Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6W3Uxx6reukfRwv65uee6qxu7c.cer
File: d6W3Uxx6reukfRwv65uee6qxu7c.cer (raw, json)
Hash identifier: AjMUJ8q7gre6LPAlfv/D69jMIbQVrTvobEkjOD96BoE=
Subject key identifier: 77:A5:B7:53:1C:7A:AD:EB:A4:7D:1C:2F:EB:9B:9E:7B:AA:B1:BB:B7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BC50D373858BFA53D1CC89439DBEB1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 43304
IP: 185.188.32.0/22
IP: 2a0b:b580::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:50:d3:73:85:8b:fa:53:d1:cc:89:43:9d:be:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77a5b7531c7aadeba47d1c2feb9b9e7baab1bbb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cf:6c:52:e0:77:2d:ca:36:69:70:0e:2d:60:
db:01:f1:66:72:89:76:31:07:96:f2:8b:4e:fd:7a:
ae:f5:81:7d:d7:2d:ea:8f:10:40:45:ab:59:16:5f:
22:72:9f:26:1c:0a:d0:88:49:49:79:53:fe:3f:42:
e6:82:9a:8a:82:e5:41:b2:bf:2b:c5:3b:55:b6:d8:
62:6b:7e:4b:de:35:b9:08:7f:88:bc:9e:30:41:17:
2e:c5:a0:2c:03:95:8e:8c:26:b2:01:77:a9:22:cc:
ba:7c:51:b6:86:67:ae:41:f8:2f:d6:2d:7d:80:3f:
c8:14:9c:2d:89:10:9f:d0:8a:d2:69:d0:37:c9:e1:
28:aa:51:f3:0c:08:b6:7b:c7:44:f1:72:7d:b5:f3:
a3:d7:8d:65:58:53:6f:58:51:36:aa:d9:52:70:b7:
bb:6a:b4:29:4f:b9:51:8b:a8:f4:60:b5:d3:f7:4f:
bf:86:64:de:a8:9a:62:99:b3:6a:7d:83:fa:fb:aa:
a6:70:77:e7:79:38:50:75:2e:4d:da:db:67:26:ae:
e7:a8:ef:3a:b0:b3:30:b3:5b:b5:64:85:4b:2e:cd:
7d:bc:81:8e:9f:68:ef:ce:35:79:50:64:a4:4e:9f:
60:91:50:df:27:66:b9:2d:93:a4:77:50:07:52:59:
1e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A5:B7:53:1C:7A:AD:EB:A4:7D:1C:2F:EB:9B:9E:7B:AA:B1:BB:B7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.32.0/22
IPv6:
2a0b:b580::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43304
Signature Algorithm: sha256WithRSAEncryption
39:d2:d6:f0:32:03:c8:03:ee:e0:79:3c:12:f6:ff:12:8d:d5:
1f:bc:1f:e4:3c:71:46:22:d3:b8:02:9b:ff:70:ef:03:31:07:
13:3e:1d:7b:bb:d1:d4:b6:f4:6f:1d:af:4b:46:7a:76:d8:46:
46:bc:a4:2a:db:a7:22:25:79:89:70:5d:34:ad:5a:59:ec:d4:
3f:9f:78:40:0d:8d:e9:ae:f9:bb:a4:a9:24:97:b2:f0:df:07:
e9:f1:a5:f9:71:97:13:be:e5:f2:4a:ac:af:f1:54:82:30:f5:
b3:fe:f2:f8:65:3c:19:a6:3b:2c:77:1e:22:72:dc:ab:16:84:
93:50:9f:8e:87:a4:ef:fc:95:a6:e9:17:44:91:ef:6d:10:9f:
41:39:e9:ab:f0:92:0b:8d:f2:bf:92:81:ee:90:0f:12:85:c2:
a2:00:cb:5c:9d:39:78:0f:14:5f:0f:86:d1:c7:a1:fc:54:09:
16:c9:df:48:7f:a8:91:7c:f9:40:23:14:28:41:6e:8f:7e:35:
79:fa:00:ce:70:a5:94:d8:88:c1:b8:81:5d:cb:0f:60:ec:d1:
c8:c0:0a:d6:d2:74:47:a1:93:05:57:de:8d:a9:c2:d8:9f:5f:
da:d0:93:35:ff:84:24:35:dc:39:49:74:b4:89:3e:9f:42:16:
3e:f4:89:8f
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzJvFDTc4WL+lPRzIlDnb6xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTAzMzMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3N2E1Yjc1MzFjN2FhZGViYTQ3ZDFjMmZlYjliOWU3YmFhYjFiYmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1c9sUuB3Lco2aXAOLWDbAfFmcol2
MQeW8otO/Xqu9YF91y3qjxBARatZFl8icp8mHArQiElJeVP+P0LmgpqKguVBsr8r
xTtVtthia35L3jW5CH+IvJ4wQRcuxaAsA5WOjCayAXepIsy6fFG2hmeuQfgv1i19
gD/IFJwtiRCf0IrSadA3yeEoqlHzDAi2e8dE8XJ9tfOj141lWFNvWFE2qtlScLe7
arQpT7lRi6j0YLXT90+/hmTeqJpimbNqfYP6+6qmcHfneThQdS5N2ttnJq7nqO86
sLMws1u1ZIVLLs19vIGOn2jvzjV5UGSkTp9gkVDfJ2a5LZOkd1AHUlkemwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFHelt1Mceq3rpH0cL+ubnnuqsbu3MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YyLzNkZDM3
ZC02YjBiLTRmMWYtYjBmYi05MzIzOGZjZDE2MjIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIvM2RkMzdk
LTZiMGItNGYxZi1iMGZiLTkzMjM4ZmNkMTYyMi8xL2Q2VzNVeHg2cmV1a2ZSd3Y2
NXVlZTZxeHU3Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCubwgMA0EAgACMAcDBQMqC7WAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwCpKDANBgkqhkiG9w0BAQsFAAOCAQEAOdLW8DIDyAPu
4Hk8Evb/Eo3VH7wf5DxxRiLTuAKb/3DvAzEHEz4de7vR1Lb0bx2vS0Z6dthGRryk
KtunIiV5iXBdNK1aWezUP594QA2N6a75u6SpJJey8N8H6fGl+XGXE77l8kqsr/FU
gjD1s/7y+GU8GaY7LHceInLcqxaEk1Cfjoek7/yVpukXRJHvbRCfQTnpq/CSC43y
v5KB7pAPEoXCogDLXJ05eA8UXw+G0ceh/FQJFsnfSH+okXz5QCMUKEFuj341efoA
znCllNiIwbiBXcsPYOzRyMAK1tJ0R6GTBVfejanC2J9f2tCTNf+EJDXcOUl0tIk+
n0IWPvSJjw==
-----END CERTIFICATE-----
Generated at Fri May 3 03:22:55 2024 by rpki-client on console-fra.rpki-client.org