Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cIf4jhi6NF9dsLBqKjTUSG5ObcU.cer
File: cIf4jhi6NF9dsLBqKjTUSG5ObcU.cer (raw, json)
Hash identifier: EI0yp3g6URiM6VmBoBk0BHPCfL+vq1BtWbl3yJJQRIs=
Subject key identifier: 70:87:F8:8E:18:BA:34:5F:5D:B0:B0:6A:2A:34:D4:48:6E:4E:6D:C5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D23B6EE2339A5E5643575316C7D46
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:41 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212202
IP: 193.163.73.0/24
IP: 2a10:9080::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:23:b6:ee:23:39:a5:e5:64:35:75:31:6c:7d:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7087f88e18ba345f5db0b06a2a34d4486e4e6dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:25:fd:f9:ab:b4:16:7d:29:91:42:1d:90:ef:
34:d2:ca:c0:5f:03:54:56:ae:f5:e6:3e:1c:1b:f7:
ed:1c:21:73:0a:41:35:f1:fb:81:45:c2:57:38:fd:
d1:9d:22:bf:03:ad:26:ce:2a:4d:f7:96:2e:c2:25:
c1:21:0d:a9:d1:57:5f:c6:d0:96:ef:41:37:ed:c8:
c9:b6:b5:a3:0d:98:c2:ad:c1:71:57:6e:13:dc:89:
08:62:36:86:df:fe:af:62:f8:0b:99:69:1b:39:3c:
94:8d:51:cc:5f:23:bf:85:59:fe:48:88:92:ad:4e:
c4:21:ee:1c:30:76:f6:4e:bd:fe:bb:76:a2:34:0e:
3e:24:c9:c9:7f:85:db:5a:ea:d3:ce:82:db:39:9a:
75:81:56:b2:43:7b:f2:ac:a3:9d:3a:1b:10:21:66:
39:73:58:47:f5:58:18:cf:30:b9:95:6a:40:1f:a4:
e8:20:41:d3:b2:01:71:7f:62:bd:fd:8f:cc:91:ab:
0a:c7:c1:20:88:5b:ef:a4:39:34:1f:c1:41:d6:0f:
70:9d:79:18:3a:7c:a5:10:b2:74:f2:05:68:05:c4:
97:28:6d:ec:0c:fc:31:89:17:97:c4:2d:16:f2:20:
de:8f:2c:f1:db:e4:47:21:66:d0:a4:d6:db:c1:d3:
63:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:87:F8:8E:18:BA:34:5F:5D:B0:B0:6A:2A:34:D4:48:6E:4E:6D:C5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.73.0/24
IPv6:
2a10:9080::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212202
Signature Algorithm: sha256WithRSAEncryption
4d:30:bd:ab:02:eb:7e:2b:59:3d:0e:eb:ee:97:ff:cc:6f:9c:
ad:62:5d:36:a0:7a:14:fd:be:03:fa:33:a2:fd:f9:a8:de:f0:
9b:7d:b7:ac:1f:9a:51:bd:e3:0f:99:57:1a:fb:99:47:76:3d:
a7:f4:16:0f:4d:f2:1a:1d:0c:13:51:c4:b5:d7:65:78:1f:7a:
ba:7c:99:ae:7c:05:2a:80:cb:a3:f5:c2:2a:48:c7:f6:b4:95:
d1:36:ba:fe:06:43:48:be:3d:8c:82:8a:67:14:30:8a:1b:d6:
93:71:cb:4f:86:d8:2d:62:4c:9c:c6:7b:15:fd:30:1e:33:76:
95:06:e5:e1:d8:64:61:8b:33:20:8b:d7:29:25:12:de:6e:e7:
ac:9e:eb:28:6f:22:ca:21:1b:2a:eb:81:3f:47:c6:0d:e3:38:
41:fd:13:60:1e:dd:3a:29:89:da:f5:84:2e:97:fa:3f:46:1b:
53:d5:0b:63:18:5c:0a:4a:f5:3e:68:de:16:dd:83:78:87:9e:
f4:de:c8:9e:0d:e2:36:ea:af:7b:92:02:4f:9b:ef:72:40:87:
00:b7:cf:83:10:44:64:3c:ad:d7:bd:90:b6:9a:8e:6f:b1:86:
01:58:53:6f:c0:cf:84:8b:87:4d:3b:91:80:72:9d:25:cc:15:
d4:ba:dd:fc
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzCbSO27iM5peVkNXUxbH1GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDAyOTQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDg3Zjg4ZTE4YmEzNDVmNWRiMGIwNmEyYTM0ZDQ0ODZlNGU2ZGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1iX9+au0Fn0pkUIdkO800srAXwNU
Vq715j4cG/ftHCFzCkE18fuBRcJXOP3RnSK/A60mzipN95YuwiXBIQ2p0VdfxtCW
70E37cjJtrWjDZjCrcFxV24T3IkIYjaG3/6vYvgLmWkbOTyUjVHMXyO/hVn+SIiS
rU7EIe4cMHb2Tr3+u3aiNA4+JMnJf4XbWurTzoLbOZp1gVayQ3vyrKOdOhsQIWY5
c1hH9VgYzzC5lWpAH6ToIEHTsgFxf2K9/Y/MkasKx8EgiFvvpDk0H8FB1g9wnXkY
OnylELJ08gVoBcSXKG3sDPwxiReXxC0W8iDejyzx2+RHIWbQpNbbwdNj/QIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFHCH+I4YujRfXbCwaio01EhuTm3FMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RiLzk5MWM1
Yy03ODNmLTQxMDYtOTY2Mi02NWY4NzMyMTYxYTYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIvOTkxYzVj
LTc4M2YtNDEwNi05NjYyLTY1Zjg3MzIxNjFhNi8xL2NJZjRqaGk2TkY5ZHNMQnFL
alRVU0c1T2JjVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAwaNJMA0EAgACMAcDBQMqEJCAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM86jANBgkqhkiG9w0BAQsFAAOCAQEATTC9qwLrfitZ
PQ7r7pf/zG+crWJdNqB6FP2+A/ozov35qN7wm323rB+aUb3jD5lXGvuZR3Y9p/QW
D03yGh0ME1HEtddleB96unyZrnwFKoDLo/XCKkjH9rSV0Ta6/gZDSL49jIKKZxQw
ihvWk3HLT4bYLWJMnMZ7Ff0wHjN2lQbl4dhkYYszIIvXKSUS3m7nrJ7rKG8iyiEb
KuuBP0fGDeM4Qf0TYB7dOimJ2vWELpf6P0YbU9ULYxhcCkr1PmjeFt2DeIee9N7I
ng3iNuqve5ICT5vvckCHALfPgxBEZDyt172QtpqOb7GGAVhTb8DPhIuHTTuRgHKd
JcwV1Lrd/A==
-----END CERTIFICATE-----
Generated at Fri May 3 11:46:24 2024 by rpki-client on console-ams.rpki-client.org