Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2spT5ZdrWQPnjU784-a8RkUeeo.cer
File: c2spT5ZdrWQPnjU784-a8RkUeeo.cer (raw, json)
Hash identifier: dS6fqgzT1oGyPcsU7vmUatIhiXPMyhzehnU9b/4rcyw=
Subject key identifier: 73:6B:29:4F:96:5D:AD:64:0F:9E:35:3B:F3:8F:9A:F1:19:14:79:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC492E93669D7A65F5F2314BB14C15035
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:11 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 209900
IP: 45.65.88.0/22
IP: 2a09:fe00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:e9:36:69:d7:a6:5f:5f:23:14:bb:14:c1:50:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=736b294f965dad640f9e353bf38f9af1191479ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ef:40:c1:2d:f8:28:3e:77:93:d7:67:7a:52:
b6:10:92:e8:4f:9e:39:9f:e5:d3:8c:d6:bc:c3:bf:
9b:e6:a4:40:52:a3:0b:95:b0:35:0e:b8:9a:62:49:
8a:e3:0d:9d:15:a3:53:13:56:6a:15:d6:29:e7:28:
e0:51:e5:bf:45:a7:d6:82:40:64:38:7e:fd:e1:43:
a7:d3:27:65:8a:af:58:5b:84:1d:d2:b0:e5:a7:95:
af:99:48:a6:23:ff:e6:25:10:8e:59:17:83:3b:b8:
8e:f1:a1:5d:8a:9e:32:10:db:21:4e:6e:b5:4b:f3:
39:0e:6c:73:97:9d:5d:7e:98:30:5b:92:55:52:c2:
5f:2c:62:0d:4b:44:3e:04:9d:6f:a1:42:6d:b6:48:
92:fe:34:eb:83:c8:86:75:79:02:fc:6c:f9:60:9a:
0e:e5:1e:7e:57:da:00:8b:95:0a:99:51:98:cc:cb:
f2:cf:fe:a6:92:b6:0d:4f:a8:e8:87:0e:cb:5a:b1:
0c:22:1d:88:ef:0d:2c:93:e1:c1:b4:d6:26:8a:5f:
13:9c:3d:86:1c:ef:80:78:fa:c1:df:72:ce:80:5c:
1b:7e:cd:e3:df:08:f5:30:b9:b7:53:1f:9f:24:a0:
2c:6b:aa:76:4f:66:ac:1c:a0:85:fd:89:63:bb:c7:
01:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:6B:29:4F:96:5D:AD:64:0F:9E:35:3B:F3:8F:9A:F1:19:14:79:EA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.88.0/22
IPv6:
2a09:fe00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209900
Signature Algorithm: sha256WithRSAEncryption
3f:7f:ce:93:da:d4:9e:4c:a5:fb:4e:ab:f1:8e:97:d2:78:48:
33:b6:20:75:53:d5:fa:da:9a:45:e6:8a:33:5c:87:a1:11:bc:
4d:bc:cd:c6:9a:fc:7c:36:03:5d:90:4d:d7:40:fc:7b:a4:1d:
79:b8:31:cb:21:97:7b:7c:3b:22:6f:2c:78:71:7a:fe:e6:fb:
11:be:24:3f:e7:56:c3:b7:8b:6b:e3:d7:e2:95:94:5a:dd:1c:
87:3e:e4:5a:c7:a9:d5:5d:4d:50:45:2e:d2:25:ce:5a:db:8c:
6e:4e:8c:d3:80:4f:97:49:4e:9d:e2:7a:53:70:93:49:92:08:
14:da:cc:b4:a4:d8:60:e3:d4:c0:ed:b2:46:66:5e:3d:f1:9a:
96:7b:10:7f:55:44:62:c2:7a:c0:2f:e5:f7:0a:0b:59:18:b7:
87:1d:62:95:30:d4:24:3f:bc:1c:a8:f0:65:b0:69:28:b9:8e:
1e:86:e4:34:c2:43:89:14:f4:25:3c:51:df:5c:f0:85:77:15:
33:df:04:52:df:2f:1e:d8:04:00:eb:60:83:53:fb:50:52:9b:
2b:68:24:fe:db:54:ea:7d:b8:b1:74:27:a8:5d:d9:50:0f:48:
dd:a9:1b:0c:2e:ca:f6:5d:55:03:78:d1:b4:f1:af:45:e0:c6:
3f:1e:fa:ad
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzEkuk2ademX18jFLsUwVA1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTAzMDExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzZiMjk0Zjk2NWRhZDY0MGY5ZTM1M2JmMzhmOWFmMTE5MTQ3OWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzO9AwS34KD53k9dnelK2EJLoT545
n+XTjNa8w7+b5qRAUqMLlbA1DriaYkmK4w2dFaNTE1ZqFdYp5yjgUeW/RafWgkBk
OH794UOn0ydliq9YW4Qd0rDlp5WvmUimI//mJRCOWReDO7iO8aFdip4yENshTm61
S/M5Dmxzl51dfpgwW5JVUsJfLGINS0Q+BJ1voUJttkiS/jTrg8iGdXkC/Gz5YJoO
5R5+V9oAi5UKmVGYzMvyz/6mkrYNT6johw7LWrEMIh2I7w0sk+HBtNYmil8TnD2G
HO+AePrB33LOgFwbfs3j3wj1MLm3Ux+fJKAsa6p2T2asHKCF/Ylju8cBbwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFHNrKU+WXa1kD541O/OPmvEZFHnqMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VkL2E3MWE1
Yy0xNzQ2LTQzYzQtYTY3Zi1hOGY3NmJkMjZhMjcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWQvYTcxYTVj
LTE3NDYtNDNjNC1hNjdmLWE4Zjc2YmQyNmEyNy8xL2Myc3BUNVpkcldRUG5qVTc4
NC1hOFJrVWVlby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCLUFYMA0EAgACMAcDBQMqCf4AMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMz7DANBgkqhkiG9w0BAQsFAAOCAQEAP3/Ok9rUnkyl
+06r8Y6X0nhIM7YgdVPV+tqaReaKM1yHoRG8TbzNxpr8fDYDXZBN10D8e6Qdebgx
yyGXe3w7Im8seHF6/ub7Eb4kP+dWw7eLa+PX4pWUWt0chz7kWsep1V1NUEUu0iXO
WtuMbk6M04BPl0lOneJ6U3CTSZIIFNrMtKTYYOPUwO2yRmZePfGalnsQf1VEYsJ6
wC/l9woLWRi3hx1ilTDUJD+8HKjwZbBpKLmOHobkNMJDiRT0JTxR31zwhXcVM98E
Ut8vHtgEAOtgg1P7UFKbK2gk/ttU6n24sXQnqF3ZUA9I3akbDC7K9l1VA3jRtPGv
ReDGPx76rQ==
-----END CERTIFICATE-----
Generated at Fri May 3 03:17:16 2024 by rpki-client on console-fra.rpki-client.org