Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer
File: aH2bViukcmGPk5jiZcoOcQj2h6M.cer (raw, json)
Hash identifier: cpZtw96Ldu4TiUD8aBs4etKb1GEpdibHjEEVwPXDyug=
Subject key identifier: 68:7D:9B:56:2B:A4:72:61:8F:93:98:E2:65:CA:0E:71:08:F6:87:A3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC348E30A51104518040C050B7B3EDEE6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:43 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.55.138.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:e3:0a:51:10:45:18:04:0c:05:0b:7b:3e:de:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=687d9b562ba472618f9398e265ca0e7108f687a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ae:19:00:fb:a8:0b:9d:91:ec:ed:6e:3d:fe:
b4:c3:54:f1:fc:2a:c6:fd:78:a1:d8:25:08:fc:8a:
36:3f:07:57:08:46:4f:57:8b:43:1a:c2:e1:92:5e:
33:5c:8f:c8:07:89:ff:d5:3c:e2:d8:00:58:c6:9d:
03:7f:35:7e:71:88:9c:fb:53:b8:7e:2f:34:9f:60:
ad:37:1c:5e:76:0f:e7:ae:72:7c:db:c1:eb:fc:25:
85:a0:30:1f:2d:82:64:5d:d3:22:5a:29:ed:db:93:
61:82:93:f9:0e:87:6b:cc:16:95:10:cd:25:3a:11:
26:79:9c:65:aa:5c:82:8e:79:7c:51:90:aa:24:e8:
03:10:cb:a6:31:d7:4b:cb:36:46:8a:9c:04:4b:3f:
03:04:a5:d8:2b:c9:8c:15:0b:2b:98:0a:3a:06:bc:
bf:b6:be:d2:64:66:64:91:50:48:85:f4:60:f5:3d:
41:ec:41:a0:c4:93:e1:e9:33:b1:a1:a8:25:4d:6e:
e5:3d:2d:e1:fa:2f:08:78:c8:b1:30:2b:85:69:1b:
36:eb:4d:73:77:ce:39:f3:f9:c9:b5:cf:f0:02:84:
04:44:f5:f9:c4:41:ab:b3:12:1d:f4:12:3d:51:f3:
b6:e7:23:12:d0:ae:3e:da:07:98:ed:a8:20:16:6c:
7c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:7D:9B:56:2B:A4:72:61:8F:93:98:E2:65:CA:0E:71:08:F6:87:A3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.55.138.0/24
Signature Algorithm: sha256WithRSAEncryption
09:63:54:c1:fa:01:26:6b:e2:cd:10:9b:59:aa:55:9a:fe:67:
09:5a:c5:5f:0a:15:90:a4:7f:e9:ab:a9:cd:bd:8a:63:48:63:
50:e8:05:fa:a0:68:5d:aa:3b:f1:b4:62:a7:88:3a:c8:c1:a1:
6a:31:5a:50:c5:98:62:a5:d2:28:8b:0a:17:2b:e4:46:bc:80:
76:bc:00:98:b3:a2:55:c9:89:a8:0f:f7:83:44:f8:52:f9:58:
ff:24:af:d9:03:29:a6:0f:ca:82:f1:4b:5f:de:4b:5e:87:c6:
6d:ab:e8:f8:cd:fe:ea:e9:66:be:6f:47:72:12:31:60:0a:0e:
20:c6:f3:84:0d:b9:a4:e1:a4:68:24:98:ac:f3:33:4c:33:53:
70:37:f3:93:9a:ec:cc:1b:d2:8f:0f:41:36:d5:28:13:54:26:
9a:36:45:77:39:03:5b:1a:67:85:c8:30:4a:fd:62:9b:31:27:
25:a2:5a:54:55:48:14:5b:0c:1f:ff:60:52:8a:44:41:bb:1b:
70:fe:0d:8c:2e:f1:d8:1d:e1:3e:60:bd:20:f2:3f:5b:04:47:
23:18:a7:27:39:a2:6a:6b:2a:e6:eb:16:80:c6:77:c5:68:74:
8d:ba:44:0e:ac:52:40:42:5b:5a:c0:05:cd:57:67:bd:4e:b6:
df:2c:ea:2e
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzDSOMKURBFGAQMBQt7Pt7mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDQyOTQzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODdkOWI1NjJiYTQ3MjYxOGY5Mzk4ZTI2NWNhMGU3MTA4ZjY4N2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwq4ZAPuoC52R7O1uPf60w1Tx/CrG
/Xih2CUI/Io2PwdXCEZPV4tDGsLhkl4zXI/IB4n/1Tzi2ABYxp0DfzV+cYic+1O4
fi80n2CtNxxedg/nrnJ828Hr/CWFoDAfLYJkXdMiWint25NhgpP5DodrzBaVEM0l
OhEmeZxlqlyCjnl8UZCqJOgDEMumMddLyzZGipwESz8DBKXYK8mMFQsrmAo6Bry/
tr7SZGZkkVBIhfRg9T1B7EGgxJPh6TOxoaglTW7lPS3h+i8IeMixMCuFaRs2601z
d8458/nJtc/wAoQERPX5xEGrsxId9BI9UfO25yMS0K4+2geY7aggFmx8RQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFGh9m1YrpHJhj5OY4mXKDnEI9oejMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I0L2I4OWMx
Zi04ZGNiLTQzOGItOGFmZC02MDVkMTM1MTM2ZjcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjQvYjg5YzFm
LThkY2ItNDM4Yi04YWZkLTYwNWQxMzUxMzZmNy8xL2FIMmJWaXVrY21HUGs1amla
Y29PY1FqMmg2TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwjeKMA0GCSqGSIb3DQEBCwUAA4IBAQAJY1TB
+gEma+LNEJtZqlWa/mcJWsVfChWQpH/pq6nNvYpjSGNQ6AX6oGhdqjvxtGKniDrI
waFqMVpQxZhipdIoiwoXK+RGvIB2vACYs6JVyYmoD/eDRPhS+Vj/JK/ZAymmD8qC
8Utf3kteh8Ztq+j4zf7q6Wa+b0dyEjFgCg4gxvOEDbmk4aRoJJis8zNMM1NwN/OT
muzMG9KPD0E21SgTVCaaNkV3OQNbGmeFyDBK/WKbMSclolpUVUgUWwwf/2BSikRB
uxtw/g2MLvHYHeE+YL0g8j9bBEcjGKcnOaJqayrm6xaAxnfFaHSNukQOrFJAQlta
wAXNV2e9TrbfLOou
-----END CERTIFICATE-----
Generated at Fri May 3 03:10:07 2024 by rpki-client on console-fra.rpki-client.org