Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
File: dVSsTH9FHFu5OC-81G1wxMD53lY.cer (raw, json)
Hash identifier: Yfd/Mmqbvq3IN/JiKUbAIaCJOVNRG5OZwgCLAINHilc=
Subject key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B785920770CAB148C69AB854D959CF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:29:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.177.228.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:85:92:07:70:ca:b1:48:c6:9a:b8:54:d9:59:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c2:b1:a5:1d:03:de:7f:5f:b3:b8:f0:16:da:
f7:57:12:81:7b:87:5c:ba:3d:9f:3b:cb:7a:c5:5b:
2c:55:6f:48:6d:e9:20:58:20:ce:dc:1b:c3:c3:a1:
52:e1:3a:68:17:7d:9b:b7:6a:95:fb:9a:b4:bb:b0:
14:23:f6:f1:c8:66:62:aa:52:74:d9:cc:d5:79:37:
db:f4:d3:74:69:20:14:ed:86:e9:7f:2e:9a:f3:21:
c3:b7:38:a5:3c:25:97:e0:15:d3:7d:46:03:77:a5:
b5:13:00:12:5d:71:7e:c6:e5:38:c4:bd:8e:e3:b6:
6c:14:5b:52:e0:65:63:80:0b:ba:4e:d3:ef:2e:2f:
f8:39:ac:89:a5:ef:2e:04:96:a4:ed:6e:8d:68:33:
54:86:3f:66:f0:16:e7:dd:c4:9a:97:3a:7f:0c:85:
4e:79:cc:5c:e5:25:f2:d3:17:bb:dd:dc:b3:07:56:
b2:64:9e:53:2d:60:39:31:6c:49:a6:23:6a:14:03:
da:2e:87:6b:3f:38:9d:7a:0b:6a:e9:93:7c:75:20:
35:63:5d:aa:26:88:40:4a:3e:b5:6d:43:ab:a6:b1:
d2:49:9a:27:9d:b0:92:36:ac:8b:c0:7f:05:12:d5:
87:fa:49:28:9d:7d:d4:e8:54:af:42:29:5a:ec:9d:
9c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.228.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:84:98:95:26:0a:eb:cc:b3:f9:8e:91:0f:b0:a1:d6:6d:c8:
44:e4:ca:a4:ee:39:8e:3e:9b:ec:7a:31:93:d4:89:63:5d:e9:
8d:86:56:8d:a4:8c:8c:90:46:7c:6a:96:43:9b:18:0e:88:eb:
02:55:9e:8f:cd:b2:a3:e8:65:34:0c:6f:81:dc:a1:56:00:1e:
e3:0e:2d:34:1a:36:78:f7:38:5e:02:5f:ec:9d:27:bd:70:3d:
c1:cf:d2:0a:88:c0:42:eb:ec:d0:bf:00:0a:a0:a2:83:3c:f4:
89:1f:08:16:35:b0:23:99:9c:d3:fb:2c:06:ab:f6:b9:a2:1a:
90:dd:74:7b:0f:8d:45:9f:69:17:14:d7:ee:22:54:d3:46:5c:
d1:a0:21:12:ac:da:74:1a:58:ff:a3:b7:8f:bd:37:d6:82:d5:
96:ce:b3:04:01:23:e4:6f:83:36:dc:b0:27:26:11:8f:18:4e:
f8:83:cc:17:1b:04:60:2c:7e:4a:08:a0:28:00:5e:a8:50:00:
cc:ee:99:9a:02:8b:f6:cc:6c:81:50:03:a3:f4:2f:53:75:37:
8c:51:e9:65:f7:ff:f8:77:18:ad:4c:20:81:98:26:d0:8b:40:
31:c2:71:c3:a2:e3:ba:b5:a3:82:86:63:3f:19:3d:b9:37:c7:
cb:d6:09:1b
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzGt4WSB3DKsUjGmrhU2VnPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMjAyOTI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTU0YWM0YzdmNDUxYzViYjkzODJmYmNkNDZkNzBjNGMwZjlkZTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8KxpR0D3n9fs7jwFtr3VxKBe4dc
uj2fO8t6xVssVW9IbekgWCDO3BvDw6FS4TpoF32bt2qV+5q0u7AUI/bxyGZiqlJ0
2czVeTfb9NN0aSAU7Ybpfy6a8yHDtzilPCWX4BXTfUYDd6W1EwASXXF+xuU4xL2O
47ZsFFtS4GVjgAu6TtPvLi/4OayJpe8uBJak7W6NaDNUhj9m8Bbn3cSalzp/DIVO
ecxc5SXy0xe73dyzB1ayZJ5TLWA5MWxJpiNqFAPaLodrPzidegtq6ZN8dSA1Y12q
JohASj61bUOrprHSSZonnbCSNqyLwH8FEtWH+kkonX3U6FSvQila7J2cxwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFHVUrEx/RRxbuTgvvNRtcMTA+d5WMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBjLzg3YTAw
YS1iNmY2LTQ3MjEtYTgyOC1kOTMzN2RiMzlkMWYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGMvODdhMDBh
LWI2ZjYtNDcyMS1hODI4LWQ5MzM3ZGIzOWQxZi8xL2RWU3NUSDlGSEZ1NU9DLTgx
RzF3eE1ENTNsWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCubHkMA0GCSqGSIb3DQEBCwUAA4IBAQA+hJiV
JgrrzLP5jpEPsKHWbchE5Mqk7jmOPpvsejGT1IljXemNhlaNpIyMkEZ8apZDmxgO
iOsCVZ6PzbKj6GU0DG+B3KFWAB7jDi00GjZ49zheAl/snSe9cD3Bz9IKiMBC6+zQ
vwAKoKKDPPSJHwgWNbAjmZzT+ywGq/a5ohqQ3XR7D41Fn2kXFNfuIlTTRlzRoCES
rNp0Glj/o7ePvTfWgtWWzrMEASPkb4M23LAnJhGPGE74g8wXGwRgLH5KCKAoAF6o
UADM7pmaAov2zGyBUAOj9C9TdTeMUell9//4dxitTCCBmCbQi0AxwnHDouO6taOC
hmM/GT25N8fL1gkb
-----END CERTIFICATE-----
Generated at Fri May 3 03:23:59 2024 by rpki-client on console-fra.rpki-client.org