Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer
File: dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer (raw, json)
Hash identifier: tU0VtTsspYUsNLZIYwuaBK7oPYkYrRFDn2iRuaQeIZQ=
Subject key identifier: 75:6F:BA:46:63:4D:22:B9:3D:B1:BF:46:EC:5A:8D:66:5E:62:DA:C7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94BE1D0A7493C06CED572FEC742171B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:30:42 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 195.128.144.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4b:e1:d0:a7:49:3c:06:ce:d5:72:fe:c7:42:17:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:30:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=756fba46634d22b93db1bf46ec5a8d665e62dac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8d:fe:f9:d3:c4:e3:15:9b:36:03:14:9e:b0:
9e:32:53:f8:83:65:76:aa:41:5f:ed:b4:61:4b:c9:
10:3f:df:98:24:72:80:83:2e:c4:88:88:cc:5f:3b:
29:59:05:9b:38:11:e5:09:d0:4a:98:cf:0d:f3:0d:
90:77:50:29:b4:4b:7d:d7:bf:8b:09:5f:aa:10:cb:
2a:eb:91:ac:6e:d7:df:1b:59:c3:76:99:f4:d1:fe:
9f:7f:9b:fb:fd:41:7e:19:ca:f3:25:ce:c2:b6:b6:
b9:99:c6:7d:6b:00:20:83:13:d2:80:8c:4c:dc:f8:
81:c5:70:6f:d1:18:30:3a:63:07:6b:d2:9c:52:6c:
2b:3f:0c:91:5b:08:f2:c8:1f:2b:4b:c8:c4:f0:41:
18:39:87:9b:c6:5b:9d:2b:c4:03:d2:5f:5b:d2:24:
e1:33:7b:ca:cb:51:d4:ad:88:98:b1:6e:4d:b3:4d:
7f:f0:04:4c:a4:58:a5:30:17:bb:50:44:7b:6c:70:
fb:e0:fb:66:f0:77:c2:16:24:9b:f5:69:18:6b:8f:
99:c7:1e:01:67:47:30:24:ce:80:4d:c6:20:30:84:
a8:9d:1b:e8:ab:c7:35:ec:e3:e6:d6:e3:8f:80:2e:
c7:db:98:68:98:92:9b:8d:3d:38:42:0a:a7:9d:e4:
af:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:6F:BA:46:63:4D:22:B9:3D:B1:BF:46:EC:5A:8D:66:5E:62:DA:C7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.128.144.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:4d:f8:39:d2:2e:6f:d7:69:18:b2:7d:6f:f3:71:d1:31:08:
85:ba:f2:e5:8f:f9:3d:95:7e:0f:a3:1c:ec:8e:a8:17:3a:ae:
a2:19:f8:d2:13:93:6b:28:84:09:ed:c1:7d:f4:c6:78:5a:87:
45:f5:85:0e:04:53:74:6e:93:e0:d8:c8:ec:ed:f1:af:c8:23:
f8:8c:6f:34:a9:c9:26:48:4b:ed:e3:d6:44:c8:96:d0:37:97:
c5:bd:ff:47:e1:f4:d4:04:dd:22:16:e7:6f:ed:60:f1:71:df:
17:20:18:2c:3b:04:68:1a:e6:08:54:21:1a:74:7e:81:3a:cd:
c1:5f:5f:66:12:b5:2e:cb:1e:02:b4:16:ce:dd:ca:85:c0:fc:
e1:bc:e7:c8:b0:a6:01:a0:e2:be:0e:56:89:d3:61:da:f5:e7:
13:a5:af:dc:69:da:a1:7c:9d:d4:56:00:33:44:6e:2e:05:28:
93:1a:8e:c0:2e:eb:cd:fb:77:b0:e4:58:5b:28:0f:d4:2d:76:
2e:13:df:56:63:3b:92:54:52:b9:ea:09:be:14:d3:3b:b9:a0:
38:c0:6b:cd:e7:88:76:05:e1:78:87:64:17:d2:43:79:2b:c3:
1d:4b:d5:1e:d2:07:92:4a:f9:9f:13:ed:19:2c:b7:3b:ab:62:
35:a6:91:a6
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzJS+HQp0k8Bs7Vcv7HQhcbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDgzMDQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTZmYmE0NjYzNGQyMmI5M2RiMWJmNDZlYzVhOGQ2NjVlNjJkYWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzY3++dPE4xWbNgMUnrCeMlP4g2V2
qkFf7bRhS8kQP9+YJHKAgy7EiIjMXzspWQWbOBHlCdBKmM8N8w2Qd1AptEt917+L
CV+qEMsq65GsbtffG1nDdpn00f6ff5v7/UF+GcrzJc7Ctra5mcZ9awAggxPSgIxM
3PiBxXBv0RgwOmMHa9KcUmwrPwyRWwjyyB8rS8jE8EEYOYebxludK8QD0l9b0iTh
M3vKy1HUrYiYsW5Ns01/8ARMpFilMBe7UER7bHD74Ptm8HfCFiSb9WkYa4+Zxx4B
Z0cwJM6ATcYgMISonRvoq8c17OPm1uOPgC7H25homJKbjT04QgqnneSvxQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFHVvukZjTSK5PbG/RuxajWZeYtrHMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EyL2I2ODQy
MS05OWIxLTQ4NWUtYjIxNy1kM2FkYzc0NDkzOTEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvYjY4NDIx
LTk5YjEtNDg1ZS1iMjE3LWQzYWRjNzQ0OTM5MS8xL2RXLTZSbU5OSXJrOXNiOUc3
RnFOWmw1aTJzYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAw4CQMA0GCSqGSIb3DQEBCwUAA4IBAQAdTfg5
0i5v12kYsn1v83HRMQiFuvLlj/k9lX4PoxzsjqgXOq6iGfjSE5NrKIQJ7cF99MZ4
WodF9YUOBFN0bpPg2Mjs7fGvyCP4jG80qckmSEvt49ZEyJbQN5fFvf9H4fTUBN0i
Fudv7WDxcd8XIBgsOwRoGuYIVCEadH6BOs3BX19mErUuyx4CtBbO3cqFwPzhvOfI
sKYBoOK+DlaJ02Ha9ecTpa/cadqhfJ3UVgAzRG4uBSiTGo7ALuvN+3ew5FhbKA/U
LXYuE99WYzuSVFK56gm+FNM7uaA4wGvN54h2BeF4h2QX0kN5K8MdS9Ue0geSSvmf
E+0ZLLc7q2I1ppGm
-----END CERTIFICATE-----
Generated at Fri May 3 07:17:19 2024 by rpki-client on console-ams.rpki-client.org