Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
File: cwLNwp_coJ6aDz99IRPahafh1lQ.cer (raw, json)
Hash identifier: 3udLOfi7spBKiMbr1R9AyvxHQ08Se07NkjXaJnWICDE=
Subject key identifier: 73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BC2EA39DA7B47BA37A1F506AF1CF1B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 42075
AS: 43391
AS: 202991
AS: 206648
IP: 77.223.128.0/19
IP: 78.40.224.0/21
IP: 91.191.160.0/20
IP: 93.187.200.0/21
IP: 185.80.72.0/22
IP: 185.148.84.0/22
IP: 185.178.240.0/22
IP: 195.244.32.0/19
IP: 2a01:aac0::/32
IP: 2a0a:be80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:2e:a3:9d:a7:b4:7b:a3:7a:1f:50:6a:f1:cf:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4e:9e:73:d5:b4:07:05:4d:d1:3c:af:4d:fa:
ed:a7:e1:4f:34:fc:17:ed:b1:ad:91:5d:e0:fb:43:
b2:36:3f:f7:86:0e:2b:17:db:dd:d4:ae:4f:cb:9d:
58:5a:27:d8:d8:cc:d0:34:d1:ad:34:86:67:6a:20:
02:6d:f2:fa:9c:58:f1:7f:06:7e:9b:4f:22:f8:e6:
23:10:da:9f:fc:36:9a:e9:2b:f5:7e:01:ad:24:13:
a1:db:0b:2f:69:9c:2b:56:fc:bc:73:e3:a2:dd:53:
36:19:2a:6a:4d:e5:18:f5:40:5a:15:f4:55:05:e1:
ee:17:ac:b5:46:7c:6f:3b:f4:13:b5:9a:dc:7e:f9:
f2:03:52:81:0a:5c:f5:43:85:d3:c6:1d:a4:10:f8:
cc:a5:8d:c5:4a:e8:f1:3a:42:e6:49:c1:8d:79:b0:
be:f6:a6:7a:67:1b:e5:37:98:5b:f4:84:13:1c:ae:
1d:38:ff:f2:1d:3c:ee:70:29:e1:6f:62:6c:80:af:
ae:26:54:26:89:c8:9c:2c:28:1c:ae:37:30:5d:99:
53:07:9e:6b:00:8f:4a:79:08:b0:25:e6:68:e5:4d:
0b:48:46:e2:1f:ed:3d:31:e7:ba:b9:77:38:5f:8e:
c8:35:b8:82:f8:74:67:96:0d:2a:81:04:1c:26:69:
0a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.223.128.0/19
78.40.224.0/21
91.191.160.0/20
93.187.200.0/21
185.80.72.0/22
185.148.84.0/22
185.178.240.0/22
195.244.32.0/19
IPv6:
2a01:aac0::/32
2a0a:be80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42075
43391
202991
206648
Signature Algorithm: sha256WithRSAEncryption
8c:36:7b:bf:62:c9:a9:29:0b:d8:65:6c:9d:e6:e4:ee:0b:a8:
70:77:44:5f:f2:1f:52:4a:27:44:ee:b4:f9:dc:1d:b5:5c:4e:
2d:79:13:62:83:b1:92:bc:5e:cc:29:f2:61:fd:d3:e6:36:be:
85:7a:ba:8f:13:5d:81:77:d9:b3:47:32:f7:2b:fd:d5:bd:b7:
69:7c:3c:1d:d8:09:3f:f5:09:cf:5e:16:d5:c7:45:7f:a8:13:
f0:bf:83:b2:f4:5b:6e:e8:c3:f2:be:91:e3:48:14:f9:b8:c8:
