Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.cer
File: _gwUoL3BGfHtSWIC2Jvk_SZZ_wE.cer (raw, json)
Hash identifier: IkZzSMusaXB3vn6O+pIbEZMqUUjv8J5PL9VxD5ca6sc=
Subject key identifier: FE:0C:14:A0:BD:C1:19:F1:ED:49:62:02:D8:9B:E4:FD:26:59:FF:01
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DD0C8CC84EB88D145C9BCDE5D4E163
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:30:47 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 200715
IP: 37.143.56.0/22
IP: 2a0c:ddc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dd:0c:8c:c8:4e:b8:8d:14:5c:9b:cd:e5:d4:e1:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe0c14a0bdc119f1ed496202d89be4fd2659ff01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:94:e7:e9:dc:66:ca:60:61:d0:6e:b2:a1:2c:
43:71:ce:56:32:cb:37:6b:d7:10:3f:3b:2b:1d:c2:
55:94:07:d7:46:31:15:6d:ae:50:b6:0a:da:83:cb:
2b:67:c7:1c:d7:0c:ed:c8:8b:73:0e:15:59:6c:7b:
c1:b8:98:35:e0:81:ab:7b:12:fe:ef:eb:fb:c5:64:
28:a1:51:37:bc:79:a7:47:b4:7d:dd:04:99:da:89:
25:81:ab:f1:50:06:d0:3b:af:74:c6:66:63:23:40:
1a:81:98:3b:51:31:ca:ba:6c:78:f6:09:6d:80:8b:
5e:87:0d:1f:44:dc:c0:ab:16:25:19:1a:8f:f1:14:
2f:7c:81:17:e5:cd:24:af:ca:93:0d:61:d1:4f:ee:
8d:ce:33:d8:77:96:4d:c3:d4:07:fd:39:69:c2:5a:
d5:d2:35:ee:23:3b:1d:5c:52:e2:17:35:08:cb:1d:
06:96:76:c9:ea:82:f9:27:ef:82:d3:a8:2d:7c:68:
fe:92:96:90:64:ed:d0:01:f9:5b:d4:45:a3:01:c2:
6f:b2:2a:59:f9:1d:3c:ce:d7:f4:d6:bf:d5:c7:19:
b9:b0:09:04:01:76:ad:fa:f1:45:6b:c9:20:03:e2:
15:ad:79:5f:96:51:11:82:bc:27:77:c7:3f:5a:ea:
8f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:0C:14:A0:BD:C1:19:F1:ED:49:62:02:D8:9B:E4:FD:26:59:FF:01
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.56.0/22
IPv6:
2a0c:ddc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200715
Signature Algorithm: sha256WithRSAEncryption
6b:b9:e0:9a:fa:55:fb:85:19:3d:38:38:db:60:f0:7e:68:96:
cd:b8:ed:da:76:56:50:cc:cf:df:51:8d:4d:79:fe:c3:fa:b5:
7d:73:17:e0:f1:46:ef:f6:7d:7c:19:f7:b5:2e:ab:44:0c:b6:
de:b0:1a:c2:24:eb:1a:df:56:90:0e:6f:9a:79:d6:05:71:85:
ad:27:6e:7c:96:e4:ce:31:6b:8c:32:0e:b7:2b:00:06:00:4e:
0c:e5:c8:78:52:fc:e5:1d:5c:9a:fe:35:99:bc:35:60:f8:28:
12:c1:dd:11:3a:e1:9b:a7:59:b6:41:5a:d0:3b:ad:b0:83:cf:
6c:de:9b:e8:7c:41:85:22:b0:75:aa:21:82:d5:ce:cd:de:5f:
32:3d:1f:05:70:96:23:db:be:07:1c:a0:80:a5:78:2d:b8:e8:
ac:e5:a9:e8:d3:97:9c:37:39:af:4f:24:0f:28:94:87:5a:1a:
23:37:70:7f:f6:52:23:52:56:1b:91:cf:12:e2:8d:5a:84:cd:
32:67:7a:e0:e9:db:3f:ba:14:d7:bd:3e:4c:0a:bf:2b:fd:6d:
cf:81:c4:bd:33:53:c0:b3:3e:de:56:88:53:3d:90:a2:40:02:
29:34:e5:ba:03:1b:bf:2a:9a:6c:b3:89:40:33:74:8a:b3:aa:
1b:58:6c:48
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzF3QyMyE64jRRcm83l1OFjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTYzMDQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTBjMTRhMGJkYzExOWYxZWQ0OTYyMDJkODliZTRmZDI2NTlmZjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5Tn6dxmymBh0G6yoSxDcc5WMss3
a9cQPzsrHcJVlAfXRjEVba5Qtgrag8srZ8cc1wztyItzDhVZbHvBuJg14IGrexL+
7+v7xWQooVE3vHmnR7R93QSZ2oklgavxUAbQO690xmZjI0AagZg7UTHKumx49glt
gItehw0fRNzAqxYlGRqP8RQvfIEX5c0kr8qTDWHRT+6NzjPYd5ZNw9QH/TlpwlrV
0jXuIzsdXFLiFzUIyx0GlnbJ6oL5J++C06gtfGj+kpaQZO3QAflb1EWjAcJvsipZ
+R08ztf01r/Vxxm5sAkEAXat+vFFa8kgA+IVrXlfllERgrwnd8c/WuqPxQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFP4MFKC9wRnx7UliAtib5P0mWf8BMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q0LzcxMWQw
Yi1jNjMxLTRiNmItODcwMC1jZWE2NWJjZTczMjQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQvNzExZDBi
LWM2MzEtNGI2Yi04NzAwLWNlYTY1YmNlNzMyNC8xL19nd1VvTDNCR2ZIdFNXSUMy
SnZrX1NaWl93RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCJY84MA0EAgACMAcDBQMqDN3AMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMQCzANBgkqhkiG9w0BAQsFAAOCAQEAa7ngmvpV+4UZ
PTg422DwfmiWzbjt2nZWUMzP31GNTXn+w/q1fXMX4PFG7/Z9fBn3tS6rRAy23rAa
wiTrGt9WkA5vmnnWBXGFrSdufJbkzjFrjDIOtysABgBODOXIeFL85R1cmv41mbw1
YPgoEsHdETrhm6dZtkFa0DutsIPPbN6b6HxBhSKwdaohgtXOzd5fMj0fBXCWI9u+
BxyggKV4LbjorOWp6NOXnDc5r08kDyiUh1oaIzdwf/ZSI1JWG5HPEuKNWoTNMmd6
4OnbP7oU170+TAq/K/1tz4HEvTNTwLM+3laIUz2QokACKTTlugMbvyqabLOJQDN0
irOqG1hsSA==
-----END CERTIFICATE-----
Generated at Fri May 3 09:12:29 2024 by rpki-client on console-ams.rpki-client.org