Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
File: dE4TPKDK2fH9FhWAWQspbbIjCM4.cer (raw, json)
Hash identifier: /vuyRTbbkWukS8ZC/S3/Eys48E8HXBnTbPnX2yWf0a0=
Subject key identifier: 74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019029FF19B950C2DA0EB3AE4CA746C4C8ED
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 18 Jun 2024 06:18:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 204858
IP: 176.119.198.0/24
IP: 185.227.184.0/22
IP: 194.13.110.0/24
IP: 194.13.134.0/24
IP: 194.15.125.0/24
IP: 194.15.136.0/24
IP: 2a0f:9f80::/29
IP: 2a10:2280::/29
IP: 2a13:c600::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:29:ff:19:b9:50:c2:da:0e:b3:ae:4c:a7:46:c4:c8:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 18 06:18:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=744e133ca0cad9f1fd161580590b296db22308ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:da:ec:5b:02:38:8d:c3:45:50:53:87:7f:32:
76:01:5c:e7:c6:33:f8:c4:97:e4:e1:b9:b3:cd:5a:
8b:1b:7f:b8:66:2f:94:7d:35:a2:be:1e:72:1f:f9:
7a:92:b2:f4:ed:29:2e:3a:9a:9f:fd:41:f5:2a:14:
7c:11:03:01:83:9d:5e:82:d8:a3:52:73:f7:a7:4a:
2c:46:6b:0e:5e:78:6b:21:2c:67:bb:bc:e2:bb:17:
4d:df:bf:2f:1d:91:54:38:19:f0:13:35:00:6a:a9:
1a:aa:e3:03:5e:68:f7:9a:72:f7:bb:c3:b7:cd:2e:
40:a4:3b:1e:3c:c1:65:a3:14:0c:28:de:35:32:b0:
c4:29:37:46:bb:d2:6e:23:51:b0:30:10:c8:65:cd:
56:3a:a6:5c:b4:d8:d7:3f:f3:39:00:3c:5f:d6:77:
81:d1:41:9b:62:35:c0:84:1a:85:b0:34:56:4c:41:
0e:dd:d3:0a:fb:53:2a:cb:12:5a:c6:5d:b4:85:2f:
fe:7f:31:83:f4:80:d6:21:2b:b4:d4:ca:3e:4f:98:
f6:9c:f8:77:3f:34:a3:e5:e7:36:4f:ad:34:65:e4:
f6:15:a1:95:9a:d3:bb:c2:f5:82:da:bf:03:f4:0d:
5f:0a:e3:86:79:e0:f3:26:64:36:af:23:40:c7:43:
de:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.119.198.0/24
185.227.184.0/22
194.13.110.0/24
194.13.134.0/24
194.15.125.0/24
194.15.136.0/24
IPv6:
2a0f:9f80::/29
2a10:2280::/29
2a13:c600::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204858
Signature Algorithm: sha256WithRSAEncryption
15:98:c0:30:35:8a:11:4d:d4:1d:39:61:67:28:62:e1:48:a9:
d9:32:7b:6f:f8:64:c4:d4:de:a6:32:dc:03:41:30:90:3b:51:
3f:ca:c0:f8:90:f1:d8:1a:e1:0b:cf:87:67:49:e0:86:9e:b2:
53:50:86:39:e5:05:47:1e:e3:64:c9:a3:91:e7:7c:35:37:23:
76:0c:ad:95:9f:2b:fa:c8:aa:86:1f:ee:b7:5a:7e:04:b3:f0:
11:7d:81:6d:51:b0:28:e6:95:50:00:e8:c7:86:1a:8f:e8:81:
fa:8d:8d:27:d4:03:fc:3f:fb:d5:4a:51:0f:4d:84:a4:cc:48:
b0:cb:15:e4:34:71:14:8c:f7:ec:dc:4f:e5:9e:31:ce:16:75:
72:9a:a6:6e:57:89:3e:a0:a2:8c:69:e0:62:4e:34:c6:e8:2f:
d7:8b:23:6e:ab:01:e6:21:b2:ae:89:91:2f:ee:c3:38:38:eb:
f7:7c:c8:bc:c0:fc:1b:64:0c:04:64:10:ba:a9:df:18:e1:a0:
84:1b:fd:92:24:6f:16:d6:a2:22:9f:31:75:df:6c:3d:1b:29:
2b:e7:d1:29:c9:28:b7:b1:14:4f:f2:17:2f:2f:e4:b2:9b:86:
c1:e5:b0:e3:c9:74:ff:96:be:07:a0:e1:35:55:0a:50:a5:8e:
60:0d:8e:0b
-----BEGIN CERTIFICATE-----
MIIFzzCCBLegAwIBAgISAZAp/xm5UMLaDrOuTKdGxMjtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNjE4MDYxODIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDRlMTMzY2EwY2FkOWYxZmQxNjE1ODA1OTBiMjk2ZGIyMjMwOGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntrsWwI4jcNFUFOHfzJ2AVznxjP4
xJfk4bmzzVqLG3+4Zi+UfTWivh5yH/l6krL07SkuOpqf/UH1KhR8EQMBg51egtij
UnP3p0osRmsOXnhrISxnu7ziuxdN378vHZFUOBnwEzUAaqkaquMDXmj3mnL3u8O3
zS5ApDsePMFloxQMKN41MrDEKTdGu9JuI1GwMBDIZc1WOqZctNjXP/M5ADxf1neB
0UGbYjXAhBqFsDRWTEEO3dMK+1MqyxJaxl20hS/+fzGD9IDWISu01Mo+T5j2nPh3
PzSj5ec2T600ZeT2FaGVmtO7wvWC2r8D9A1fCuOGeeDzJmQ2ryNAx0PevwIDAQAB
o4IC2zCCAtcwHQYDVR0OBBYEFHROEzygytnx/RYVgFkLKW2yIwjOMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZmL2I0MTE5
MC1kYTI4LTQzMDEtOTBjNS05NWE0ZWY0M2MyMTUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmYvYjQxMTkw
LWRhMjgtNDMwMS05MGM1LTk1YTRlZjQzYzIxNS8xL2RFNFRQS0RLMmZIOUZoV0FX
UXNwYmJJakNNNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFoGCCsGAQUF
BwEHAQH/BEswSTAqBAIAATAkAwQAsHfGAwQCueO4AwQAwg1uAwQAwg2GAwQAwg99
AwQAwg+IMBsEAgACMBUDBQMqD5+AAwUDKhAigAMFAyoTxgAwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDAyA6MA0GCSqGSIb3DQEBCwUAA4IBAQAVmMAwNYoRTdQdOWFn
KGLhSKnZMntv+GTE1N6mMtwDQTCQO1E/ysD4kPHYGuELz4dnSeCGnrJTUIY55QVH
HuNkyaOR53w1NyN2DK2Vnyv6yKqGH+63Wn4Es/ARfYFtUbAo5pVQAOjHhhqP6IH6
jY0n1AP8P/vVSlEPTYSkzEiwyxXkNHEUjPfs3E/lnjHOFnVymqZuV4k+oKKMaeBi
TjTG6C/XiyNuqwHmIbKuiZEv7sM4OOv3fMi8wPwbZAwEZBC6qd8Y4aCEG/2SJG8W
1qIinzF132w9Gykr59EpySi3sRRP8hcvL+Sym4bB5bDjyXT/lr4HoOE1VQpQpY5g
DY4L
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:58:09 2024 by rpki-client on console-ams.rpki-client.org