Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.cer
File: aJMYjr_OIOW8U_Os9X9AfZ5XrBc.cer (raw, json)
Hash identifier: hz89JXSG8iEaLPBEofUQiyaXtW5kp6j4QgNIbN4SiFY=
Subject key identifier: 68:93:18:8E:BF:CE:20:E5:BC:53:F3:AC:F5:7F:40:7D:9E:57:AC:17
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7942A0FD6FE297DBA3075DA527495D6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:30:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 29236
IP: 194.55.159.0/24
IP: 2001:67c:2d28::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:2a:0f:d6:fe:29:7d:ba:30:75:da:52:74:95:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6893188ebfce20e5bc53f3acf57f407d9e57ac17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:4f:b7:d5:d6:3a:6e:14:45:93:4e:b7:36:e1:
11:9f:88:5c:a6:30:95:30:15:6f:96:cc:c0:ef:cd:
79:97:71:bb:ea:fd:0f:3a:5c:a2:af:a0:68:89:0c:
d3:ed:a8:56:e3:eb:29:05:b5:a0:ef:99:66:7e:7f:
35:7a:2d:f9:bb:2a:23:b0:27:3a:28:58:94:ea:fd:
35:77:1e:b4:cd:42:4e:5a:8b:7a:36:0c:de:89:d3:
2b:2f:9e:fe:0f:ce:e5:99:48:a3:8d:1c:b6:ad:27:
d7:53:2f:df:e1:d4:0b:2b:cc:0b:5d:cd:80:db:d3:
a2:96:e5:c3:40:09:1d:c2:64:eb:bb:aa:eb:26:f4:
bd:a6:83:4f:2a:2e:0c:76:0b:7a:79:36:a9:1c:5b:
2d:22:f3:10:c3:7a:af:81:d6:c3:d8:20:9b:0e:a8:
f1:d4:48:8f:a5:cd:6c:19:af:ea:db:79:72:9f:77:
67:1c:c6:78:d1:ff:77:5c:9c:17:5a:af:4c:b8:c8:
64:c3:49:83:b6:67:35:4d:9c:d1:f4:96:15:3c:fb:
de:10:ac:b1:2f:7c:f9:f2:2f:6e:43:d4:f3:64:49:
a3:ae:05:39:6a:db:70:f2:cb:36:91:f2:e9:f2:4a:
e4:9f:b6:86:4d:9d:3a:3c:60:8a:59:2e:ae:8f:82:
64:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:93:18:8E:BF:CE:20:E5:BC:53:F3:AC:F5:7F:40:7D:9E:57:AC:17
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.55.159.0/24
IPv6:
2001:67c:2d28::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29236
Signature Algorithm: sha256WithRSAEncryption
8c:75:55:50:45:81:91:59:4f:d0:a3:8f:ea:e8:5a:1d:18:fb:
4f:56:8f:9c:ed:0e:07:30:2e:bb:03:4e:ea:39:9f:15:49:0d:
e5:8a:c7:2b:fb:51:7d:a6:ef:be:72:70:18:eb:26:e3:73:d7:
af:58:aa:b5:94:54:57:e6:9f:4e:b1:49:01:39:09:9b:40:3c:
2b:63:60:0b:bd:a1:99:36:9f:c5:dd:18:fa:87:7d:52:73:88:
02:e9:72:b7:89:5c:4d:3a:a9:c3:e5:6b:60:40:4e:ee:b7:71:
e3:96:f6:2f:ce:b0:86:8f:d2:ca:c5:ed:a4:e3:52:5f:18:d4:
bd:60:bb:37:0c:70:97:c2:0e:0d:23:fe:54:d1:c2:e9:6d:0c:
a9:ee:37:53:ed:7f:35:99:15:98:dc:ef:ca:2d:0c:e7:38:ea:
e8:7c:23:a6:95:1e:4b:f2:91:76:fe:84:38:41:0b:ec:ac:5c:
00:a6:b3:d2:55:69:a6:66:4a:fe:46:3b:44:cc:3b:29:cd:e1:
36:10:33:c6:c2:ba:64:39:fd:c2:65:78:76:84:83:d9:bb:72:
b0:bc:21:f9:c5:a5:48:4a:17:da:23:00:09:7c:99:07:4a:26:
c0:eb:b5:0d:5e:c4:91:0d:2b:23:a2:8c:dc:04:7c:44:51:a6:
c7:0f:1c:2b
-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgISAYzHlCoP1v4pfbowddpSdJXWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDAzMDI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODkzMTg4ZWJmY2UyMGU1YmM1M2YzYWNmNTdmNDA3ZDllNTdhYzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9E+31dY6bhRFk063NuERn4hcpjCV
MBVvlszA7815l3G76v0POlyir6BoiQzT7ahW4+spBbWg75lmfn81ei35uyojsCc6
KFiU6v01dx60zUJOWot6NgzeidMrL57+D87lmUijjRy2rSfXUy/f4dQLK8wLXc2A
29OiluXDQAkdwmTru6rrJvS9poNPKi4Mdgt6eTapHFstIvMQw3qvgdbD2CCbDqjx
1EiPpc1sGa/q23lyn3dnHMZ40f93XJwXWq9MuMhkw0mDtmc1TZzR9JYVPPveEKyx
L3z58i9uQ9TzZEmjrgU5attw8ss2kfLp8krkn7aGTZ06PGCKWS6uj4JkawIDAQAB
o4ICsDCCAqwwHQYDVR0OBBYEFGiTGI6/ziDlvFPzrPV/QH2eV6wXMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBiL2MzMmVk
NS03YTFiLTRmMjYtYWQzZi0yZDJiNGY3MGMzYTMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGIvYzMyZWQ1
LTdhMWItNGYyNi1hZDNmLTJkMmI0ZjcwYzNhMy8xL2FKTVlqcl9PSU9XOFVfT3M5
WDlBZlo1WHJCYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF
BwEHAQH/BCEwHzAMBAIAATAGAwQAwjefMA8EAgACMAkDBwAgAQZ8LSgwGQYIKwYB
BQUHAQgBAf8ECjAIoAYwBAICcjQwDQYJKoZIhvcNAQELBQADggEBAIx1VVBFgZFZ
T9Cjj+roWh0Y+09Wj5ztDgcwLrsDTuo5nxVJDeWKxyv7UX2m775ycBjrJuNz169Y
qrWUVFfmn06xSQE5CZtAPCtjYAu9oZk2n8XdGPqHfVJziALpcreJXE06qcPla2BA
Tu63ceOW9i/OsIaP0srF7aTjUl8Y1L1guzcMcJfCDg0j/lTRwultDKnuN1PtfzWZ
FZjc78otDOc46uh8I6aVHkvykXb+hDhBC+ysXACms9JVaaZmSv5GO0TMOynN4TYQ
M8bCumQ5/cJleHaEg9m7crC8IfnFpUhKF9ojAAl8mQdKJsDrtQ1exJENKyOijNwE
fERRpscPHCs=
-----END CERTIFICATE-----
Generated at Fri May 3 10:26:12 2024 by rpki-client on console-fra.rpki-client.org