Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer
File: dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer (raw, json)
Hash identifier: BSYTpOObcT9ctV8aUBLwfAn1aDL+j9fOSIYYABC8L+4=
Subject key identifier: 74:BF:07:F0:4C:C7:6A:90:AD:97:F9:F1:74:9F:AB:CF:05:C3:5D:62
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0190E92C9F9E5CBC7A9CCAC68C526873B241
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 25 Jul 2024 09:15:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 205384
IP: 84.234.120.0/23
IP: 2001:67c:11e8::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e9:2c:9f:9e:5c:bc:7a:9c:ca:c6:8c:52:68:73:b2:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 25 09:15:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=74bf07f04cc76a90ad97f9f1749fabcf05c35d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:14:c2:81:1c:a7:d5:e6:ce:5c:23:65:55:b9:
a8:24:ea:c0:48:fc:ef:78:bd:c2:2e:ad:d8:0f:7e:
7d:92:35:11:8c:8c:61:d0:4d:5a:91:36:8d:6c:8d:
db:37:74:89:c4:90:eb:c8:a6:cd:4f:97:59:5c:00:
49:c8:b7:7c:2f:26:bc:40:98:f4:c1:8c:69:6a:8e:
c7:4c:a6:35:db:31:4a:29:54:30:dc:ad:de:f1:72:
2f:04:b6:b1:69:78:e8:58:ee:30:18:3c:a2:18:58:
9b:e5:f1:79:b4:4e:7a:95:b9:13:43:c0:d2:22:4b:
5f:25:3d:e9:3f:bd:19:c7:79:68:86:23:71:20:0e:
3e:5c:6a:9a:04:28:a1:30:a7:4f:cb:93:ff:d2:0a:
64:8c:f8:a2:94:4d:eb:1d:04:4f:2e:47:e5:52:15:
65:1b:a2:0b:d5:a3:f7:35:66:54:78:a1:ba:c9:da:
ca:bd:87:3c:2f:8a:f8:5f:1d:78:f5:d0:a5:02:4f:
d8:b3:55:e2:f1:59:29:f9:63:12:88:28:39:1e:dd:
35:cb:9b:d3:5d:46:e2:18:a0:34:b7:04:2c:a1:f0:
19:49:4a:b9:2c:78:9d:4d:5d:55:07:48:4a:25:e5:
26:65:f1:c7:66:bb:90:59:e4:e1:4a:75:3f:68:b2:
a0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:BF:07:F0:4C:C7:6A:90:AD:97:F9:F1:74:9F:AB:CF:05:C3:5D:62
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.234.120.0/23
IPv6:
2001:67c:11e8::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205384
Signature Algorithm: sha256WithRSAEncryption
04:ce:3c:6c:84:bc:0f:22:47:8d:75:ab:95:7e:7a:55:c4:1d:
f1:12:a3:3c:22:a3:c7:bd:9e:bd:d5:4b:56:06:e9:74:b3:92:
c2:17:92:5e:a4:6a:a0:1f:91:82:26:7c:d5:5e:3c:35:f1:13:
f7:cc:96:8a:10:18:d6:d8:ba:54:b0:d0:d5:ba:1e:39:d1:91:
54:19:19:5b:5e:94:00:c9:45:5d:cd:15:76:d5:98:fb:1d:b4:
4c:bc:eb:46:c0:96:c3:6a:ce:68:bd:d7:26:50:4a:9f:ac:87:
b2:3e:b2:54:6a:d3:db:51:b5:48:0a:3a:b2:54:d0:ef:72:65:
d4:16:94:ea:88:18:05:17:d0:82:76:0d:db:36:0c:c6:a1:d2:
05:71:e0:5f:ec:c6:80:b4:04:b5:0b:cb:0b:39:25:c7:4e:c0:
64:7a:9f:1c:5d:26:39:06:25:6e:4a:07:40:1d:ab:f2:9e:76:
f5:df:8a:64:b4:80:4f:d5:3c:88:89:d5:1a:9b:1d:8b:7a:e2:
98:d8:2d:34:83:f1:22:6e:45:42:ac:b5:48:c0:04:05:aa:61:
88:15:57:c9:57:40:c2:cc:00:ec:9e:9f:9f:cb:55:75:91:9b:
07:47:81:99:e5:41:85:45:95:41:cf:f1:f9:90:d4:49:e6:d8:
72:4d:8f:e6
-----BEGIN CERTIFICATE-----
MIIFpTCCBI2gAwIBAgISAZDpLJ+eXLx6nMrGjFJoc7JBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNzI1MDkxNTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NGJmMDdmMDRjYzc2YTkwYWQ5N2Y5ZjE3NDlmYWJjZjA1YzM1ZDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxTCgRyn1ebOXCNlVbmoJOrASPzv
eL3CLq3YD359kjURjIxh0E1akTaNbI3bN3SJxJDryKbNT5dZXABJyLd8Lya8QJj0
wYxpao7HTKY12zFKKVQw3K3e8XIvBLaxaXjoWO4wGDyiGFib5fF5tE56lbkTQ8DS
IktfJT3pP70Zx3lohiNxIA4+XGqaBCihMKdPy5P/0gpkjPiilE3rHQRPLkflUhVl
G6IL1aP3NWZUeKG6ydrKvYc8L4r4Xx149dClAk/Ys1Xi8Vkp+WMSiCg5Ht01y5vT
XUbiGKA0twQsofAZSUq5LHidTV1VB0hKJeUmZfHHZruQWeThSnU/aLKg0QIDAQAB
o4ICsTCCAq0wHQYDVR0OBBYEFHS/B/BMx2qQrZf58XSfq88Fw11iMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ3L2EwYjM5
NS02MWZmLTQ1N2QtOGZmOC1lYzA4NDEzN2UyNDIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcvYTBiMzk1
LTYxZmYtNDU3ZC04ZmY4LWVjMDg0MTM3ZTI0Mi8xL2RMOEg4RXpIYXBDdGxfbnhk
Si1yendYRFhXSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF
BwEHAQH/BCEwHzAMBAIAATAGAwQBVOp4MA8EAgACMAkDBwAgAQZ8EegwGgYIKwYB
BQUHAQgBAf8ECzAJoAcwBQIDAyJIMA0GCSqGSIb3DQEBCwUAA4IBAQAEzjxshLwP
IkeNdauVfnpVxB3xEqM8IqPHvZ691UtWBul0s5LCF5JepGqgH5GCJnzVXjw18RP3
zJaKEBjW2LpUsNDVuh450ZFUGRlbXpQAyUVdzRV21Zj7HbRMvOtGwJbDas5ovdcm
UEqfrIeyPrJUatPbUbVICjqyVNDvcmXUFpTqiBgFF9CCdg3bNgzGodIFceBf7MaA
tAS1C8sLOSXHTsBkep8cXSY5BiVuSgdAHavynnb134pktIBP1TyIidUamx2LeuKY
2C00g/EibkVCrLVIwAQFqmGIFVfJV0DCzADsnp+fy1V1kZsHR4GZ5UGFRZVBz/H5
kNRJ5thyTY/m
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:16:06 2024 by rpki-client on console-fra.rpki-client.org