Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer
File: d9LZKEIxBOXDSA4htKPtFJiyon4.cer (raw, json)
Hash identifier: rAm8Nr1+zaUWoWZV0ntMqqJGa0g6sKE55QbRtjKbf+4=
Subject key identifier: 77:D2:D9:28:42:31:04:E5:C3:48:0E:21:B4:A3:ED:14:98:B2:A2:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D793C5B4C4CE1D289A0E755730ABC9C98
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 05 Feb 2024 12:26:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 62392
IP: 185.175.216.0/22
IP: 2001:67c:1808::/47
IP: 2001:67c:1810::/48
IP: 2a13:8300::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:79:3c:5b:4c:4c:e1:d2:89:a0:e7:55:73:0a:bc:9c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 5 12:26:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77d2d928423104e5c3480e21b4a3ed1498b2a27e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7c:19:20:e8:58:21:d0:7f:51:ee:88:b4:46:
45:d2:e6:ff:d7:28:92:ca:31:3d:94:97:17:30:b8:
b6:b6:c5:49:9b:0a:15:e9:9f:ed:3f:07:38:da:1a:
cc:e1:13:4d:5b:68:08:c0:3f:39:c4:a6:0d:ee:15:
34:df:29:d8:e5:bc:d5:24:a3:aa:b8:ca:d1:6c:04:
6b:a2:c6:80:1f:94:5a:6c:ed:0b:55:45:24:bd:e2:
48:54:f9:8a:d0:ea:b8:39:f8:82:ed:45:6a:56:62:
7d:5f:a9:1d:f8:9a:89:97:e9:ba:a8:b7:08:f2:87:
3c:e9:0c:df:e8:fa:c7:e5:44:50:3a:9b:b5:78:f7:
8d:af:74:56:67:0d:06:4c:cd:27:a7:33:a7:05:21:
f4:cf:60:5e:05:6d:b1:8c:99:0a:b2:2d:31:76:b6:
f1:af:64:21:65:e2:f3:d1:1a:8a:c8:bc:1e:b2:53:
17:5d:58:14:9a:18:15:5a:91:a0:d4:66:30:fe:d2:
97:b6:7b:91:2d:5c:9a:de:25:95:0a:af:3b:60:e9:
ff:5e:e2:14:a3:44:61:22:44:82:83:72:73:4f:6a:
22:91:b8:c6:eb:d5:db:0a:b6:4c:1b:63:71:02:d4:
08:1c:d2:2c:3c:2a:ad:ca:42:63:89:f9:46:fa:d2:
79:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D2:D9:28:42:31:04:E5:C3:48:0E:21:B4:A3:ED:14:98:B2:A2:7E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.216.0/22
IPv6:
2001:67c:1808::/47
2001:67c:1810::/48
2a13:8300::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62392
Signature Algorithm: sha256WithRSAEncryption
44:71:7a:93:18:4c:b4:a1:b6:63:33:60:bf:bb:a7:68:99:21:
94:14:2b:ab:05:dc:39:78:8d:34:94:84:a0:e0:89:57:66:ff:
c6:33:a0:2f:a8:39:cd:50:28:59:e6:a0:bb:b7:01:be:b6:48:
86:30:f5:64:35:f0:55:70:3b:47:6e:55:aa:ac:62:b8:0b:1f:
d5:ca:b7:71:6d:01:5b:f1:dd:26:c7:ea:bb:67:a6:95:e3:85:
e6:9b:05:e4:60:85:20:0a:0f:ea:7d:66:14:58:07:1c:e2:9b:
b8:69:b1:7e:62:13:e8:04:e6:ab:f7:4c:19:14:42:8c:8e:a9:
78:c1:b7:55:8e:05:71:6f:3c:42:bd:81:a5:f6:7a:9f:32:f6:
27:7f:82:ce:d1:6b:9e:d6:e4:ee:d4:97:5d:38:e9:9b:d5:5a:
80:b8:d2:ae:6b:fb:dd:0d:95:52:00:00:41:95:d8:89:9e:9e:
a1:cd:45:4a:9f:ee:32:ad:2d:ce:05:5d:b4:01:dd:a2:7d:fe:
9b:1e:36:94:e6:c9:a3:cd:1a:dd:5c:00:80:80:67:e9:e6:37:
26:f2:d3:be:d5:c6:b1:a8:52:8c:4f:ee:f7:dc:e0:4a:e7:70:
17:67:48:ec:30:ca:ac:0b:38:4d:a3:37:cf:09:57:6f:be:c1:
24:2b:21:91
-----BEGIN CERTIFICATE-----
MIIFtTCCBJ2gAwIBAgISAY15PFtMTOHSiaDnVXMKvJyYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMjA1MTIyNjU1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3N2QyZDkyODQyMzEwNGU1YzM0ODBlMjFiNGEzZWQxNDk4YjJhMjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnwZIOhYIdB/Ue6ItEZF0ub/1yiS
yjE9lJcXMLi2tsVJmwoV6Z/tPwc42hrM4RNNW2gIwD85xKYN7hU03ynY5bzVJKOq
uMrRbARrosaAH5RabO0LVUUkveJIVPmK0Oq4OfiC7UVqVmJ9X6kd+JqJl+m6qLcI
8oc86Qzf6PrH5URQOpu1ePeNr3RWZw0GTM0npzOnBSH0z2BeBW2xjJkKsi0xdrbx
r2QhZeLz0RqKyLweslMXXVgUmhgVWpGg1GYw/tKXtnuRLVya3iWVCq87YOn/XuIU
o0RhIkSCg3JzT2oikbjG69XbCrZMG2NxAtQIHNIsPCqtykJjiflG+tJ5wwIDAQAB
o4ICwTCCAr0wHQYDVR0OBBYEFHfS2ShCMQTlw0gOIbSj7RSYsqJ+MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM1LzJiOWUy
OS1kNTY4LTRkNTMtYjEyOC00ODg3OTIzODhlNWIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzUvMmI5ZTI5
LWQ1NjgtNGQ1My1iMTI4LTQ4ODc5MjM4OGU1Yi8xL2Q5TFpLRUl4Qk9YRFNBNGh0
S1B0RkppeW9uNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF
BwEHAQH/BDEwLzAMBAIAATAGAwQCua/YMB8EAgACMBkDBwEgAQZ8GAgDBwAgAQZ8
GBADBQMqE4MAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDzuDANBgkqhkiG9w0B
AQsFAAOCAQEARHF6kxhMtKG2YzNgv7unaJkhlBQrqwXcOXiNNJSEoOCJV2b/xjOg
L6g5zVAoWeagu7cBvrZIhjD1ZDXwVXA7R25VqqxiuAsf1cq3cW0BW/HdJsfqu2em
leOF5psF5GCFIAoP6n1mFFgHHOKbuGmxfmIT6ATmq/dMGRRCjI6peMG3VY4FcW88
Qr2BpfZ6nzL2J3+CztFrntbk7tSXXTjpm9VagLjSrmv73Q2VUgAAQZXYiZ6eoc1F
Sp/uMq0tzgVdtAHdon3+mx42lObJo80a3VwAgIBn6eY3JvLTvtXGsahSjE/u99zg
SudwF2dI7DDKrAs4TaM3zwlXb77BJCshkQ==
-----END CERTIFICATE-----
Generated at Fri May 3 07:59:10 2024 by rpki-client on console-fra.rpki-client.org