Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
File: dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer (raw, json)
Hash identifier: ckPAKSUrMoRf3hdHMKIlRYovcNPWeQ32/8dXZLfIAPk=
Subject key identifier: 74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC801EBFF27136A72D6417D1946D7D368
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:30:18 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.16.48.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:eb:ff:27:13:6a:72:d6:41:7d:19:46:d7:d3:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=74d7da63929999603395877448ce50ac6e0213a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:95:ee:b1:91:3d:88:9f:f4:5f:1e:b4:2b:74:
f4:26:b7:b9:2a:4a:cf:2c:f6:3a:67:09:4f:48:b9:
bc:c0:20:d2:0a:79:08:ce:84:24:fd:9e:95:31:8e:
d7:c7:18:71:0d:c0:bc:2b:15:96:55:19:b9:9e:06:
18:28:36:4f:ad:5b:24:3e:c1:a0:47:dc:a7:3b:74:
5e:c8:a6:14:fb:f3:d1:f9:f4:05:ed:72:fc:c2:80:
f9:12:9e:20:44:b6:b2:16:e6:34:00:65:2d:83:35:
16:f9:7c:46:fc:7b:d1:99:5e:9f:4e:7b:0a:e7:34:
35:59:80:5e:0f:fb:f1:c1:82:7c:1c:75:91:0d:6b:
d1:da:65:1f:b9:f1:db:5e:f8:9f:a0:90:a1:7a:03:
47:5e:60:28:2b:52:3e:8a:6e:5d:5e:81:7b:8f:58:
7f:f3:30:70:ac:88:00:fa:ba:16:79:7f:5a:8a:57:
a2:28:4a:b6:45:d1:e2:68:0a:30:cf:67:d3:83:87:
5e:4c:de:c9:75:35:d8:dd:b3:85:cd:95:54:36:57:
e8:4f:b4:d2:5f:5d:f3:59:8f:9a:3b:19:f1:4f:af:
d7:cb:7c:b3:76:16:d6:72:70:d9:4a:bb:f1:fc:87:
75:3b:39:61:38:6b:b7:ea:b8:79:fe:a2:13:5d:2f:
18:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.48.0/20
Signature Algorithm: sha256WithRSAEncryption
99:ba:d5:18:72:fb:01:ce:ca:54:d4:77:f7:9e:8c:ac:78:87:
c0:29:f4:ee:56:42:76:f8:4c:c2:72:90:25:c1:f4:85:ad:11:
c9:61:cb:d0:33:13:cd:23:a1:c9:49:6b:ed:2b:01:79:be:95:
7d:31:9e:a9:40:b1:ea:25:4f:8b:25:c1:8c:f0:da:74:07:a4:
55:9c:72:d7:61:88:d2:65:a4:ef:8d:37:dc:29:d2:e4:24:6a:
9c:3a:dc:56:b5:18:6d:26:6e:27:c0:8e:cd:8b:55:65:89:ff:
0d:6d:18:1f:bc:29:94:c5:2d:46:8c:2f:37:dc:4e:9f:e6:b5:
5b:f5:6e:92:f3:f9:d2:cc:cc:ad:0b:3c:9c:1b:41:50:24:3e:
69:8c:c4:0b:fc:d2:7e:21:97:e7:4d:fa:ab:3c:59:36:ac:aa:
f6:95:90:39:e9:c2:da:49:75:31:8d:49:42:09:40:87:88:a2:
d7:f1:61:d8:e9:4a:0b:8d:0a:08:64:36:9e:b2:2f:86:47:10:
5e:e8:b8:c1:84:7f:88:d4:e9:f1:57:f4:90:55:e6:9d:d1:52:
19:a5:f9:a3:7a:88:d8:cd:83:19:c8:ef:bd:a1:0e:da:3c:e6:
e3:98:ff:04:6a:07:68:1e:55:6d:20:0c:6e:09:d6:e0:f8:49:
3e:c2:4d:80
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzIAev/JxNqctZBfRlG19NoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDIzMDE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NGQ3ZGE2MzkyOTk5OTYwMzM5NTg3NzQ0OGNlNTBhYzZlMDIxM2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZXusZE9iJ/0Xx60K3T0Jre5KkrP
LPY6ZwlPSLm8wCDSCnkIzoQk/Z6VMY7XxxhxDcC8KxWWVRm5ngYYKDZPrVskPsGg
R9ynO3ReyKYU+/PR+fQF7XL8woD5Ep4gRLayFuY0AGUtgzUW+XxG/HvRmV6fTnsK
5zQ1WYBeD/vxwYJ8HHWRDWvR2mUfufHbXvifoJChegNHXmAoK1I+im5dXoF7j1h/
8zBwrIgA+roWeX9aileiKEq2RdHiaAowz2fTg4deTN7JdTXY3bOFzZVUNlfoT7TS
X13zWY+aOxnxT6/Xy3yzdhbWcnDZSrvx/Id1OzlhOGu36rh5/qITXS8Y8QIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFHTX2mOSmZlgM5WHdEjOUKxuAhOpMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YwLzBlYjg1
Mi1hZjM0LTRjYjktODcyZS00YjVkNWQ1Zjg2OTkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjAvMGViODUy
LWFmMzQtNGNiOS04NzJlLTRiNWQ1ZDVmODY5OS8xL2ROZmFZNUtabVdBemxZZDBT
TTVRckc0Q0U2ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQEwRAwMA0GCSqGSIb3DQEBCwUAA4IBAQCZutUY
cvsBzspU1Hf3noyseIfAKfTuVkJ2+EzCcpAlwfSFrRHJYcvQMxPNI6HJSWvtKwF5
vpV9MZ6pQLHqJU+LJcGM8Np0B6RVnHLXYYjSZaTvjTfcKdLkJGqcOtxWtRhtJm4n
wI7Ni1Vlif8NbRgfvCmUxS1GjC833E6f5rVb9W6S8/nSzMytCzycG0FQJD5pjMQL
/NJ+IZfnTfqrPFk2rKr2lZA56cLaSXUxjUlCCUCHiKLX8WHY6UoLjQoIZDaesi+G
RxBe6LjBhH+I1OnxV/SQVead0VIZpfmjeojYzYMZyO+9oQ7aPObjmP8EagdoHlVt
IAxuCdbg+Ek+wk2A
-----END CERTIFICATE-----
Generated at Fri May 3 11:49:38 2024 by rpki-client on console-ams.rpki-client.org