Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer
File: aA4gzPstWJjCFikA0UaAcKcCSVY.cer (raw, json)
Hash identifier: V8r7bn9sww8tl8ZLBbbs2s1vnGUIlAy/5WMw60QnmKQ=
Subject key identifier: 68:0E:20:CC:FB:2D:58:98:C2:16:29:00:D1:46:80:70:A7:02:49:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86F238270E1E62350591A758AD42BCD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:29:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.95.44.0/22
IP: 2a01:4520::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:23:82:70:e1:e6:23:50:59:1a:75:8a:d4:2b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=680e20ccfb2d5898c2162900d1468070a7024956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:87:d7:99:25:82:8b:0c:5b:89:f4:80:b5:3f:
bd:b9:8a:8a:d9:0b:fb:76:d0:97:9e:3c:b5:dd:64:
6e:bb:cb:ee:d6:ab:41:70:16:fd:b0:93:b5:cc:12:
d3:df:fe:20:dc:3e:33:5d:33:68:42:0a:6c:e9:d5:
ce:15:fd:a2:12:98:79:c0:a0:cf:cd:0d:05:40:48:
1a:48:0a:cc:43:68:b8:dc:40:3e:4f:25:2a:78:f3:
75:85:05:28:c9:84:da:26:ac:5f:98:a1:e7:9b:85:
20:95:f9:44:3c:72:22:2f:19:40:ae:8d:af:b7:93:
01:bf:ec:6c:a6:7b:68:34:7e:f2:f3:fc:70:72:37:
ff:3c:a8:db:59:d2:e3:f1:c0:c2:5b:8e:30:29:0f:
dd:fc:ad:a0:77:9e:99:52:c7:7b:cb:b9:25:87:09:
d3:da:fe:c6:8d:0d:f1:b5:fc:d4:31:b9:04:d6:3f:
d6:c3:75:a1:4b:45:75:38:e9:b0:ad:d0:48:21:21:
90:22:d1:15:e5:e1:12:7a:2b:43:46:2f:7a:2b:26:
73:23:60:66:fa:12:d6:7c:3a:95:44:12:cd:c3:60:
9b:a0:e1:bf:df:c3:89:63:2c:ba:2a:5a:d6:ad:6d:
79:11:3b:73:88:c7:bf:3a:43:bb:63:94:59:ee:91:
b4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:0E:20:CC:FB:2D:58:98:C2:16:29:00:D1:46:80:70:A7:02:49:56
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.95.44.0/22
IPv6:
2a01:4520::/32
Signature Algorithm: sha256WithRSAEncryption
a3:ec:43:d4:13:b6:59:dd:b7:db:7c:f7:48:72:c7:fd:29:4e:
14:28:39:bb:68:72:90:a6:a9:c1:fa:1d:bd:fd:d5:e7:29:45:
89:45:dd:dd:be:f9:fc:7c:53:8d:71:da:b1:d9:b9:d6:c3:90:
af:c0:9b:00:f8:25:de:ca:c6:51:cf:41:5d:86:ce:3f:8c:de:
58:8f:04:8f:1e:45:e0:40:eb:5f:ba:c0:c2:4e:60:05:c8:cf:
c4:11:89:6b:e1:b9:00:df:f2:bd:c8:98:a5:e3:12:6e:d9:fd:
a9:37:fe:b7:db:02:67:d4:97:67:8e:16:79:ad:93:f3:c3:f4:
b4:f2:77:3c:ba:30:6e:0f:78:11:1c:e6:a2:d0:04:b8:b3:9e:
4f:9e:45:f5:74:96:93:f2:6d:8c:d4:e8:ca:84:57:8d:7f:53:
a0:f6:7a:aa:a6:05:f2:7b:34:47:b0:fc:95:40:19:8d:60:9d:
b2:bd:59:66:b9:b8:6f:bd:7f:a9:61:24:67:28:0b:63:03:3d:
d1:81:64:05:8b:4a:66:20:ae:16:fb:94:87:37:46:0d:e3:74:
d9:52:41:3d:14:38:b4:9c:52:fa:d6:71:ab:bd:ca:ed:37:b0:
27:6a:c0:07:d9:96:a7:4d:12:8a:7b:3c:89:63:fd:15:eb:91:
b1:16:68:d3
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzIbyOCcOHmI1BZGnWK1CvNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDQyOTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODBlMjBjY2ZiMmQ1ODk4YzIxNjI5MDBkMTQ2ODA3MGE3MDI0OTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzofXmSWCiwxbifSAtT+9uYqK2Qv7
dtCXnjy13WRuu8vu1qtBcBb9sJO1zBLT3/4g3D4zXTNoQgps6dXOFf2iEph5wKDP
zQ0FQEgaSArMQ2i43EA+TyUqePN1hQUoyYTaJqxfmKHnm4UglflEPHIiLxlAro2v
t5MBv+xspntoNH7y8/xwcjf/PKjbWdLj8cDCW44wKQ/d/K2gd56ZUsd7y7klhwnT
2v7GjQ3xtfzUMbkE1j/Ww3WhS0V1OOmwrdBIISGQItEV5eESeitDRi96KyZzI2Bm
+hLWfDqVRBLNw2CboOG/38OJYyy6KlrWrW15ETtziMe/OkO7Y5RZ7pG0lwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFGgOIMz7LViYwhYpANFGgHCnAklWMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc3Lzc5NmY4
Yy1iZGI3LTQ0MWYtYmRiYi0wMzU0MWQyMzE1NzQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcvNzk2Zjhj
LWJkYjctNDQxZi1iZGJiLTAzNTQxZDIzMTU3NC8xL2FBNGd6UHN0V0pqQ0Zpa0Ew
VWFBY0tjQ1NWWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuV8sMA0EAgACMAcDBQAqAUUgMA0GCSqGSIb3
DQEBCwUAA4IBAQCj7EPUE7ZZ3bfbfPdIcsf9KU4UKDm7aHKQpqnB+h29/dXnKUWJ
Rd3dvvn8fFONcdqx2bnWw5CvwJsA+CXeysZRz0Fdhs4/jN5YjwSPHkXgQOtfusDC
TmAFyM/EEYlr4bkA3/K9yJil4xJu2f2pN/632wJn1JdnjhZ5rZPzw/S08nc8ujBu
D3gRHOai0AS4s55PnkX1dJaT8m2M1OjKhFeNf1Og9nqqpgXyezRHsPyVQBmNYJ2y
vVlmubhvvX+pYSRnKAtjAz3RgWQFi0pmIK4W+5SHN0YN43TZUkE9FDi0nFL61nGr
vcrtN7AnasAH2ZanTRKKezyJY/0V65GxFmjT
-----END CERTIFICATE-----
Generated at Fri May 3 13:51:11 2024 by rpki-client on console-ams.rpki-client.org