Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer
File: dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer (raw, json)
Hash identifier: kQMf5scc9SkV7roVtJjDHiKAvaYy3C6M22MAGVR3Z9g=
Subject key identifier: 75:9D:6A:FB:8D:DF:8F:8C:0D:D6:60:79:0E:DC:BA:1F:3B:37:0C:63
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94D6892D67CC9A250CAB7B447AB830A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:32:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 60631
AS: 211505
IP: 130.185.72.0/21
IP: 185.8.172.0/22
IP: 185.208.174.0/23
IP: 2a03:2dc0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:68:92:d6:7c:c9:a2:50:ca:b7:b4:47:ab:83:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:32:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=759d6afb8ddf8f8c0dd660790edcba1f3b370c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ce:4d:2f:b7:c4:f0:a7:6f:d7:75:7d:df:f8:
8a:db:7e:c5:3e:9c:38:20:b7:77:0f:b6:3a:0b:04:
be:23:7b:e0:37:c5:64:e4:8b:9d:63:6f:0c:e1:99:
f1:3e:62:97:66:4f:c6:67:a1:52:9f:8a:4a:c8:71:
b6:6c:d8:90:e8:fe:c4:4a:3c:d8:60:2d:e3:be:ed:
2e:cb:29:9a:11:59:9c:b1:e7:46:48:d5:98:89:07:
62:7c:a4:d7:23:86:8c:fa:c5:7d:e1:ba:21:b7:d3:
27:1d:93:c4:bb:9b:cb:f6:dc:c2:85:fd:d1:dd:3a:
8f:58:a7:b2:97:30:13:5d:85:fe:af:20:bc:91:64:
64:2c:86:bc:a7:fb:67:1d:cd:a9:2b:ff:30:a5:30:
71:2f:83:f3:83:62:c5:8e:80:9a:c4:8a:eb:89:c1:
af:d4:48:c9:cb:03:96:61:0a:f3:81:75:58:2c:15:
6e:b7:02:62:4d:3a:6f:ad:89:26:92:01:98:00:3c:
41:c7:13:0f:a2:53:3b:13:11:f6:1b:d7:7a:b8:07:
8f:2c:f6:f0:50:15:3d:a2:c6:77:87:11:67:0d:22:
6b:74:54:02:83:66:e1:72:2c:38:d3:33:88:da:d4:
48:14:e3:dd:32:e6:7e:51:98:5c:9a:1d:46:92:e2:
ae:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9D:6A:FB:8D:DF:8F:8C:0D:D6:60:79:0E:DC:BA:1F:3B:37:0C:63
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.185.72.0/21
185.8.172.0/22
185.208.174.0/23
IPv6:
2a03:2dc0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60631
211505
Signature Algorithm: sha256WithRSAEncryption
40:9e:d8:2f:d4:b5:a2:28:3a:1a:41:3b:94:1c:77:a9:0f:00:
04:23:bc:8a:75:e8:a4:93:34:93:c4:16:16:44:76:d7:79:d1:
a6:83:c0:72:f8:f0:45:e8:31:be:8b:e4:8a:9b:24:ac:c4:d9:
4c:5a:e1:2d:24:2b:a3:d2:c5:b6:d4:89:51:4b:7a:57:ce:35:
b7:f3:e7:5c:dc:86:16:a7:37:b0:20:24:21:e6:4f:ab:65:e4:
c6:05:9d:17:46:8c:52:40:06:1e:d0:a9:82:b5:b4:55:0d:39:
56:9c:d4:30:35:ed:a7:fe:c5:b6:fc:f5:10:9a:a4:32:58:29:
57:08:2b:32:12:83:a0:5e:f0:d1:c0:fa:33:10:09:e7:c2:db:
2e:87:c1:20:74:98:c4:25:45:6c:b0:8a:82:74:f7:80:80:8f:
3a:98:80:04:83:32:81:7b:09:db:95:ab:6a:6e:52:37:54:e7:
ab:76:8e:97:4a:3c:94:9b:9c:f8:95:43:7d:46:3b:06:9c:e9:
1a:62:41:bc:7b:ad:e7:e0:a2:3f:0f:4d:e0:88:ed:ca:43:e2:
88:71:ba:59:1b:eb:19:ec:03:d2:90:5b:6c:10:71:6b:ba:e1:
e6:2c:bd:f5:40:6f:d3:65:0f:1e:a0:0d:c7:5f:98:1e:69:24:
de:fe:79:b3
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgISAYzJTWiS1nzJolDKt7RHq4MKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDgzMjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTlkNmFmYjhkZGY4ZjhjMGRkNjYwNzkwZWRjYmExZjNiMzcwYzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzM5NL7fE8Kdv13V93/iK237FPpw4
ILd3D7Y6CwS+I3vgN8Vk5IudY28M4ZnxPmKXZk/GZ6FSn4pKyHG2bNiQ6P7ESjzY
YC3jvu0uyymaEVmcsedGSNWYiQdifKTXI4aM+sV94boht9MnHZPEu5vL9tzChf3R
3TqPWKeylzATXYX+ryC8kWRkLIa8p/tnHc2pK/8wpTBxL4Pzg2LFjoCaxIrricGv
1EjJywOWYQrzgXVYLBVutwJiTTpvrYkmkgGYADxBxxMPolM7ExH2G9d6uAePLPbw
UBU9osZ3hxFnDSJrdFQCg2bhciw40zOI2tRIFOPdMuZ+UZhcmh1GkuKutwIDAQAB
o4ICwDCCArwwHQYDVR0OBBYEFHWdavuN34+MDdZgeQ7cuh87NwxjMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QwLzE2Yjdm
NC1mYTE1LTQ3YTYtOWZjNS0yNTRiY2JjZWMwMzcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAvMTZiN2Y0
LWZhMTUtNDdhNi05ZmM1LTI1NGJjYmNlYzAzNy8xL2RaMXEtNDNmajR3TjFtQjVE
dHk2SHpzM0RHTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF
BwEHAQH/BCswKTAYBAIAATASAwQDgrlIAwQCuQisAwQBudCuMA0EAgACMAcDBQAq
Ay3AMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwDs1wIDAzoxMA0GCSqGSIb3DQEB
CwUAA4IBAQBAntgv1LWiKDoaQTuUHHepDwAEI7yKdeikkzSTxBYWRHbXedGmg8By
+PBF6DG+i+SKmySsxNlMWuEtJCuj0sW21IlRS3pXzjW38+dc3IYWpzewICQh5k+r
ZeTGBZ0XRoxSQAYe0KmCtbRVDTlWnNQwNe2n/sW2/PUQmqQyWClXCCsyEoOgXvDR
wPozEAnnwtsuh8EgdJjEJUVssIqCdPeAgI86mIAEgzKBewnblatqblI3VOerdo6X
SjyUm5z4lUN9RjsGnOkaYkG8e63n4KI/D03giO3KQ+KIcbpZG+sZ7APSkFtsEHFr
uuHmLL31QG/TZQ8eoA3HX5geaSTe/nmz
-----END CERTIFICATE-----
Generated at Fri May 3 02:01:50 2024 by rpki-client on console-ams.rpki-client.org