Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer
File: aYhRnekYGF-24euv0eCDXKoRMuQ.cer (raw, json)
Hash identifier: s7CdezAcHXLV5kMXP1cU6ZEFIjqPgVcSkuzWbv+XuSM=
Subject key identifier: 69:88:51:9D:E9:18:18:5F:B6:E1:EB:AF:D1:E0:83:5C:AA:11:32:E4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B70AA4824D1956E09D6E90A5AF7AAB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:30:02 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 197157
IP: 178.249.136.0/21
IP: 2a02:13d8::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:0a:a4:82:4d:19:56:e0:9d:6e:90:a5:af:7a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6988519de918185fb6e1ebafd1e0835caa1132e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f7:14:c5:5b:34:73:34:7f:08:e5:75:70:ff:
bd:19:d6:d1:c2:f4:73:a2:95:8c:98:26:34:4d:0b:
9e:84:37:4c:34:96:e2:44:70:10:13:46:db:96:18:
cc:49:a5:1e:2e:59:5f:82:45:40:4f:74:40:a7:a4:
b3:7b:14:5e:be:6f:bb:78:74:58:29:b6:ae:59:cd:
2a:4c:93:94:95:2b:2f:e8:71:dd:52:8f:9e:ee:0b:
80:05:80:b8:57:82:e9:82:91:1d:a7:9a:ae:37:46:
01:24:e1:7e:2e:a1:f9:87:c4:83:1f:96:3d:7c:6b:
4d:0c:b4:94:50:34:da:31:55:4f:a1:80:b4:fd:1d:
29:26:27:d6:fc:96:6b:d8:b7:0e:7b:1e:cd:b3:a3:
40:c5:f4:9d:e3:82:8a:2e:dc:d3:b6:89:7c:84:df:
7d:15:26:5f:40:67:0f:f0:e6:1d:a1:e2:32:50:a7:
19:a8:67:fc:ba:c4:60:ad:5c:ca:59:e0:e1:72:ed:
a1:11:e4:dc:db:12:63:c8:6b:48:f3:5e:9a:75:06:
04:e1:7b:62:34:16:01:b8:f9:dc:10:41:55:73:4f:
3e:77:04:74:64:cc:1b:08:60:46:1a:35:f0:9a:24:
a8:c2:96:97:e8:d2:7e:ee:ee:b4:83:81:13:19:ba:
52:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:88:51:9D:E9:18:18:5F:B6:E1:EB:AF:D1:E0:83:5C:AA:11:32:E4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.249.136.0/21
IPv6:
2a02:13d8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197157
Signature Algorithm: sha256WithRSAEncryption
2f:a3:1e:a5:31:77:cb:91:e4:b6:39:75:68:96:a9:c4:be:f7:
ff:56:67:c6:39:b0:49:96:fc:90:ff:30:c2:25:cf:f8:95:c8:
58:35:78:93:80:6e:57:06:b2:75:17:36:27:ba:9f:0c:b7:ee:
2f:a4:23:89:61:e3:00:5c:0f:00:c4:c3:f7:e8:d7:e2:79:cb:
54:f5:28:86:df:21:38:80:0a:e8:77:a0:48:95:2d:7a:4f:50:
9b:17:83:54:7c:12:4a:c2:cb:00:eb:d0:bd:d2:c9:b0:1b:a9:
f3:26:be:27:d2:2c:de:8c:6c:e1:29:d2:a7:91:a3:ae:31:a7:
71:67:c0:9e:93:2d:51:b9:bf:a7:72:73:de:38:b8:24:5a:a8:
4c:a5:06:2c:0a:d5:15:bd:d4:23:b3:e3:38:c7:f1:52:13:ca:
51:f4:a5:3e:c6:0a:df:ec:6f:fe:2a:26:ea:03:bc:f0:7e:3e:
dd:0c:a0:48:b4:f6:4d:93:f8:ef:ca:bf:93:82:32:28:ab:2e:
6c:2e:36:87:5a:1c:70:e2:77:54:60:7e:1e:12:62:a7:a8:1e:
29:5f:6b:49:4f:aa:39:74:4e:ff:aa:31:7c:9a:f3:47:7b:4b:
60:86:c1:12:f8:00:66:83:a4:9e:eb:30:db:4b:92:83:0b:c7:
51:16:67:04
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzDtwqkgk0ZVuCdbpClr3qrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDYzMDAyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTg4NTE5ZGU5MTgxODVmYjZlMWViYWZkMWUwODM1Y2FhMTEzMmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvcUxVs0czR/COV1cP+9GdbRwvRz
opWMmCY0TQuehDdMNJbiRHAQE0bblhjMSaUeLllfgkVAT3RAp6SzexRevm+7eHRY
KbauWc0qTJOUlSsv6HHdUo+e7guABYC4V4LpgpEdp5quN0YBJOF+LqH5h8SDH5Y9
fGtNDLSUUDTaMVVPoYC0/R0pJifW/JZr2LcOex7Ns6NAxfSd44KKLtzTtol8hN99
FSZfQGcP8OYdoeIyUKcZqGf8usRgrVzKWeDhcu2hEeTc2xJjyGtI816adQYE4Xti
NBYBuPncEEFVc08+dwR0ZMwbCGBGGjXwmiSowpaX6NJ+7u60g4ETGbpSPQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFGmIUZ3pGBhftuHrr9Hgg1yqETLkMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk5LzUxNTI0
MC1iNTk0LTQ2OWItYTk5Mi1lYzcyZDZhZGEwNGEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkvNTE1MjQw
LWI1OTQtNDY5Yi1hOTkyLWVjNzJkNmFkYTA0YS8xL2FZaFJuZWtZR0YtMjRldXYw
ZUNEWEtvUk11US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQDsvmIMA0EAgACMAcDBQAqAhPYMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMCJTANBgkqhkiG9w0BAQsFAAOCAQEAL6MepTF3y5Hk
tjl1aJapxL73/1ZnxjmwSZb8kP8wwiXP+JXIWDV4k4BuVwaydRc2J7qfDLfuL6Qj
iWHjAFwPAMTD9+jX4nnLVPUoht8hOIAK6HegSJUtek9QmxeDVHwSSsLLAOvQvdLJ
sBup8ya+J9Is3oxs4SnSp5GjrjGncWfAnpMtUbm/p3Jz3ji4JFqoTKUGLArVFb3U
I7PjOMfxUhPKUfSlPsYK3+xv/iom6gO88H4+3QygSLT2TZP478q/k4IyKKsubC42
h1occOJ3VGB+HhJip6geKV9rSU+qOXRO/6oxfJrzR3tLYIbBEvgAZoOknusw20uS
gwvHURZnBA==
-----END CERTIFICATE-----
Generated at Fri May 3 03:10:24 2024 by rpki-client on console-fra.rpki-client.org