Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer
File: cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer (raw, json)
Hash identifier: PE+skP/NW1wTWTYh2bCV8l+DVE/L2+/MhS3RtsVmcno=
Subject key identifier: 72:38:FB:FE:A5:76:84:79:C8:63:00:90:6E:74:EB:25:4D:CB:5C:69
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC348FBEF210D1DB94621347E9DD39590
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:49 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210333
IP: 185.202.96.0/22
IP: 213.109.144.0/24
IP: 2a11:6a40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:fb:ef:21:0d:1d:b9:46:21:34:7e:9d:d3:95:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7238fbfea5768479c86300906e74eb254dcb5c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8d:50:3b:dd:8b:9c:ba:a8:6e:34:48:78:38:
60:ae:ab:49:d7:53:40:8d:e0:82:3e:2d:cc:34:f6:
e8:ac:52:ad:ef:15:11:84:90:c2:c1:53:1d:f3:5f:
d6:bb:6f:22:ac:67:ba:d4:22:58:e5:ff:02:67:35:
37:1c:32:0a:0b:c2:6a:c3:b2:96:60:d9:2b:d4:8e:
14:6b:0d:b3:0c:d5:05:6e:84:01:0b:9f:53:5b:36:
c1:5f:1c:fd:29:d4:e8:64:81:c8:9c:2a:8b:6a:56:
86:62:36:fa:45:22:f3:5c:62:bd:c5:83:3f:f0:e8:
2e:b7:94:4e:3d:52:97:77:6c:c5:34:48:5d:af:f7:
11:38:aa:e3:de:cd:0d:8b:e0:82:11:1f:ea:de:34:
eb:3c:49:ff:58:e0:b3:2d:4f:00:43:23:ff:61:7f:
a6:28:72:32:a9:5c:0a:26:3b:c6:a4:78:06:3c:19:
3a:aa:b5:72:6d:9c:f0:07:47:84:e5:32:a5:df:c7:
3b:42:95:5b:a3:53:46:e4:8d:99:ba:f0:ef:65:68:
c5:23:de:1b:65:e6:ff:ed:e7:ce:79:2a:2f:0a:00:
11:f3:09:d9:c8:7c:39:3c:78:0b:71:cf:fa:4b:cc:
3d:e8:1c:00:02:3b:db:2e:d0:93:b6:29:57:02:83:
ea:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:38:FB:FE:A5:76:84:79:C8:63:00:90:6E:74:EB:25:4D:CB:5C:69
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.96.0/22
213.109.144.0/24
IPv6:
2a11:6a40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210333
Signature Algorithm: sha256WithRSAEncryption
1d:55:01:f0:9b:4b:b9:81:35:e6:fe:97:c1:d5:60:7c:d6:86:
f7:fb:69:0e:5a:3a:7f:c7:c5:1e:66:d5:a7:77:a6:a1:59:49:
bc:ea:4f:9f:e5:ad:90:70:f3:5d:29:54:e1:9e:18:0c:25:2e:
57:26:85:34:7f:ff:41:0a:c5:56:5a:7f:bb:47:24:71:33:4a:
93:05:76:97:cd:ec:23:71:87:a3:ec:26:55:03:bc:61:86:cd:
1c:56:01:c2:0c:b8:8a:fd:95:11:78:01:8c:fb:80:77:a5:13:
d0:8a:91:1a:5a:80:43:8b:78:80:22:12:c8:d7:46:22:7a:95:
76:2f:e7:4b:39:6e:81:3b:83:16:d5:e2:32:e3:d2:e4:b4:b4:
c4:ba:29:7b:1e:f9:c3:0b:01:c7:b8:3c:94:b1:c6:ba:89:8d:
9b:19:f6:61:4d:d5:cd:37:84:74:c4:b3:25:ab:78:f8:91:75:
2b:7d:ea:2e:cb:48:d1:d2:8d:80:ff:b7:99:84:86:bf:ed:f2:
4c:94:c8:2e:23:11:7d:a9:41:92:3f:2d:43:a1:c8:6e:b2:2c:
19:25:d9:cf:84:ed:98:b1:f2:ca:03:ef:90:f2:d4:ef:5c:ff:
ad:f4:75:98:ef:df:9d:05:a8:81:06:52:8e:9f:0b:62:6e:70:
27:88:b0:dc
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAYzDSPvvIQ0duUYhNH6d05WQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDQyOTQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjM4ZmJmZWE1NzY4NDc5Yzg2MzAwOTA2ZTc0ZWIyNTRkY2I1YzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Y1QO92LnLqobjRIeDhgrqtJ11NA
jeCCPi3MNPborFKt7xURhJDCwVMd81/Wu28irGe61CJY5f8CZzU3HDIKC8Jqw7KW
YNkr1I4Uaw2zDNUFboQBC59TWzbBXxz9KdToZIHInCqLalaGYjb6RSLzXGK9xYM/
8Ogut5ROPVKXd2zFNEhdr/cROKrj3s0Ni+CCER/q3jTrPEn/WOCzLU8AQyP/YX+m
KHIyqVwKJjvGpHgGPBk6qrVybZzwB0eE5TKl38c7QpVbo1NG5I2ZuvDvZWjFI94b
Zeb/7efOeSovCgAR8wnZyHw5PHgLcc/6S8w96BwAAjvbLtCTtilXAoPqOQIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFHI4+/6ldoR5yGMAkG506yVNy1xpMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VhL2ZiMjJh
Yi1iNTQ2LTQwNzEtYmViMS1iZTEwZThiNGEwMGUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvZmIyMmFi
LWI1NDYtNDA3MS1iZWIxLWJlMTBlOGI0YTAwZS8xL2NqajdfcVYyaEhuSVl3Q1Fi
blRySlUzTFhHay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQCucpgAwQA1W2QMA0EAgACMAcDBQMqEWpAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwM1nTANBgkqhkiG9w0BAQsFAAOCAQEAHVUB
8JtLuYE15v6XwdVgfNaG9/tpDlo6f8fFHmbVp3emoVlJvOpPn+WtkHDzXSlU4Z4Y
DCUuVyaFNH//QQrFVlp/u0ckcTNKkwV2l83sI3GHo+wmVQO8YYbNHFYBwgy4iv2V
EXgBjPuAd6UT0IqRGlqAQ4t4gCISyNdGInqVdi/nSzlugTuDFtXiMuPS5LS0xLop
ex75wwsBx7g8lLHGuomNmxn2YU3VzTeEdMSzJat4+JF1K33qLstI0dKNgP+3mYSG
v+3yTJTILiMRfalBkj8tQ6HIbrIsGSXZz4TtmLHyygPvkPLU71z/rfR1mO/fnQWo
gQZSjp8LYm5wJ4iw3A==
-----END CERTIFICATE-----
Generated at Fri May 3 03:21:00 2024 by rpki-client on console-fra.rpki-client.org