Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
File: agFtrScwR7GIhmkUhd7dlxccTWg.cer (raw, json)
Hash identifier: EkhTdoCXlAMKPSp5eXD6fixF5fy2xWR44rvuJYojWvc=
Subject key identifier: 6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DE44EB7A29AABFD0043859F4E12763
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:30:59 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.1.164.0 -- 194.1.166.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:44:eb:7a:29:aa:bf:d0:04:38:59:f4:e1:27:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:30:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a016dad273047b18886691485dedd97171c4d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c8:7c:5f:a6:cb:5d:09:32:ab:19:cd:0e:a4:
7d:d2:2f:03:0a:37:45:64:58:ac:ba:1d:f9:da:7f:
92:fa:c8:30:2a:55:85:9c:64:8b:56:ff:59:41:8b:
4a:00:05:d9:ee:d0:22:5e:3e:49:35:7b:ec:6e:6b:
90:44:4c:f0:6f:c3:7c:14:ed:c9:f8:f1:a0:81:7d:
31:bc:31:5f:3c:ec:2a:34:ae:69:c5:b5:d0:ac:b2:
73:e8:c8:05:be:0b:17:f0:8c:14:fd:84:42:d6:ff:
e3:cb:8e:df:2d:8c:ae:73:96:7f:8d:93:90:c2:13:
6e:9f:67:30:f7:d1:e5:37:a6:81:b5:a2:6c:0a:59:
cc:00:e8:8d:67:a4:ae:c0:47:9e:bd:53:ef:51:ed:
f8:c1:6b:eb:c0:eb:71:ef:c5:4d:c4:37:03:e0:88:
5d:c8:67:66:67:88:c3:27:e8:d5:1c:e5:ba:48:29:
5d:a4:4b:d9:78:b2:14:72:5c:9a:60:f8:86:b8:03:
e7:fa:da:9c:4e:40:d6:16:33:b7:2c:81:7d:06:6c:
b7:6a:10:40:ed:f9:fa:fc:0e:21:c2:4c:12:fe:51:
5f:78:b9:80:ed:d1:f2:c9:4e:f3:15:09:4a:85:f6:
6e:71:36:05:fb:6a:49:84:24:aa:39:86:63:47:59:
4b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.164.0-194.1.166.255
Signature Algorithm: sha256WithRSAEncryption
8a:d4:d8:ff:4d:34:24:03:4b:32:25:16:4d:f4:b9:ef:d5:5a:
e1:c3:80:1e:04:83:4f:22:10:f4:e7:17:ec:29:f7:d3:13:18:
6a:65:b4:d8:db:c7:83:ad:4b:3c:50:cb:c4:7a:cd:2a:3a:b0:
34:48:ce:30:90:fc:d9:15:26:4b:46:4c:86:01:49:4b:ab:7e:
7a:f3:17:e3:c6:60:81:cc:51:f3:2d:75:50:54:c6:fc:fc:cb:
1b:a8:6e:eb:82:d2:a4:d0:12:6b:f6:80:a7:69:bd:a1:15:50:
f8:f8:50:7b:f1:98:03:41:6d:79:fc:4e:73:22:b1:3d:3c:e1:
7d:14:95:4b:65:24:85:81:4a:8e:fc:97:c0:be:3c:4d:60:a0:
06:57:3c:26:9a:84:11:5b:24:41:47:0b:c7:a9:c3:c4:5b:0c:
f1:31:ba:1d:9f:6f:89:4b:15:85:46:a3:09:7f:7c:99:56:dd:
6f:aa:b7:2d:ec:99:78:84:b1:82:34:f1:22:80:18:d1:89:16:
67:2f:3a:8b:cd:aa:09:87:f1:07:f9:d6:73:70:40:2b:72:cb:
ee:c7:ec:c8:59:64:9d:82:dd:5a:ac:22:df:33:50:50:a4:ff:
0e:c6:24:8e:62:94:d5:d9:dc:0e:ec:89:48:80:a4:db:b8:9d:
55:bc:30:bd
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgISAYzI3kTreimqv9AEOFn04SdjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDYzMDU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTAxNmRhZDI3MzA0N2IxODg4NjY5MTQ4NWRlZGQ5NzE3MWM0ZDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sh8X6bLXQkyqxnNDqR90i8DCjdF
ZFisuh352n+S+sgwKlWFnGSLVv9ZQYtKAAXZ7tAiXj5JNXvsbmuQREzwb8N8FO3J
+PGggX0xvDFfPOwqNK5pxbXQrLJz6MgFvgsX8IwU/YRC1v/jy47fLYyuc5Z/jZOQ
whNun2cw99HlN6aBtaJsClnMAOiNZ6SuwEeevVPvUe34wWvrwOtx78VNxDcD4Ihd
yGdmZ4jDJ+jVHOW6SCldpEvZeLIUclyaYPiGuAPn+tqcTkDWFjO3LIF9Bmy3ahBA
7fn6/A4hwkwS/lFfeLmA7dHyyU7zFQlKhfZucTYF+2pJhCSqOYZjR1lLtQIDAQAB
o4ICjDCCAogwHQYDVR0OBBYEFGoBba0nMEexiIZpFIXe3ZcXHE1oMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IwLzQ1Yzlh
ZC1jNGE3LTQ2NTItYWFkMy1jOTUyODA0OTMyYzIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAvNDVjOWFk
LWM0YTctNDY1Mi1hYWQzLWM5NTI4MDQ5MzJjMi8xL2FnRnRyU2N3UjdHSWhta1Vo
ZDdkbHhjY1RXZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCcGCCsGAQUF
BwEHAQH/BBgwFjAUBAIAATAOMAwDBALCAaQDBADCAaYwDQYJKoZIhvcNAQELBQAD
ggEBAIrU2P9NNCQDSzIlFk30ue/VWuHDgB4Eg08iEPTnF+wp99MTGGpltNjbx4Ot
SzxQy8R6zSo6sDRIzjCQ/NkVJktGTIYBSUurfnrzF+PGYIHMUfMtdVBUxvz8yxuo
buuC0qTQEmv2gKdpvaEVUPj4UHvxmANBbXn8TnMisT084X0UlUtlJIWBSo78l8C+
PE1goAZXPCaahBFbJEFHC8epw8RbDPExuh2fb4lLFYVGowl/fJlW3W+qty3smXiE
sYI08SKAGNGJFmcvOovNqgmH8Qf51nNwQCtyy+7H7MhZZJ2C3VqsIt8zUFCk/w7G
JI5ilNXZ3A7siUiApNu4nVW8ML0=
-----END CERTIFICATE-----
Generated at Fri May 3 09:15:34 2024 by rpki-client on console-ams.rpki-client.org