Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer
File: bSPOewwQBo-8RMAhlD4zkBPyruA.cer (raw, json)
Hash identifier: aF4ixhmtoGWdxEonx2yr2OdTPh52/lCXIPBiwriCWnA=
Subject key identifier: 6D:23:CE:7B:0C:10:06:8F:BC:44:C0:21:94:3E:33:90:13:F2:AE:E0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64ACE3A993DD1DA1B06810CC7B18980
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:30:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.11.28.0/22
IP: 2a0e:5700::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:ce:3a:99:3d:d1:da:1b:06:81:0c:c7:b1:89:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:30:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d23ce7b0c10068fbc44c021943e339013f2aee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b7:6a:5d:6f:44:a1:0c:dc:da:b4:26:d6:db:
a1:a6:07:03:05:54:eb:ee:38:a5:5e:4f:5c:34:f8:
cc:a0:37:fc:f6:95:76:ab:83:0f:bb:8c:aa:0a:cb:
c8:6c:31:8c:e6:5d:ff:b2:91:61:b2:5d:80:14:78:
00:6f:ab:f0:8f:2f:67:c6:97:71:c7:84:65:68:56:
12:e4:54:d5:00:b2:08:44:85:43:e8:0e:75:b3:b7:
1b:2f:02:d8:97:10:e3:5c:80:cc:90:6b:c1:55:38:
70:54:b9:8b:b2:20:b1:d1:11:98:b4:02:45:19:51:
98:d8:a7:3f:33:15:97:c1:79:18:09:44:9c:a5:b6:
a7:db:00:86:32:f0:ec:22:1a:b4:13:ad:d8:57:0e:
6b:58:49:e7:05:29:56:e2:fe:b2:3b:94:3e:7c:91:
5a:29:e8:d9:9a:f0:34:56:2d:0e:b8:ef:7d:24:a7:
30:93:8c:b2:e9:c8:e2:22:7e:f7:0c:ad:9c:45:de:
19:d1:43:1c:9d:c0:d6:67:90:04:c1:3f:a6:32:6e:
5f:b3:64:ed:99:ec:2f:a8:af:ed:b1:89:62:bc:52:
73:1a:e4:2d:21:b4:93:84:a6:4d:53:13:cd:74:53:
83:62:83:1d:86:f8:f9:17:63:76:1a:7c:56:00:41:
6f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:23:CE:7B:0C:10:06:8F:BC:44:C0:21:94:3E:33:90:13:F2:AE:E0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.28.0/22
IPv6:
2a0e:5700::/32
Signature Algorithm: sha256WithRSAEncryption
31:75:51:49:a6:56:21:66:94:d6:97:4b:4f:89:21:00:fe:da:
02:bb:69:13:44:06:d6:59:fd:07:d2:b1:49:70:ce:ae:3e:66:
9f:9e:11:76:ca:ca:5e:ff:6f:39:7b:c5:66:c9:6a:de:fd:f0:
b2:12:7d:96:b7:b4:35:be:09:a7:c0:14:3f:9e:0c:a5:4d:f2:
67:6a:f8:23:9e:93:35:4c:6b:e9:cb:dc:9f:6e:09:44:bc:d7:
d7:8a:8f:72:ff:ab:eb:3c:9a:a3:09:8a:75:bd:86:31:7e:37:
78:07:4a:a5:65:85:46:b3:ca:25:d9:e2:8b:49:92:32:7b:a5:
76:84:4b:4c:77:9d:21:d1:42:12:57:35:02:95:71:4c:ec:59:
4b:8c:2b:6f:27:4c:e9:45:db:8a:72:64:f1:43:fa:a1:f0:d7:
61:45:7e:92:27:08:d5:a9:27:8f:ff:fd:c5:01:a1:c9:25:cd:
f1:9a:3e:75:85:ed:da:76:70:d1:55:8d:06:a9:64:63:f9:b4:
52:4b:c9:dd:fc:b0:31:71:3b:f1:b0:28:3a:8d:54:37:31:11:
b9:76:a5:da:66:af:4a:a8:25:f3:e2:56:67:18:0b:ec:c0:90:
0d:37:04:a7:e7:d0:95:e9:97:3a:63:db:76:b3:e0:64:b9:64:
d8:a8:21:0d
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzGSs46mT3R2hsGgQzHsYmAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTgzMDQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDIzY2U3YjBjMTAwNjhmYmM0NGMwMjE5NDNlMzM5MDEzZjJhZWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybdqXW9EoQzc2rQm1tuhpgcDBVTr
7jilXk9cNPjMoDf89pV2q4MPu4yqCsvIbDGM5l3/spFhsl2AFHgAb6vwjy9nxpdx
x4RlaFYS5FTVALIIRIVD6A51s7cbLwLYlxDjXIDMkGvBVThwVLmLsiCx0RGYtAJF
GVGY2Kc/MxWXwXkYCUScpban2wCGMvDsIhq0E63YVw5rWEnnBSlW4v6yO5Q+fJFa
KejZmvA0Vi0OuO99JKcwk4yy6cjiIn73DK2cRd4Z0UMcncDWZ5AEwT+mMm5fs2Tt
mewvqK/tsYlivFJzGuQtIbSThKZNUxPNdFODYoMdhvj5F2N2GnxWAEFvEwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFG0jznsMEAaPvETAIZQ+M5AT8q7gMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUzLzY2YWYw
Ny0zMzE4LTRmNGEtODlmZi00MGM1ZWJjNmY3MzYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTMvNjZhZjA3
LTMzMTgtNGY0YS04OWZmLTQwYzVlYmM2ZjczNi8xL2JTUE9ld3dRQm8tOFJNQWhs
RDR6a0JQeXJ1QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCLQscMA0EAgACMAcDBQAqDlcAMA0GCSqGSIb3
DQEBCwUAA4IBAQAxdVFJplYhZpTWl0tPiSEA/toCu2kTRAbWWf0H0rFJcM6uPmaf
nhF2yspe/285e8VmyWre/fCyEn2Wt7Q1vgmnwBQ/ngylTfJnavgjnpM1TGvpy9yf
bglEvNfXio9y/6vrPJqjCYp1vYYxfjd4B0qlZYVGs8ol2eKLSZIye6V2hEtMd50h
0UISVzUClXFM7FlLjCtvJ0zpRduKcmTxQ/qh8NdhRX6SJwjVqSeP//3FAaHJJc3x
mj51he3adnDRVY0GqWRj+bRSS8nd/LAxcTvxsCg6jVQ3MRG5dqXaZq9KqCXz4lZn
GAvswJANNwSn59CV6Zc6Y9t2s+BkuWTYqCEN
-----END CERTIFICATE-----
Generated at Fri May 3 07:50:20 2024 by rpki-client on console-fra.rpki-client.org