Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aWJitj5jRkqk8QRmKPpCXbruPOs.cer
File: aWJitj5jRkqk8QRmKPpCXbruPOs.cer (raw, json)
Hash identifier: FXYl9/SzU9MWnCfe/1dHJZNjCmbkHNyrTsgKtGA4GS0=
Subject key identifier: 69:62:62:B6:3E:63:46:4A:A4:F1:04:66:28:FA:42:5D:BA:EE:3C:EB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DE43D4CBBDD52DE65537C6D3743B87
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/43/2b285d-d6da-4bbb-a93a-b78760334ebd/1/aWJitj5jRkqk8QRmKPpCXbruPOs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/43/2b285d-d6da-4bbb-a93a-b78760334ebd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:30:58 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.158.140.0/22
IP: 2a0f:6980::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:43:d4:cb:bd:d5:2d:e6:55:37:c6:d3:74:3b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:30:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=696262b63e63464aa4f1046628fa425dbaee3ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fb:1a:cd:e3:60:80:13:18:cc:88:79:12:74:
16:5e:79:1f:aa:c6:36:3d:9a:5d:b9:3d:ed:4e:4d:
80:30:ea:22:d9:c5:a8:08:ec:4f:a6:1d:4d:49:11:
97:7d:20:ee:aa:82:d6:0f:33:e7:4e:c8:bc:f3:19:
3d:6e:20:ca:43:41:0b:58:60:5d:fb:e0:98:ea:4e:
41:23:b9:b5:26:9c:09:50:39:ff:45:3c:2c:dc:54:
1e:c4:e4:d0:ad:2a:5b:38:db:b2:a5:db:62:dd:00:
1e:cc:11:cc:bb:3d:d4:50:6b:06:90:ad:70:96:e0:
b5:9f:10:6d:1a:66:6e:07:0f:50:d8:e0:07:48:e1:
a7:d2:4c:76:ac:6d:c9:dd:25:54:8b:80:62:d6:a2:
91:1b:4f:a9:ba:76:46:1c:21:0b:aa:15:1a:31:b8:
a7:a3:ef:c8:f4:4e:a3:b2:eb:81:a3:dd:8f:58:9a:
e6:82:ea:56:e1:9a:df:55:ac:1a:8b:e5:0d:49:ac:
50:06:c0:a8:42:5a:45:3c:52:ac:a4:51:d5:29:20:
0f:e0:06:7e:bc:70:b6:7e:c6:8a:55:26:4e:13:5a:
47:bb:f8:e0:14:2c:2d:49:87:30:73:9e:0a:86:69:
ea:cd:1b:8f:59:26:99:b0:02:1d:da:97:e7:c7:d7:
9f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:62:62:B6:3E:63:46:4A:A4:F1:04:66:28:FA:42:5D:BA:EE:3C:EB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2b285d-d6da-4bbb-a93a-b78760334ebd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2b285d-d6da-4bbb-a93a-b78760334ebd/1/aWJitj5jRkqk8QRmKPpCXbruPOs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.140.0/22
IPv6:
2a0f:6980::/29
Signature Algorithm: sha256WithRSAEncryption
59:11:c6:04:85:bc:0d:96:10:c8:ed:76:ef:a5:5f:bc:76:6e:
1d:b1:05:fa:ce:40:d6:c1:9b:e7:c5:ee:01:bf:74:7e:df:58:
34:bc:57:cf:92:01:06:2d:24:fa:4c:4d:dd:f7:07:79:6b:19:
5b:57:f3:bb:fc:1c:c3:36:04:60:a3:ca:86:e8:ca:09:a5:f8:
da:95:48:cf:fd:d0:8c:d6:a6:b0:55:77:3d:1e:64:ab:32:6f:
31:26:c8:9a:23:c3:d0:e7:cf:e3:a2:8e:0a:0e:2d:d8:ec:21:
65:1f:a9:2c:61:53:fd:4f:70:3d:06:5b:5a:0b:69:24:72:cb:
39:c0:9d:37:fb:b1:2a:ba:08:d6:1b:32:0e:3b:9b:8b:5a:2b:
49:1e:e2:15:c8:0c:0a:69:dd:0e:e2:a3:f7:78:54:c9:52:c5:
b8:97:ba:37:d9:48:24:8b:d2:74:2f:53:6f:cb:3a:79:69:b2:
ce:82:d5:f3:fb:6d:ff:58:d2:15:d3:82:13:a2:30:a7:e3:1a:
83:a8:2b:a6:fb:72:56:83:2b:77:f7:ea:d7:a3:d9:91:df:59:
fa:96:c8:2d:cf:72:3f:4c:a3:c1:d0:4d:16:28:b6:49:36:de:
8d:c0:46:a9:f1:b0:6c:a2:e0:96:5b:0f:06:36:08:38:a8:43:
8f:f0:63:4e
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzI3kPUy73VLeZVN8bTdDuHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDYzMDU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTYyNjJiNjNlNjM0NjRhYTRmMTA0NjYyOGZhNDI1ZGJhZWUzY2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPsazeNggBMYzIh5EnQWXnkfqsY2
PZpduT3tTk2AMOoi2cWoCOxPph1NSRGXfSDuqoLWDzPnTsi88xk9biDKQ0ELWGBd
++CY6k5BI7m1JpwJUDn/RTws3FQexOTQrSpbONuypdti3QAezBHMuz3UUGsGkK1w
luC1nxBtGmZuBw9Q2OAHSOGn0kx2rG3J3SVUi4Bi1qKRG0+punZGHCELqhUaMbin
o+/I9E6jsuuBo92PWJrmgupW4ZrfVawai+UNSaxQBsCoQlpFPFKspFHVKSAP4AZ+
vHC2fsaKVSZOE1pHu/jgFCwtSYcwc54KhmnqzRuPWSaZsAId2pfnx9efPQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFGliYrY+Y0ZKpPEEZij6Ql267jzrMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQzLzJiMjg1
ZC1kNmRhLTRiYmItYTkzYS1iNzg3NjAzMzRlYmQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDMvMmIyODVk
LWQ2ZGEtNGJiYi1hOTNhLWI3ODc2MDMzNGViZC8xL2FXSml0ajVqUmtxazhRUm1L
UHBDWGJydVBPcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCLZ6MMA0EAgACMAcDBQMqD2mAMA0GCSqGSIb3
DQEBCwUAA4IBAQBZEcYEhbwNlhDI7XbvpV+8dm4dsQX6zkDWwZvnxe4Bv3R+31g0
vFfPkgEGLST6TE3d9wd5axlbV/O7/BzDNgRgo8qG6MoJpfjalUjP/dCM1qawVXc9
HmSrMm8xJsiaI8PQ58/joo4KDi3Y7CFlH6ksYVP9T3A9BltaC2kkcss5wJ03+7Eq
ugjWGzIOO5uLWitJHuIVyAwKad0O4qP3eFTJUsW4l7o32Ugki9J0L1Nvyzp5abLO
gtXz+23/WNIV04ITojCn4xqDqCum+3JWgyt39+rXo9mR31n6lsgtz3I/TKPB0E0W
KLZJNt6NwEap8bBsouCWWw8GNgg4qEOP8GNO
-----END CERTIFICATE-----
Generated at Fri May 3 01:52:15 2024 by rpki-client on console-ams.rpki-client.org