Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer
File: dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer (raw, json)
Hash identifier: z/5Kj828xfXHl97JQE9Yd5k0RM+QTKFeLJCWB7/2fLQ=
Subject key identifier: 75:9D:27:CE:07:2C:A3:36:D3:AF:AA:B8:87:9F:94:EC:63:45:56:69
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC795030768C7C25E0B0B1DA37FAB1D17
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:31:20 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 199342
IP: 185.11.152.0/22
IP: 2a03:7640::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:03:07:68:c7:c2:5e:0b:0b:1d:a3:7f:ab:1d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:31:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=759d27ce072ca336d3afaab8879f94ec63455669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:db:1d:c6:dc:2e:07:22:89:4e:1c:5a:92:6a:
cb:cc:99:33:22:2c:d9:d9:56:e3:7d:40:50:ac:d0:
89:5c:e9:d6:ff:85:54:15:ab:24:1d:02:a5:33:1f:
2a:25:03:d7:4c:8a:ba:e7:33:10:99:c9:3a:ca:fb:
a0:ba:d2:d0:40:07:f7:9a:f3:6a:cb:01:9a:a6:9f:
c2:83:4c:7f:6e:7b:78:33:53:e9:b5:7e:53:8b:71:
eb:c2:34:e2:7e:d3:06:43:f1:91:ea:c7:b6:1e:c4:
cb:08:08:90:9f:e6:dc:60:1a:84:88:1f:42:24:fc:
c3:cb:33:d2:75:56:64:57:cc:a7:66:36:ec:8b:0b:
9a:a3:54:d3:27:ba:88:ff:ba:d2:3b:58:6b:df:99:
3b:3a:08:32:c3:a3:a7:c7:63:af:c6:02:0d:90:e1:
28:58:f1:04:3f:5a:b2:b0:5c:c6:7d:1b:56:b0:f8:
ae:29:b4:46:5a:1f:4a:4c:db:77:f2:08:99:f8:e7:
8f:c6:bc:85:49:aa:1d:b1:a9:4b:7f:d1:45:6e:fb:
e3:31:3e:83:1e:dc:57:3b:33:83:dc:bc:d6:e4:52:
6d:7b:82:15:3d:e3:c6:e7:ef:2e:be:ca:ee:98:f4:
13:7c:ec:36:ad:5a:f8:1b:a6:f4:6e:bf:f5:2d:97:
ad:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9D:27:CE:07:2C:A3:36:D3:AF:AA:B8:87:9F:94:EC:63:45:56:69
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.152.0/22
IPv6:
2a03:7640::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199342
Signature Algorithm: sha256WithRSAEncryption
7c:c8:27:6c:d2:67:28:eb:2e:20:69:6e:fa:d7:fe:9d:7e:5f:
74:26:34:2b:31:39:23:e0:12:28:9a:e0:fc:fe:64:d5:2c:31:
c5:59:30:87:d4:87:4f:b3:ec:9e:f2:d0:96:ea:db:e7:c7:c0:
ae:f3:e0:55:9a:82:22:e8:57:31:7b:4f:23:bc:1d:e7:85:1f:
08:c9:a8:7b:4c:54:cb:1a:51:a0:9d:ee:13:f7:bf:09:8e:eb:
db:e2:48:b8:d1:c9:f0:16:de:65:42:01:29:89:0e:54:9a:13:
56:e8:c6:96:ed:5d:f2:3b:5a:e8:be:58:4e:94:0f:90:df:24:
50:46:24:c4:2d:a7:a7:1b:99:5a:1d:b0:19:38:3b:44:d5:be:
92:1b:a5:b5:e4:e6:80:be:de:30:8c:6c:39:84:14:f2:84:e1:
f5:30:05:c9:68:67:16:32:ab:71:46:7a:4c:37:1d:38:e2:4d:
bb:05:1c:88:e7:d8:23:7e:70:3d:45:c0:4e:f6:68:b7:07:9b:
4d:67:fb:fc:b7:d1:d2:bc:6a:f2:3a:19:c1:58:a1:f3:36:97:
75:be:09:dd:7c:3c:1b:22:14:43:8a:94:3f:04:a7:02:e1:0b:
3a:44:87:81:f5:72:3a:90:73:bf:1d:2d:81:d9:8b:4b:72:e8:
de:94:88:19
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzHlQMHaMfCXgsLHaN/qx0XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDAzMTIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTlkMjdjZTA3MmNhMzM2ZDNhZmFhYjg4NzlmOTRlYzYzNDU1NjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNsdxtwuByKJThxakmrLzJkzIizZ
2VbjfUBQrNCJXOnW/4VUFaskHQKlMx8qJQPXTIq65zMQmck6yvugutLQQAf3mvNq
ywGapp/Cg0x/bnt4M1PptX5Ti3HrwjTiftMGQ/GR6se2HsTLCAiQn+bcYBqEiB9C
JPzDyzPSdVZkV8ynZjbsiwuao1TTJ7qI/7rSO1hr35k7Oggyw6Onx2OvxgINkOEo
WPEEP1qysFzGfRtWsPiuKbRGWh9KTNt38giZ+OePxryFSaodsalLf9FFbvvjMT6D
HtxXOzOD3LzW5FJte4IVPePG5+8uvsrumPQTfOw2rVr4G6b0br/1LZetawIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFHWdJ84HLKM206+quIeflOxjRVZpMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NkL2YxN2Ey
Ny00NTk5LTQ1YjUtYTY2ZS03MDEyM2Y0OTUxMTAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2QvZjE3YTI3
LTQ1OTktNDViNS1hNjZlLTcwMTIzZjQ5NTExMC8xL2RaMG56Z2Nzb3piVHI2cTRo
NS1VN0dORlZtay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuQuYMA0EAgACMAcDBQAqA3ZAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMKrjANBgkqhkiG9w0BAQsFAAOCAQEAfMgnbNJnKOsu
IGlu+tf+nX5fdCY0KzE5I+ASKJrg/P5k1SwxxVkwh9SHT7PsnvLQlurb58fArvPg
VZqCIuhXMXtPI7wd54UfCMmoe0xUyxpRoJ3uE/e/CY7r2+JIuNHJ8BbeZUIBKYkO
VJoTVujGlu1d8jta6L5YTpQPkN8kUEYkxC2npxuZWh2wGTg7RNW+khulteTmgL7e
MIxsOYQU8oTh9TAFyWhnFjKrcUZ6TDcdOOJNuwUciOfYI35wPUXATvZotwebTWf7
/LfR0rxq8joZwVih8zaXdb4J3Xw8GyIUQ4qUPwSnAuELOkSHgfVyOpBzvx0tgdmL
S3Lo3pSIGQ==
-----END CERTIFICATE-----
Generated at Fri May 3 07:17:22 2024 by rpki-client on console-ams.rpki-client.org