Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
File: dh55HzroOuiyY-PNtoKjR1tXB98.cer (raw, json)
Hash identifier: I3jl44GIQv+mRgE3owr01fEkm2She+QcbwfDWZBrTn8=
Subject key identifier: 76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC50154AA61A0F7BDB4B2D80692C80A9A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:47 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 77.83.176.0/22
IP: 2a09:8580::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:54:aa:61:a0:f7:bd:b4:b2:d8:06:92:c8:0a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=761e791f3ae83ae8b263e3cdb682a3475b5707df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:49:80:e4:11:a3:f3:ea:a3:06:b3:c5:dd:a8:
5c:cf:b3:47:0c:65:3d:4d:f4:5d:ec:41:e0:87:20:
24:8b:5f:09:63:56:23:0a:d1:5f:f4:73:59:74:9c:
ec:db:6e:d5:47:dd:96:3e:b0:24:e9:51:2a:2c:14:
e0:64:3f:64:e1:91:34:d7:61:5e:03:83:35:75:19:
93:96:3f:13:62:a5:0c:93:05:e7:ec:b1:64:5b:9c:
97:80:3d:6f:d5:0a:6d:36:c0:1b:3c:3d:d8:8f:3a:
8a:da:e2:1c:51:cd:99:20:70:05:a7:42:d7:95:0e:
3f:42:f0:c9:e3:fb:dd:33:c6:49:e9:44:f7:ea:ee:
ec:b3:0c:06:c8:3d:99:63:3d:ab:7e:c9:47:80:8d:
a6:0b:a9:c8:de:a3:a9:bc:5c:a2:8a:19:51:53:71:
fe:61:f0:91:a9:ba:09:7c:da:69:c9:5d:54:11:f9:
b9:96:7e:9c:5c:ef:08:3c:2e:d9:e0:92:f1:27:d3:
4c:56:51:cf:ec:1c:c6:77:85:e5:29:c3:29:11:3e:
53:37:ef:bf:b1:47:b9:73:5a:db:9b:99:42:28:26:
a7:a1:31:b4:36:10:c8:0e:03:c4:35:89:c5:40:7f:
ae:6a:d9:e7:e9:e2:bb:55:0d:60:36:2d:4a:ad:cd:
e5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.176.0/22
IPv6:
2a09:8580::/29
Signature Algorithm: sha256WithRSAEncryption
af:a9:96:ba:8f:b2:13:fe:11:1e:a2:09:f0:c3:e4:d4:37:e1:
75:47:b0:76:5c:ac:ff:97:8a:37:37:d2:6b:5e:24:25:b4:29:
cc:77:2a:f0:97:41:ae:67:43:55:a5:ea:93:d0:e9:ed:a6:24:
59:05:c1:b0:1f:06:87:db:85:a2:4d:b3:5d:0e:54:f6:f8:89:
06:9c:33:0a:52:58:73:74:09:15:02:88:76:38:6a:7d:ce:bb:
12:a0:10:94:14:0d:47:be:50:c1:e4:cf:46:58:fb:cc:2e:bb:
77:33:e2:ed:e7:2c:93:72:0a:97:a1:25:a0:84:c5:fc:fa:5e:
bf:d4:62:a3:92:96:7f:e8:ca:74:e2:9e:75:ae:67:96:52:ff:
54:ed:76:c1:bd:d3:36:a3:7e:20:4a:8f:c7:9b:e6:95:57:3e:
1b:a6:07:9a:07:17:5a:38:f7:f2:24:dc:21:8d:7d:f4:7b:bd:
5f:c4:b6:42:c3:80:e8:e1:ac:55:32:87:50:55:a8:0c:1f:93:
f9:15:37:50:6d:fa:9d:7e:61:b2:73:76:5b:44:76:ed:6d:97:
fe:68:05:1e:8c:e6:0d:20:1e:ca:49:7d:29:30:c5:05:1a:49:
e4:e2:59:81:eb:27:76:3e:11:25:52:79:3a:13:94:a2:04:7f:
61:67:c8:10
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzFAVSqYaD3vbSy2AaSyAqaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTIzMDQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjFlNzkxZjNhZTgzYWU4YjI2M2UzY2RiNjgyYTM0NzViNTcwN2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEmA5BGj8+qjBrPF3ahcz7NHDGU9
TfRd7EHghyAki18JY1YjCtFf9HNZdJzs227VR92WPrAk6VEqLBTgZD9k4ZE012Fe
A4M1dRmTlj8TYqUMkwXn7LFkW5yXgD1v1QptNsAbPD3YjzqK2uIcUc2ZIHAFp0LX
lQ4/QvDJ4/vdM8ZJ6UT36u7sswwGyD2ZYz2rfslHgI2mC6nI3qOpvFyiihlRU3H+
YfCRqboJfNppyV1UEfm5ln6cXO8IPC7Z4JLxJ9NMVlHP7BzGd4XlKcMpET5TN++/
sUe5c1rbm5lCKCanoTG0NhDIDgPENYnFQH+uatnn6eK7VQ1gNi1Krc3lVwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFHYeeR866DrosmPjzbaCo0dbVwffMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q5L2ZjZDk5
MC03MmY0LTRlYmQtODY0YS05MmU0NTE4NzdkMmMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDkvZmNkOTkw
LTcyZjQtNGViZC04NjRhLTkyZTQ1MTg3N2QyYy8xL2RoNTVIenJvT3VpeVktUE50
b0tqUjF0WEI5OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCTVOwMA0EAgACMAcDBQMqCYWAMA0GCSqGSIb3
DQEBCwUAA4IBAQCvqZa6j7IT/hEeognww+TUN+F1R7B2XKz/l4o3N9JrXiQltCnM
dyrwl0GuZ0NVpeqT0OntpiRZBcGwHwaH24WiTbNdDlT2+IkGnDMKUlhzdAkVAoh2
OGp9zrsSoBCUFA1HvlDB5M9GWPvMLrt3M+Lt5yyTcgqXoSWghMX8+l6/1GKjkpZ/
6Mp04p51rmeWUv9U7XbBvdM2o34gSo/Hm+aVVz4bpgeaBxdaOPfyJNwhjX30e71f
xLZCw4Do4axVModQVagMH5P5FTdQbfqdfmGyc3ZbRHbtbZf+aAUejOYNIB7KSX0p
MMUFGknk4lmB6yd2PhElUnk6E5SiBH9hZ8gQ
-----END CERTIFICATE-----
Generated at Fri May 3 03:25:25 2024 by rpki-client on console-fra.rpki-client.org