Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/buKspS4zrI1YnzIhdZLNHmm_cEw.cer
File: buKspS4zrI1YnzIhdZLNHmm_cEw.cer (raw, json)
Hash identifier: q06vp2EdcrIXnnGO8geftu/JLy0UE08O8KCV5XwLWB0=
Subject key identifier: 6E:E2:AC:A5:2E:33:AC:8D:58:9F:32:21:75:92:CD:1E:69:BF:70:4C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7954C040D4D24F1F6692E45F5D5023C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:31:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 31590
IP: 77.247.64.0/20
IP: 185.121.60.0/22
IP: 194.150.108.0/22
IP: 194.242.40.0/24
IP: 2a02:4de0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:4c:04:0d:4d:24:f1:f6:69:2e:45:f5:d5:02:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:31:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ee2aca52e33ac8d589f32217592cd1e69bf704c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:71:23:09:77:63:ea:bf:bf:14:80:7b:28:90:
9b:9c:a7:2c:14:e9:7b:59:22:c2:e1:9c:ca:44:4c:
6c:b1:45:b8:9b:62:08:b8:8e:b3:4c:97:cd:a3:3a:
09:85:18:0c:62:8b:d0:46:22:37:45:e1:bf:34:81:
54:93:f4:d9:58:8d:41:9d:84:79:b2:be:0d:c5:bc:
e7:18:a8:1a:54:08:be:48:07:be:e7:b7:bc:d6:98:
87:6f:3f:3c:60:d3:2e:42:af:2d:03:11:01:73:48:
07:59:93:71:a2:52:72:6a:3c:93:25:e1:b9:cc:93:
49:d4:db:7f:b6:47:7b:0d:2d:9b:f7:f1:f5:a1:f3:
6a:ca:fe:88:2f:14:3e:06:e5:bb:b1:c5:71:e1:12:
ac:be:81:95:4d:10:98:17:10:49:53:45:a5:db:20:
5a:e9:a9:86:1a:0c:97:d0:4a:5c:79:ba:92:64:8e:
d3:69:e6:b1:1e:f7:ff:fd:91:fc:59:2b:7c:37:e6:
ec:20:6b:72:ca:24:b8:ed:37:8a:78:3a:22:73:cb:
30:ef:1d:61:55:87:f3:92:8e:af:84:c7:e9:83:60:
20:09:49:5f:eb:9f:65:b1:eb:f6:3a:94:57:ec:84:
5f:72:38:a3:ed:70:f6:54:79:dc:32:cb:f0:ab:cd:
1d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E2:AC:A5:2E:33:AC:8D:58:9F:32:21:75:92:CD:1E:69:BF:70:4C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.64.0/20
185.121.60.0/22
194.150.108.0/22
194.242.40.0/24
IPv6:
2a02:4de0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31590
Signature Algorithm: sha256WithRSAEncryption
aa:19:24:39:74:4e:ec:c6:72:c9:c7:63:32:ea:e6:52:c1:d5:
41:6b:11:17:25:fd:7b:ee:c7:dc:d9:b9:6a:0c:c5:64:75:c3:
43:a1:ea:d2:ce:a8:cd:2f:13:14:b4:fd:2c:f8:ec:d7:d7:b7:
55:64:c9:73:fc:15:33:3e:f5:09:c8:26:4e:94:7b:a8:66:11:
8d:d4:4b:1e:f6:17:60:25:38:9a:a0:92:82:24:88:07:02:17:
11:d9:3f:9a:dc:be:80:fd:10:28:15:3e:9f:49:09:ff:e1:59:
85:2b:3b:54:d2:e5:d6:35:7e:33:5e:53:63:f5:0d:16:4c:6e:
a7:9b:1d:f4:4f:af:71:af:c2:ac:19:e0:2a:0d:da:87:2e:f7:
8a:8a:df:9e:fd:ed:78:c9:42:36:e4:b9:7e:29:37:ba:cb:ad:
43:54:c7:5c:c4:14:ea:3a:1a:9f:dd:fc:92:eb:50:5a:55:10:
e4:1c:5e:58:0e:7c:44:b9:04:df:85:d9:2b:d8:0e:72:9a:a5:
47:ab:26:78:dd:14:e0:d5:19:77:c1:1e:56:d3:63:e4:2a:aa:
ed:86:a3:47:29:c8:0b:79:92:63:f8:c4:c1:d9:f1:0d:39:7e:
37:fb:cc:64:1a:cc:01:3b:e9:4d:87:4a:cf:36:00:e3:17:ba:
e9:f7:b8:6c
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgISAYzHlUwEDU0k8fZpLkX11QI8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDAzMTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZWUyYWNhNTJlMzNhYzhkNTg5ZjMyMjE3NTkyY2QxZTY5YmY3MDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9XEjCXdj6r+/FIB7KJCbnKcsFOl7
WSLC4ZzKRExssUW4m2IIuI6zTJfNozoJhRgMYovQRiI3ReG/NIFUk/TZWI1BnYR5
sr4NxbznGKgaVAi+SAe+57e81piHbz88YNMuQq8tAxEBc0gHWZNxolJyajyTJeG5
zJNJ1Nt/tkd7DS2b9/H1ofNqyv6ILxQ+BuW7scVx4RKsvoGVTRCYFxBJU0Wl2yBa
6amGGgyX0EpcebqSZI7TaeaxHvf//ZH8WSt8N+bsIGtyyiS47TeKeDoic8sw7x1h
VYfzko6vhMfpg2AgCUlf659lsev2OpRX7IRfcjij7XD2VHncMsvwq80dywIDAQAB
o4ICwDCCArwwHQYDVR0OBBYEFG7irKUuM6yNWJ8yIXWSzR5pv3BMMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdmL2UwMzY4
OC1iOTNkLTRhOWItOThjMS1hYTM5NjQzNzdhMDAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2YvZTAzNjg4
LWI5M2QtNGE5Yi05OGMxLWFhMzk2NDM3N2EwMC8xL2J1S3NwUzR6ckkxWW56SWhk
WkxOSG1tX2NFdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF
BwEHAQH/BDEwLzAeBAIAATAYAwQETfdAAwQCuXk8AwQCwpZsAwQAwvIoMA0EAgAC
MAcDBQAqAk3gMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAntmMA0GCSqGSIb3DQEB
CwUAA4IBAQCqGSQ5dE7sxnLJx2My6uZSwdVBaxEXJf177sfc2blqDMVkdcNDoerS
zqjNLxMUtP0s+OzX17dVZMlz/BUzPvUJyCZOlHuoZhGN1Ese9hdgJTiaoJKCJIgH
AhcR2T+a3L6A/RAoFT6fSQn/4VmFKztU0uXWNX4zXlNj9Q0WTG6nmx30T69xr8Ks
GeAqDdqHLveKit+e/e14yUI25Ll+KTe6y61DVMdcxBTqOhqf3fyS61BaVRDkHF5Y
DnxEuQTfhdkr2A5ymqVHqyZ43RTg1Rl3wR5W02PkKqrthqNHKcgLeZJj+MTB2fEN
OX43+8xkGswBO+lNh0rPNgDjF7rp97hs
-----END CERTIFICATE-----
Generated at Fri May 3 07:12:13 2024 by rpki-client on console-ams.rpki-client.org