Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/apc35u85FOD8zAaQI76XGYuRN5E.cer
File: apc35u85FOD8zAaQI76XGYuRN5E.cer (raw, json)
Hash identifier: 4lUSQyivIbtswlZPb4Cu6eMD8hV+Sk5hB59ucQ4JvTE=
Subject key identifier: 6A:97:37:E6:EF:39:14:E0:FC:CC:06:90:23:BE:97:19:8B:91:37:91
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BBA0344EA57A0CFFC8A4E6D5E3FBF3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:32:45 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 60898
IP: 123.100.234.0/24
IP: 185.23.232.0/22
IP: 2a00:6ea0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:a0:34:4e:a5:7a:0c:ff:c8:a4:e6:d5:e3:fb:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:32:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a9737e6ef3914e0fccc069023be97198b913791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c7:d3:f8:ef:ab:e5:9b:61:ad:02:c9:d2:39:
9a:2c:73:a6:7d:83:85:12:1e:c9:a2:67:46:77:24:
ba:08:2c:d5:ad:9c:e1:82:c3:9c:f7:b7:ed:51:8b:
b9:19:60:b0:e8:bd:7f:4d:95:88:f0:d3:14:9a:0a:
42:5d:12:fd:47:41:f6:e7:30:a6:fd:be:6f:e9:d8:
d2:3e:4b:4a:b5:e6:90:63:37:e5:e3:58:f0:ab:8a:
3f:c9:35:8b:b7:ec:3a:ba:2f:1f:59:1d:99:25:db:
8b:80:0c:2c:aa:46:b7:c2:42:d6:24:f1:63:9c:62:
af:22:a2:d4:e6:7c:c1:7b:e7:94:ac:e5:de:a4:dc:
c2:b5:10:a7:32:37:38:8c:74:56:1d:bd:f8:25:f6:
0f:63:ab:c2:e3:04:fb:22:19:6c:cd:18:93:33:d2:
9d:d5:d3:5f:35:c1:3f:99:da:4e:d5:a5:74:26:61:
22:e5:bc:be:e0:2f:78:bd:6c:28:64:54:ad:2e:68:
31:18:b4:eb:16:29:87:27:63:75:12:84:2a:2f:21:
d6:8a:2f:ea:42:5c:0c:23:d7:21:85:d8:e1:a8:89:
d0:3e:a5:c7:77:5d:ea:13:37:79:db:e9:0e:d3:2b:
fb:7f:bc:42:03:07:4a:d9:42:40:bd:0e:3b:be:6c:
84:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:97:37:E6:EF:39:14:E0:FC:CC:06:90:23:BE:97:19:8B:91:37:91
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.100.234.0/24
185.23.232.0/22
IPv6:
2a00:6ea0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60898
Signature Algorithm: sha256WithRSAEncryption
4e:c4:45:f2:9b:da:bd:8d:3e:52:7e:12:cb:5b:41:2d:d9:0e:
8a:9d:69:78:46:c2:d3:ef:14:bc:fd:1b:5e:99:84:4e:63:43:
13:43:ce:82:63:e6:03:bb:65:da:3f:50:d6:38:b9:1c:b6:a3:
ab:41:28:af:b1:e5:8a:6f:27:e0:6b:af:5c:2c:73:72:49:36:
74:42:00:7c:32:7b:78:5d:28:64:ba:9d:79:0e:3e:5f:5a:9d:
03:45:a0:76:af:86:93:89:a4:d5:69:78:e9:c1:39:0f:bb:2c:
bc:b6:a2:0d:2a:a0:be:5d:3d:3c:6c:03:da:49:d9:67:ba:ba:
52:5d:40:c7:87:a5:b2:47:0f:b4:14:93:78:37:aa:be:e8:71:
43:f2:7c:f3:97:99:79:23:a5:de:b2:71:a5:55:4c:4a:bf:3a:
40:fe:d5:b6:33:04:7e:2a:d0:c1:71:46:50:27:52:4a:90:fb:
eb:04:21:0a:85:f1:05:b4:6b:0c:2d:f5:d4:84:99:f8:ec:09:
07:56:20:f0:57:c8:e3:aa:92:c6:21:4d:69:6f:5d:53:19:2a:
5a:49:a5:a2:ff:e5:ac:13:70:a0:32:a7:aa:bc:b5:d9:f3:30:
aa:7d:5c:da:df:44:1a:a0:20:a8:36:37:de:bf:94:c8:85:7e:
4b:5e:9d:aa
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAYzJu6A0TqV6DP/IpObV4/vzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTAzMjQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTk3MzdlNmVmMzkxNGUwZmNjYzA2OTAyM2JlOTcxOThiOTEzNzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MfT+O+r5ZthrQLJ0jmaLHOmfYOF
Eh7JomdGdyS6CCzVrZzhgsOc97ftUYu5GWCw6L1/TZWI8NMUmgpCXRL9R0H25zCm
/b5v6djSPktKteaQYzfl41jwq4o/yTWLt+w6ui8fWR2ZJduLgAwsqka3wkLWJPFj
nGKvIqLU5nzBe+eUrOXepNzCtRCnMjc4jHRWHb34JfYPY6vC4wT7IhlszRiTM9Kd
1dNfNcE/mdpO1aV0JmEi5by+4C94vWwoZFStLmgxGLTrFimHJ2N1EoQqLyHWii/q
QlwMI9chhdjhqInQPqXHd13qEzd52+kO0yv7f7xCAwdK2UJAvQ47vmyE7QIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFGqXN+bvORTg/MwGkCO+lxmLkTeRMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNkLzg0Mzhm
NS02YzljLTQ3MDMtOWZlMi0wMTVmZGU0NWQwZWEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2QvODQzOGY1
LTZjOWMtNDcwMy05ZmUyLTAxNWZkZTQ1ZDBlYS8xL2FwYzM1dTg1Rk9EOHpBYVFJ
NzZYR1l1Uk41RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQAe2TqAwQCuRfoMA0EAgACMAcDBQAqAG6gMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDt4jANBgkqhkiG9w0BAQsFAAOCAQEATsRF
8pvavY0+Un4Sy1tBLdkOip1peEbC0+8UvP0bXpmETmNDE0POgmPmA7tl2j9Q1ji5
HLajq0Eor7Hlim8n4GuvXCxzckk2dEIAfDJ7eF0oZLqdeQ4+X1qdA0Wgdq+Gk4mk
1Wl46cE5D7ssvLaiDSqgvl09PGwD2knZZ7q6Ul1Ax4elskcPtBSTeDeqvuhxQ/J8
85eZeSOl3rJxpVVMSr86QP7VtjMEfirQwXFGUCdSSpD76wQhCoXxBbRrDC311ISZ
+OwJB1Yg8FfI46qSxiFNaW9dUxkqWkmlov/lrBNwoDKnqry12fMwqn1c2t9EGqAg
qDY33r+UyIV+S16dqg==
-----END CERTIFICATE-----
Generated at Fri May 3 07:47:30 2024 by rpki-client on console-fra.rpki-client.org