Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dHyzZv9uI99sCX9grcf6gHVZgZE.cer
File: dHyzZv9uI99sCX9grcf6gHVZgZE.cer (raw, json)
Hash identifier: gDyutu6jqy30DJF/P97VX+fYq2K90o/xnYiAVCj3Wks=
Subject key identifier: 74:7C:B3:66:FF:6E:23:DF:6C:09:7F:60:AD:C7:FA:80:75:59:81:91
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018EBD10878E039250F92298FFD5F94D47D0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 08 Apr 2024 09:36:00 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 200232
IP: 45.88.226.0/24
IP: 194.31.131.0/24
IP: 2a13:6ec0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:bd:10:87:8e:03:92:50:f9:22:98:ff:d5:f9:4d:47:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 8 09:36:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=747cb366ff6e23df6c097f60adc7fa8075598191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:51:b3:06:f5:4d:02:c2:75:80:d9:3b:5d:5c:
2f:c0:d8:09:d7:1c:14:9d:b1:9f:7d:50:6d:1d:e7:
10:a5:3b:62:44:a4:1c:ab:77:88:8d:db:77:5b:cb:
fd:2e:eb:44:84:1a:13:36:4c:ac:2b:a6:0d:59:65:
e7:86:5b:57:34:02:f8:42:3a:3c:f6:21:29:48:da:
ae:f9:e2:5c:e0:54:8b:6f:f7:71:20:e9:d4:bf:d6:
82:32:94:79:b7:d1:48:40:99:48:31:97:6e:3f:88:
92:ac:90:42:09:7c:b9:4d:94:b0:b8:bf:a5:f7:c9:
fb:10:b6:d0:70:bf:0f:18:17:8a:f7:0d:0d:59:7e:
d5:ec:65:7e:75:80:f1:f1:18:73:1d:9b:b7:61:1e:
d7:1b:e7:09:ac:b2:31:1f:9a:e0:21:ea:46:5c:3f:
fc:7c:a9:cb:9a:32:4a:bb:06:ea:12:d6:64:ed:ed:
0a:eb:92:f0:c5:b4:4b:a0:72:6d:63:6b:6c:a0:fd:
69:c0:ee:26:28:d7:34:f5:b0:56:6c:0c:ac:b4:2a:
be:6a:4e:58:cc:a0:88:74:9e:c1:a7:f3:59:6a:45:
a2:71:73:3b:9b:62:5f:70:3a:6b:64:0c:cd:85:db:
84:0b:b9:0e:a3:b1:28:25:42:2e:d8:21:08:20:17:
f3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:7C:B3:66:FF:6E:23:DF:6C:09:7F:60:AD:C7:FA:80:75:59:81:91
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.226.0/24
194.31.131.0/24
IPv6:
2a13:6ec0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200232
Signature Algorithm: sha256WithRSAEncryption
a7:f6:82:e3:46:72:3a:fc:dc:8b:4d:19:0c:17:f1:98:ee:12:
a8:bc:42:3e:04:c4:6f:5c:7f:1d:f5:e6:82:7a:a7:76:15:16:
c2:1c:f5:9c:2e:ee:d4:7f:b4:a3:1b:8b:51:ae:2c:a6:99:43:
82:bb:7c:af:cc:cd:b7:49:24:9c:a2:13:04:1d:8b:a3:5a:c4:
18:0c:6e:dd:df:f0:2a:2c:31:cd:0e:76:e1:11:0f:9c:5a:82:
b9:da:df:ee:5a:ad:e1:12:48:13:89:0d:0e:f2:2b:82:f0:2f:
b2:9a:e2:c4:b0:b1:1d:1d:da:7d:a3:c7:3e:ea:68:ad:1f:ef:
8c:b8:83:b3:be:a1:9d:ed:94:cf:bf:8d:6e:3f:30:2b:6d:39:
d0:d5:d9:69:31:be:45:dd:b2:f1:cb:c9:80:42:08:1a:23:a6:
bf:35:7d:4d:60:6d:28:d2:d0:aa:ba:16:e5:10:54:7a:09:c4:
63:f1:19:f1:6c:4f:67:47:df:97:6c:23:f4:2b:30:0f:4c:27:
28:d0:d5:db:1f:53:c9:d7:e1:32:b7:e1:ed:cf:9b:c6:c8:3c:
b7:05:4a:5c:ea:4a:b2:64:a3:ce:cf:6a:68:4e:1f:2e:6b:07:
79:63:08:fc:fc:92:d6:5f:01:5a:2d:be:3a:0a:1c:0c:7b:15:
83:da:46:6f
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAY69EIeOA5JQ+SKY/9X5TUfQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNDA4MDkzNjAwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDdjYjM2NmZmNmUyM2RmNmMwOTdmNjBhZGM3ZmE4MDc1NTk4MTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FGzBvVNAsJ1gNk7XVwvwNgJ1xwU
nbGffVBtHecQpTtiRKQcq3eIjdt3W8v9LutEhBoTNkysK6YNWWXnhltXNAL4Qjo8
9iEpSNqu+eJc4FSLb/dxIOnUv9aCMpR5t9FIQJlIMZduP4iSrJBCCXy5TZSwuL+l
98n7ELbQcL8PGBeK9w0NWX7V7GV+dYDx8RhzHZu3YR7XG+cJrLIxH5rgIepGXD/8
fKnLmjJKuwbqEtZk7e0K65LwxbRLoHJtY2tsoP1pwO4mKNc09bBWbAystCq+ak5Y
zKCIdJ7Bp/NZakWicXM7m2JfcDprZAzNhduEC7kOo7EoJUIu2CEIIBfznQIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFHR8s2b/biPfbAl/YK3H+oB1WYGRMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI5LzNhYjU1
ZC04NTJmLTQ5NWItYjJiMy1lMDJkNzMwZmU4NGUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjkvM2FiNTVk
LTg1MmYtNDk1Yi1iMmIzLWUwMmQ3MzBmZTg0ZS8xL2RIeXpadjl1STk5c0NYOWdy
Y2Y2Z0hWWmdaRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQALVjiAwQAwh+DMA0EAgACMAcDBQAqE27AMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMOKDANBgkqhkiG9w0BAQsFAAOCAQEAp/aC
40ZyOvzci00ZDBfxmO4SqLxCPgTEb1x/HfXmgnqndhUWwhz1nC7u1H+0oxuLUa4s
pplDgrt8r8zNt0kknKITBB2Lo1rEGAxu3d/wKiwxzQ524REPnFqCudrf7lqt4RJI
E4kNDvIrgvAvsprixLCxHR3afaPHPuporR/vjLiDs76hne2Uz7+Nbj8wK2050NXZ
aTG+Rd2y8cvJgEIIGiOmvzV9TWBtKNLQqroW5RBUegnEY/EZ8WxPZ0ffl2wj9Csw
D0wnKNDV2x9TydfhMrfh7c+bxsg8twVKXOpKsmSjzs9qaE4fLmsHeWMI/PyS1l8B
Wi2+OgocDHsVg9pGbw==
-----END CERTIFICATE-----
Generated at Fri May 3 03:23:48 2024 by rpki-client on console-fra.rpki-client.org