Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
File: ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer (raw, json)
Hash identifier: KCA+cKWwljTx4DZnswIszblDUqIrmMseo9yjX7BElqE=
Subject key identifier: 6A:37:98:22:07:E6:2D:ED:06:91:DC:B1:8E:F6:EA:32:D4:13:F3:F6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2B872BF05FC723440789EBEE25BC67
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:34:59 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 89.251.128.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:87:2b:f0:5f:c7:23:44:07:89:eb:ee:25:bc:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:34:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a37982207e62ded0691dcb18ef6ea32d413f3f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8d:8b:38:e9:1f:b3:f0:93:9c:8d:06:a3:ad:
b4:4a:d6:2a:07:d8:20:4d:66:7b:2e:36:dd:9d:d4:
09:14:8c:4c:4b:52:69:49:7e:35:86:02:01:b9:d5:
c4:da:12:9f:5e:f2:e7:fd:af:88:ab:ed:b5:a5:9b:
8e:a4:c6:4a:9e:31:e7:6d:c6:04:38:4c:f6:cb:21:
51:18:1a:0f:18:8c:c3:4e:f1:43:97:96:ea:37:dc:
7f:9c:83:40:82:36:7b:c6:ca:d3:0a:54:c8:35:9e:
e6:34:32:c2:e0:93:ce:63:19:fe:59:cb:c1:e1:92:
31:ef:87:41:53:99:a9:62:3c:c3:a2:39:a6:20:a9:
12:b2:6a:d4:f2:ea:2d:50:1f:ff:95:31:4d:7b:e9:
9c:79:bb:d2:96:cc:c6:9d:6c:7b:c5:b0:61:9c:ca:
2e:91:a1:f2:59:38:61:57:c6:37:0a:04:f2:03:81:
82:cc:c8:c1:95:e4:21:a0:68:1a:db:b5:17:cd:3f:
26:ff:3b:41:f3:f7:ed:4c:70:c9:ef:81:01:e8:dd:
be:81:4e:54:b9:f9:5f:2d:8b:25:7a:9b:7c:0e:e0:
bf:51:66:4e:f2:93:90:38:40:d9:31:78:6c:e5:8b:
bc:b5:e4:5a:88:ef:97:5c:38:d6:a4:a8:a2:54:6f:
4e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:37:98:22:07:E6:2D:ED:06:91:DC:B1:8E:F6:EA:32:D4:13:F3:F6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.128.0/20
Signature Algorithm: sha256WithRSAEncryption
73:0c:45:64:3d:f0:ac:c7:2d:84:47:0c:14:22:24:7c:8e:5f:
85:a9:ef:c0:9e:da:70:f3:7c:29:cb:71:31:a1:93:2a:5b:0b:
bd:2c:e0:d5:75:65:88:d6:8d:92:a2:1b:d0:2d:83:e1:01:9d:
ee:c1:3b:40:9c:e2:24:98:b2:bd:7f:d4:2b:92:5e:5c:1d:e3:
b2:06:b5:a5:02:56:44:84:e4:60:df:ca:a8:2c:60:6f:7c:7b:
c3:b4:c2:aa:ed:44:9b:a9:c5:ec:bb:09:17:a6:47:7d:d4:61:
bd:7b:bd:4b:23:32:2a:f9:18:66:ca:db:19:e1:0c:75:52:71:
1b:b7:f9:c0:b4:8c:5c:62:bd:20:4e:a1:56:ee:5e:e4:99:81:
76:34:50:d7:36:87:3d:2e:32:62:dc:49:23:4a:97:56:8b:9a:
9b:fa:b3:38:5e:2f:48:80:d9:63:ec:90:11:9f:cc:eb:9d:ad:
40:a3:73:d9:fc:ec:c9:e4:ff:4f:03:85:73:52:9b:25:b7:8c:
21:ea:cc:9c:4c:b7:85:bf:eb:e9:1c:31:41:e6:1a:f2:ea:4c:
3a:e7:57:82:5e:7f:9c:a5:de:b1:74:f1:c4:a4:38:85:6b:ff:
a0:e3:ad:cb:88:1a:c1:c4:ef:8d:5c:24:76:17:56:7c:cb:72:
0c:f4:78:71
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzKK4cr8F/HI0QHievuJbxnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTIzNDU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTM3OTgyMjA3ZTYyZGVkMDY5MWRjYjE4ZWY2ZWEzMmQ0MTNmM2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoY2LOOkfs/CTnI0Go620StYqB9gg
TWZ7LjbdndQJFIxMS1JpSX41hgIBudXE2hKfXvLn/a+Iq+21pZuOpMZKnjHnbcYE
OEz2yyFRGBoPGIzDTvFDl5bqN9x/nINAgjZ7xsrTClTINZ7mNDLC4JPOYxn+WcvB
4ZIx74dBU5mpYjzDojmmIKkSsmrU8uotUB//lTFNe+mcebvSlszGnWx7xbBhnMou
kaHyWThhV8Y3CgTyA4GCzMjBleQhoGga27UXzT8m/ztB8/ftTHDJ74EB6N2+gU5U
uflfLYslept8DuC/UWZO8pOQOEDZMXhs5Yu8teRaiO+XXDjWpKiiVG9OPQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFGo3mCIH5i3tBpHcsY726jLUE/P2MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M1L2I4MTFk
NS1iYTM1LTQyM2QtODYyZi0yMzUzMTY1NGU1ODkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUvYjgxMWQ1
LWJhMzUtNDIzZC04NjJmLTIzNTMxNjU0ZTU4OS8xL2FqZVlJZ2ZtTGUwR2tkeXhq
dmJxTXRRVDhfWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQEWfuAMA0GCSqGSIb3DQEBCwUAA4IBAQBzDEVk
PfCsxy2ERwwUIiR8jl+Fqe/Antpw83wpy3ExoZMqWwu9LODVdWWI1o2SohvQLYPh
AZ3uwTtAnOIkmLK9f9Qrkl5cHeOyBrWlAlZEhORg38qoLGBvfHvDtMKq7USbqcXs
uwkXpkd91GG9e71LIzIq+RhmytsZ4Qx1UnEbt/nAtIxcYr0gTqFW7l7kmYF2NFDX
Noc9LjJi3EkjSpdWi5qb+rM4Xi9IgNlj7JARn8zrna1Ao3PZ/OzJ5P9PA4VzUpsl
t4wh6sycTLeFv+vpHDFB5hry6kw651eCXn+cpd6xdPHEpDiFa/+g463LiBrBxO+N
XCR2F1Z8y3IM9Hhx
-----END CERTIFICATE-----
Generated at Fri May 3 07:08:59 2024 by rpki-client on console-ams.rpki-client.org