Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_u-XLlu2tt8FUhC0sD8HdImK7LM.cer
File: _u-XLlu2tt8FUhC0sD8HdImK7LM.cer (raw, json)
Hash identifier: vx8sLw2Ie0+XUkWCRtM5vku6aupfAtYgAWqZCim1pkM=
Subject key identifier: FE:EF:97:2E:5B:B6:B6:DF:05:52:10:B4:B0:3F:07:74:89:8A:EC:B3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018EADA0DA5C39A93D00829F6FEE85D59E2D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/d1c70b-5717-41da-bcfd-60a92ead3af6/1/_u-XLlu2tt8FUhC0sD8HdImK7LM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/d1c70b-5717-41da-bcfd-60a92ead3af6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 05 Apr 2024 09:39:43 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.236.231.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ad:a0:da:5c:39:a9:3d:00:82:9f:6f:ee:85:d5:9e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 5 09:39:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=feef972e5bb6b6df055210b4b03f0774898aecb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ef:1a:25:45:03:a8:3d:a4:ac:14:ec:af:32:
80:b1:65:90:2f:e2:4e:26:1c:52:cf:b2:bc:1f:2f:
c3:92:36:15:b5:06:9b:91:53:5a:42:f7:e8:cf:4b:
b0:ee:89:fc:5f:2d:76:d8:c4:df:5a:ae:64:0c:40:
32:98:d6:76:a0:18:37:c1:5e:a1:13:e1:4c:95:6f:
65:b6:c0:4f:5c:8c:77:ba:b1:50:26:00:5b:eb:4d:
2a:14:d1:bb:5f:86:15:58:91:ff:bf:31:27:b9:07:
b5:75:ea:bc:34:90:58:aa:82:f8:32:82:7d:f8:98:
1b:d1:2c:b2:aa:2a:03:92:58:50:0d:bc:7e:69:e7:
de:cd:16:0d:71:e8:b8:a8:e6:a2:2f:de:34:0f:85:
2e:83:70:46:53:8b:04:31:c6:72:91:4a:38:0c:c0:
db:bb:2a:75:1d:a7:f7:3f:a5:6f:53:71:91:5c:07:
42:94:46:3f:13:70:34:1d:18:d2:03:11:99:7e:80:
60:23:ce:64:9b:22:fe:be:4c:e8:0b:c3:98:b7:16:
13:39:53:bb:87:f5:95:fd:74:e0:67:8e:57:4a:96:
36:c3:5f:34:28:da:df:8b:df:d2:9a:98:b9:71:d2:
f9:a8:f9:c8:cc:5f:74:9c:ce:71:9e:4c:80:fc:8a:
05:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:EF:97:2E:5B:B6:B6:DF:05:52:10:B4:B0:3F:07:74:89:8A:EC:B3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d1c70b-5717-41da-bcfd-60a92ead3af6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d1c70b-5717-41da-bcfd-60a92ead3af6/1/_u-XLlu2tt8FUhC0sD8HdImK7LM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.231.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:4b:0e:c1:b6:e5:bf:fa:1f:e5:2f:7c:ba:4c:a5:11:a7:c9:
e1:b9:5c:aa:da:2e:b7:6b:67:2c:5c:6b:31:17:85:4f:f6:7c:
78:81:a8:95:3f:49:c9:47:02:e8:1c:9d:f3:dd:4e:b9:8b:e6:
37:12:dd:ae:8b:f1:8b:0d:92:db:33:56:a6:c8:e1:f6:bf:cb:
af:e5:eb:09:51:f0:0b:a9:c0:f9:e5:31:d0:ce:03:cf:1f:a0:
b8:b4:c7:26:52:d2:b3:fe:1e:1c:f5:67:26:8b:47:5b:a7:a8:
33:0d:25:82:18:84:09:4d:f6:fc:c7:0d:16:6a:72:d4:ca:41:
44:33:2d:d9:f4:a2:62:60:37:8d:30:c4:04:1c:fb:7b:74:8e:
7b:de:09:61:99:fc:ce:cb:d8:38:19:02:ce:2d:b7:05:cf:8b:
b8:e9:db:7f:aa:88:55:94:da:ad:53:73:86:5a:49:2c:ce:06:
28:a5:42:2d:d8:9f:c2:1d:e1:97:20:04:44:f2:3c:2a:98:a7:
ab:7c:20:ca:65:d4:fb:af:40:ae:1b:ac:6c:10:9d:6f:5c:e2:
c9:04:43:33:1c:85:3b:8c:3d:12:fc:97:62:b6:9f:aa:48:f4:
bc:af:ac:9f:d5:96:20:b2:0a:df:13:63:95:c4:62:d7:e2:e6:
4b:45:c1:4e
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAY6toNpcOak9AIKfb+6F1Z4tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNDA1MDkzOTQzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZWVmOTcyZTViYjZiNmRmMDU1MjEwYjRiMDNmMDc3NDg5OGFlY2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwu8aJUUDqD2krBTsrzKAsWWQL+JO
JhxSz7K8Hy/DkjYVtQabkVNaQvfoz0uw7on8Xy122MTfWq5kDEAymNZ2oBg3wV6h
E+FMlW9ltsBPXIx3urFQJgBb600qFNG7X4YVWJH/vzEnuQe1deq8NJBYqoL4MoJ9
+Jgb0SyyqioDklhQDbx+aefezRYNcei4qOaiL940D4Uug3BGU4sEMcZykUo4DMDb
uyp1Haf3P6VvU3GRXAdClEY/E3A0HRjSAxGZfoBgI85kmyL+vkzoC8OYtxYTOVO7
h/WV/XTgZ45XSpY2w180KNrfi9/Smpi5cdL5qPnIzF90nM5xnkyA/IoFSQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFP7vly5btrbfBVIQtLA/B3SJiuyzMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjL2QxYzcw
Yi01NzE3LTQxZGEtYmNmZC02MGE5MmVhZDNhZjYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMvZDFjNzBi
LTU3MTctNDFkYS1iY2ZkLTYwYTkyZWFkM2FmNi8xL191LVhMbHUydHQ4RlVoQzBz
RDhIZEltSzdMTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW+znMA0GCSqGSIb3DQEBCwUAA4IBAQB6Sw7B
tuW/+h/lL3y6TKURp8nhuVyq2i63a2csXGsxF4VP9nx4gaiVP0nJRwLoHJ3z3U65
i+Y3Et2ui/GLDZLbM1amyOH2v8uv5esJUfALqcD55THQzgPPH6C4tMcmUtKz/h4c
9Wcmi0dbp6gzDSWCGIQJTfb8xw0WanLUykFEMy3Z9KJiYDeNMMQEHPt7dI573glh
mfzOy9g4GQLOLbcFz4u46dt/qohVlNqtU3OGWkkszgYopUIt2J/CHeGXIARE8jwq
mKerfCDKZdT7r0CuG6xsEJ1vXOLJBEMzHIU7jD0S/Jditp+qSPS8r6yf1ZYgsgrf
E2OVxGLX4uZLRcFO
-----END CERTIFICATE-----
Generated at Fri May 3 03:07:37 2024 by rpki-client on console-fra.rpki-client.org