b9:e5:a5:61:91:9f:77:6e:77:3a:0e:bd:eb:fd:5b:61:2b:71:
40:96:68:fe:56:71:40:11:c1:96:bd:48:e6:0a:77:b8:88:03:
9c:f8:fe:2d:e8:a6:5d:79:74:b8:66:f9:e5:6f:7a:e6:67:fc:
2e:9e:54:87:ea:77:a6:5d:a9:10:8a:5e:71:f6:c1:50:7d:c3:
1c:fe:dd:8d:18:0e:84:88:6b:ce:6d:e4:94:9a:c6:96:d6:92:
b3:fa:04:55:ab:f5:b5:cb:84:52:7f:3c:bb:c4:52:ee:d3:4d:
78:18:8b:d3:66:bc:26:d0:1e:4c:cb:96:3f:03:3f:c1:25:7e:
c1:a8:f9:70:65:dd:18:de:42:43:65:57:aa:b5:b4:e8:b5:43:
2c:35:16:b3
-----BEGIN CERTIFICATE-----
MIIF4zCCBMugAwIBAgISAYzJvC6jnae0e6N6H1Bq8c8bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTAzMzIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzAyY2RjMjlmZGNhMDllOWEwZjNmN2QyMTEzZGE4NWE3ZTFkNjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl06ec9W0BwVN0TyvTfrtp+FPNPwX
7bGtkV3g+0OyNj/3hg4rF9vd1K5Py51YWifY2MzQNNGtNIZnaiACbfL6nFjxfwZ+
m08i+OYjENqf/Daa6Sv1fgGtJBOh2wsvaZwrVvy8c+Oi3VM2GSpqTeUY9UBaFfRV
BeHuF6y1RnxvO/QTtZrcfvnyA1KBClz1Q4XTxh2kEPjMpY3FSujxOkLmScGNebC+
9qZ6ZxvlN5hb9IQTHK4dOP/yHTzucCnhb2JsgK+uJlQmicicLCgcrjcwXZlTB55r
AI9KeQiwJeZo5U0LSEbiH+09Mee6uXc4X47INbiC+HRnlg0qgQQcJmkKPQIDAQAB
o4IC7zCCAuswHQYDVR0OBBYEFHMCzcKf3KCemg8/fSET2oWn4dZUMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk4Lzc3MjE3
ZC04MTRiLTQ4NmEtOGVmMi1mZTAzMzNlZDAwNWYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvNzcyMTdk
LTgxNGItNDg2YS04ZWYyLWZlMDMzM2VkMDA1Zi8xL2N3TE53cF9jb0o2YUR6OTlJ
UlBhaGFmaDFsUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF8GCCsGAQUF
BwEHAQH/BFAwTjA2BAIAATAwAwQFTd+AAwQDTijgAwQEW7+gAwQDXbvIAwQCuVBI
AwQCuZRUAwQCubLwAwQFw/QgMBQEAgACMA4DBQAqAarAAwUDKgq+gDApBggrBgEF
BQcBCAEB/wQaMBigFjAUAgMApFsCAwCpfwIDAxjvAgMDJzgwDQYJKoZIhvcNAQEL
BQADggEBAIw2e79iyakpC9hlbJ3m5O4LqHB3RF/yH1JKJ0TutPncHbVcTi15E2KD
sZK8Xswp8mH90+Y2voV6uo8TXYF32bNHMvcr/dW9t2l8PB3YCT/1Cc9eFtXHRX+o
E/C/g7L0W27ow/K+keNIFPm4yLnlpWGRn3dudzoOvev9W2ErcUCWaP5WcUARwZa9
SOYKd7iIA5z4/i3opl15dLhm+eVveuZn/C6eVIfqd6ZdqRCKXnH2wVB9wxz+3Y0Y
DoSIa85t5JSaxpbWkrP6BFWr9bXLhFJ/PLvEUu7TTXgYi9NmvCbQHkzLlj8DP8El
fsGo+XBl3RjeQkNlV6q1tOi1Qyw1FrM=
-----END CERTIFICATE-----
Generated at Fri May 3 07:15:23 2024 by rpki-client on console-ams.rpki-client.org