Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer
File: cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer (raw, json)
Hash identifier: VVjjNQzIsOwxfFbzu2NLBW/PkButZbRONpuCdUYkktc=
Subject key identifier: 72:F4:75:39:F1:9F:0F:5A:13:B0:B6:9B:C7:96:27:8F:0B:F4:AE:A4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56DFC85A1FC7C302C5F226E73E7C285
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 59438
IP: 5.145.152.0/21
IP: 2a01:83c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:fc:85:a1:fc:7c:30:2c:5f:22:6e:73:e7:c2:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=72f47539f19f0f5a13b0b69bc796278f0bf4aea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2d:15:60:eb:9a:0c:23:20:8b:18:01:31:85:
3f:82:49:7a:bc:ed:b2:32:8e:67:99:83:c9:b6:77:
f2:ec:28:49:e9:67:cc:d5:7e:d0:dd:3a:86:52:48:
00:24:4e:1d:01:e7:3b:55:bc:5f:66:9b:c6:a2:c9:
69:05:c9:df:dd:0c:d8:df:5d:1e:3f:34:bc:4b:f7:
f2:59:fc:9b:27:82:d5:7c:cb:4a:ff:55:75:f0:4b:
5c:9f:32:06:86:86:a6:fb:8e:f1:56:4c:9c:b1:b9:
5e:85:e8:3d:9e:ab:ae:1c:71:1f:c9:7d:97:1d:bb:
ea:38:ae:9f:3d:16:34:2e:a4:43:e2:fe:6a:a0:7a:
d9:9d:77:d8:22:36:23:76:0f:9f:04:8e:fc:b0:06:
5e:1b:08:e9:3c:ce:b2:21:0a:c5:c1:ed:c5:4a:94:
cf:51:9f:02:0f:24:f6:72:18:22:5a:1a:17:37:8d:
46:36:75:bb:02:0b:14:e8:1f:2d:79:d0:d8:1f:d4:
8e:90:d8:81:fd:b1:2a:d0:c7:83:b5:56:49:10:98:
5f:75:fb:d6:09:0b:82:c2:b4:c7:98:08:bc:29:2c:
0f:89:3a:3e:99:22:08:c2:b3:c1:72:61:74:e9:59:
06:c6:46:fc:0f:5e:ee:b4:c1:20:6e:9f:ef:cf:3a:
3c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F4:75:39:F1:9F:0F:5A:13:B0:B6:9B:C7:96:27:8F:0B:F4:AE:A4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.145.152.0/21
IPv6:
2a01:83c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59438
Signature Algorithm: sha256WithRSAEncryption
ae:36:c6:a9:89:ca:94:3c:f7:6e:48:cf:b6:98:cb:bd:77:dc:
4c:7a:50:7a:72:3c:b5:ed:3d:bc:8e:04:fc:90:9c:9a:a4:6e:
79:4c:e8:36:ad:75:d8:f9:5c:f6:34:b4:3f:8e:39:39:4d:30:
d6:38:41:6f:fc:ca:eb:a1:a6:9d:ce:d4:b9:88:6c:a3:31:7c:
e9:d5:a9:5b:64:f2:9f:f5:33:70:a7:61:0c:cf:6e:7c:ba:0f:
28:20:df:e3:f3:de:5b:37:08:63:c5:fc:8e:4b:5d:92:c0:7d:
80:09:9f:9e:df:54:01:e6:5b:58:3f:15:0e:f7:08:a1:55:61:
8e:79:92:80:9a:ea:dc:11:ef:76:79:77:6b:6e:2e:e8:96:94:
22:6c:70:2c:25:ca:38:5f:14:a8:94:10:5d:14:f4:d7:17:ba:
8f:83:9d:4b:1e:d1:d5:5c:5b:a7:46:f0:6f:ca:e4:20:e0:5d:
12:37:18:97:c9:85:24:a9:7a:e6:cc:d2:6d:50:bd:10:eb:5e:
04:8f:9f:f3:cd:5c:05:e8:be:8d:2b:d0:32:36:76:2b:36:19:
b3:53:21:74:e7:1f:48:1a:b5:31:9d:b3:f9:56:4a:d9:32:b9:
52:98:58:22:92:aa:0e:56:59:05:db:60:63:ff:07:a3:51:33:
88:5d:38:d6
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzFbfyFofx8MCxfIm5z58KFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTQyOTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MmY0NzUzOWYxOWYwZjVhMTNiMGI2OWJjNzk2Mjc4ZjBiZjRhZWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwi0VYOuaDCMgixgBMYU/gkl6vO2y
Mo5nmYPJtnfy7ChJ6WfM1X7Q3TqGUkgAJE4dAec7VbxfZpvGoslpBcnf3QzY310e
PzS8S/fyWfybJ4LVfMtK/1V18EtcnzIGhoam+47xVkycsbleheg9nquuHHEfyX2X
HbvqOK6fPRY0LqRD4v5qoHrZnXfYIjYjdg+fBI78sAZeGwjpPM6yIQrFwe3FSpTP
UZ8CDyT2chgiWhoXN41GNnW7AgsU6B8tedDYH9SOkNiB/bEq0MeDtVZJEJhfdfvW
CQuCwrTHmAi8KSwPiTo+mSIIwrPBcmF06VkGxkb8D17utMEgbp/vzzo88wIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFHL0dTnxnw9aE7C2m8eWJ48L9K6kMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyLzU3M2Q5
ZC0zMmFkLTQ2ZmYtYWUyMy0yZWE2ZWMyODVhMTUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTIvNTczZDlk
LTMyYWQtNDZmZi1hZTIzLTJlYTZlYzI4NWExNS8xL2N2UjFPZkdmRDFvVHNMYWJ4
NVluand2MHJxUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQDBZGYMA0EAgACMAcDBQAqAYPAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDoLjANBgkqhkiG9w0BAQsFAAOCAQEArjbGqYnKlDz3
bkjPtpjLvXfcTHpQenI8te09vI4E/JCcmqRueUzoNq112Plc9jS0P445OU0w1jhB
b/zK66Gmnc7UuYhsozF86dWpW2Tyn/UzcKdhDM9ufLoPKCDf4/PeWzcIY8X8jktd
ksB9gAmfnt9UAeZbWD8VDvcIoVVhjnmSgJrq3BHvdnl3a24u6JaUImxwLCXKOF8U
qJQQXRT01xe6j4OdSx7R1Vxbp0bwb8rkIOBdEjcYl8mFJKl65szSbVC9EOteBI+f
881cBei+jSvQMjZ2KzYZs1MhdOcfSBq1MZ2z+VZK2TK5UphYIpKqDlZZBdtgY/8H
o1EziF041g==
-----END CERTIFICATE-----
Generated at Fri May 3 07:15:22 2024 by rpki-client on console-ams.rpki-client.org