmODdjOTBhOTgwZTgxZDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44eDXUmksI/QfiOiEVTqyBZLs61P
HJiE05JmJI0iKt4VsYWHtdkEeXtM9v2iavM3hFLTgeAwwSuOEag1xtLkuMpJrf7T
0uVa1pITxHYp7ilB2geft2/9rP+Xnm8GsF/DV3JMMjFbPssY2eCujxVyknt9s+ck
lkeuhYKxlDb/Rjsrl7HtQ1iVVyV7NDqv5mFzwms8fg4xZqFgtdjxREH79a0H5iHr
ssseI2/sfiRlOUaYzHn8gnq4Pd0pCEmHivuBd8jOaaGYplEdgyw052+EOVgqB3vP
k2SDJsYRaRPZnj8kTQiSi5GC6k0uRDoJ+GOHIvWVCaInYdtywwfX2E/qSQIDAQAB
o4ICmTCCApUwHQYDVR0OBBYEFPzXpyHtpFnr35jgKfh8kKmA6B2UMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk1L2NmNGFi
NC1lOTE0LTQwZTEtODJkZi0xNGRjN2VjMDQ5NWQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTUvY2Y0YWI0
LWU5MTQtNDBlMS04MmRmLTE0ZGM3ZWMwNDk1ZC8xL19OZW5JZTJrV2V2Zm1PQXAt
SHlRcVlEb0haUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQDLuuYAwQCubQwMA0EAgACMAcDBQAqCpGAMA0G
CSqGSIb3DQEBCwUAA4IBAQAm+wasPdHRQYHjC3C92Kp0lJSoSqWr7ND2/T0VR+U+
VotcXel7OVIcWQWRgAImZlZowZCy1LmGeVg6S+nr55Sz3i30D6RgVGKssi3QoyAg
oLodNbVOsEzaXLUx+uiS8id9O0z0kg8YXyoJKbYKHu9nFO0YxLR9bIbQnML1yqRY
TdkUJl107NKagweHipSDSbFGrKR3VhzZ0P6S5ZejjL20xb1/2sQGi8efilUaDWiF
mT6MjKzIc88HSPe33j49BZpQNa7pOYa6t6HI+Hj0ibo871fXTipbibL2FeE9NQGt
D3KFCqVmPj2ca6tMc4TpFLb1Unf5CZsyplqKPlG5WDNn
-----END CERTIFICATE-----
Generated at Fri May 3 10:23:14 2024 by rpki-client on console-fra.rpki-client.org