Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c-vxK1fHzGubu9Fh7TG-FknErBw.cer
File: c-vxK1fHzGubu9Fh7TG-FknErBw.cer (raw, json)
Hash identifier: qupynYrGq57bAEpmZlN6Hiko96H7dNnKjL1xQiNcqaU=
Subject key identifier: 73:EB:F1:2B:57:C7:CC:6B:9B:BB:D1:61:ED:31:BE:16:49:C4:AC:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DE9E14D3F18B75B6FE527750F04CBA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/e7f307-2a48-41e3-9407-d4cf809f7ffd/1/c-vxK1fHzGubu9Fh7TG-FknErBw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/e7f307-2a48-41e3-9407-d4cf809f7ffd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:31:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.147.0.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:9e:14:d3:f1:8b:75:b6:fe:52:77:50:f0:4c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:31:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73ebf12b57c7cc6b9bbbd161ed31be1649c4ac1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d3:56:55:a6:6a:ab:bf:e7:7c:fc:24:f7:6f:
69:d9:37:ad:bc:0c:18:e3:d2:3e:53:b2:2d:b2:a3:
b4:4e:98:a6:be:9d:9e:59:37:7e:72:88:0d:82:68:
5b:d1:a9:a5:94:1d:51:5c:b0:cc:da:a4:27:95:20:
84:85:8b:2f:0e:8d:4d:5f:47:cb:76:0d:6e:ae:35:
12:a0:85:54:4f:d3:4f:b6:a1:65:33:e0:58:13:ea:
a1:1d:a1:0a:1e:d9:8f:b6:3d:6a:7d:32:c6:93:06:
5b:65:4a:62:c0:bb:34:5f:1d:12:eb:32:37:90:1d:
33:8e:09:7f:79:c7:1a:89:10:4e:fc:6a:e5:f5:a0:
eb:73:32:d3:38:8d:38:aa:9e:eb:11:a8:6c:6a:42:
4f:76:0c:78:e5:96:a7:fd:f4:e7:a7:62:00:41:3f:
12:dd:58:92:8a:de:24:8a:29:34:e6:7d:8e:cc:dc:
cc:66:7e:ad:b7:5d:4f:fc:d9:e7:d9:69:86:c5:b2:
41:0f:eb:c9:95:b8:7e:1b:e5:73:2b:04:24:a4:ba:
8a:f3:3c:a3:79:fe:41:6b:6b:8d:21:c1:38:26:81:
3f:54:bc:07:ad:f9:bd:31:f0:a5:ba:ea:cb:34:81:
fa:15:23:85:f4:6e:2e:92:c9:9c:da:1b:1b:20:e3:
ed:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:EB:F1:2B:57:C7:CC:6B:9B:BB:D1:61:ED:31:BE:16:49:C4:AC:1C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e7f307-2a48-41e3-9407-d4cf809f7ffd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e7f307-2a48-41e3-9407-d4cf809f7ffd/1/c-vxK1fHzGubu9Fh7TG-FknErBw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.0.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:5d:d5:df:38:37:77:18:ef:99:1d:2e:ec:f8:f0:9a:db:6c:
c8:0d:c7:f6:2a:cb:8d:04:aa:80:b7:ba:0d:06:96:c8:f1:e6:
73:f9:e9:6b:00:92:f6:e4:3b:aa:17:97:53:ff:02:13:d4:0d:
fd:14:61:a2:e1:76:ba:21:51:e7:a3:43:a1:5a:c8:33:a3:d1:
3b:0f:15:93:22:4b:5b:29:60:a2:d2:f0:50:3a:71:da:7d:7d:
de:d2:2d:b9:40:15:51:db:8f:48:62:b2:1c:8d:6e:9c:9e:5e:
f6:8f:aa:38:9a:29:1d:8b:3b:41:d6:13:26:03:49:ea:1b:54:
29:de:7e:7a:a7:9f:87:cb:f2:fc:f4:f4:f9:b6:88:8d:c9:dc:
66:89:1a:52:be:7b:8c:21:5a:47:40:bd:29:dc:b5:56:f2:98:
42:08:95:73:e9:d4:f2:29:6a:7e:79:3b:7e:fb:5f:6a:98:2d:
02:78:de:b1:a2:f4:2b:18:8f:23:07:07:f3:84:28:9f:ee:c5:
d0:2d:d4:0d:cc:8f:42:ac:2e:3e:e0:3e:47:28:cc:2f:fc:0d:
2a:bd:e0:34:dc:39:38:24:c9:7e:9f:71:36:ef:17:0f:66:96:
23:cb:4d:a1:cd:76:2f:56:2a:7d:02:80:95:03:9e:44:be:75:
6d:65:df:bd
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzI3p4U0/GLdbb+UndQ8Ey6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDYzMTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3M2ViZjEyYjU3YzdjYzZiOWJiYmQxNjFlZDMxYmUxNjQ5YzRhYzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtNWVaZqq7/nfPwk929p2TetvAwY
49I+U7ItsqO0Tpimvp2eWTd+cogNgmhb0amllB1RXLDM2qQnlSCEhYsvDo1NX0fL
dg1urjUSoIVUT9NPtqFlM+BYE+qhHaEKHtmPtj1qfTLGkwZbZUpiwLs0Xx0S6zI3
kB0zjgl/eccaiRBO/Grl9aDrczLTOI04qp7rEahsakJPdgx45Zan/fTnp2IAQT8S
3ViSit4kiik05n2OzNzMZn6tt11P/Nnn2WmGxbJBD+vJlbh+G+VzKwQkpLqK8zyj
ef5Ba2uNIcE4JoE/VLwHrfm9MfCluurLNIH6FSOF9G4uksmc2hsbIOPt2QIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFHPr8StXx8xrm7vRYe0xvhZJxKwcMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzliL2U3ZjMw
Ny0yYTQ4LTQxZTMtOTQwNy1kNGNmODA5ZjdmZmQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWIvZTdmMzA3
LTJhNDgtNDFlMy05NDA3LWQ0Y2Y4MDlmN2ZmZC8xL2MtdnhLMWZIekd1YnU5Rmg3
VEctRmtuRXJCdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCwpMAMA0GCSqGSIb3DQEBCwUAA4IBAQCiXdXf
ODd3GO+ZHS7s+PCa22zIDcf2KsuNBKqAt7oNBpbI8eZz+elrAJL25DuqF5dT/wIT
1A39FGGi4Xa6IVHno0OhWsgzo9E7DxWTIktbKWCi0vBQOnHafX3e0i25QBVR249I
YrIcjW6cnl72j6o4mikdiztB1hMmA0nqG1Qp3n56p5+Hy/L89PT5toiNydxmiRpS
vnuMIVpHQL0p3LVW8phCCJVz6dTyKWp+eTt++19qmC0CeN6xovQrGI8jBwfzhCif
7sXQLdQNzI9CrC4+4D5HKMwv/A0qveA03Dk4JMl+n3E27xcPZpYjy02hzXYvVip9
AoCVA55EvnVtZd+9
-----END CERTIFICATE-----
Generated at Fri May 3 03:16:34 2024 by rpki-client on console-fra.rpki-client.org