Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer
File: dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer (raw, json)
Hash identifier: An8NdO/hmL+N4PTBhvSRyTtNhGB0k+NuhQVUledOAV4=
Subject key identifier: 76:5E:A3:40:0A:37:48:C3:B6:C6:12:68:D4:92:F8:BF:0A:90:82:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2B3BFAA16BFB48352468B41ADCE575
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:34:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 207254
IP: 185.154.220.0/22
IP: 2a0b:6140::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:3b:fa:a1:6b:fb:48:35:24:68:b4:1a:dc:e5:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:34:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=765ea3400a3748c3b6c61268d492f8bf0a908239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1e:44:ae:e4:5c:1a:67:14:14:a3:a3:8c:67:
93:e2:d9:a8:32:80:dd:05:1d:b2:2d:cc:28:0a:4d:
94:7f:8e:ca:b6:bb:e9:a9:a8:82:b4:83:5c:36:c0:
bc:11:e8:49:ae:51:db:bf:ad:07:f6:6a:7c:09:77:
f5:3b:d5:89:fe:53:e7:b7:0e:99:9b:1f:57:32:7c:
33:35:75:3e:df:0a:e3:f7:61:e1:ed:45:9d:6f:80:
bc:b8:eb:f0:dd:8c:1b:50:07:06:06:f6:b6:a5:ab:
9d:78:b5:37:b1:44:7a:25:58:aa:33:b8:fc:bb:cb:
88:69:d2:b3:18:23:41:6b:6a:7b:c3:6a:2e:90:f6:
44:72:20:0a:25:6e:48:5e:8c:54:66:59:4b:cb:55:
e2:91:ee:71:52:8c:7a:d1:32:ea:f8:67:45:45:1a:
14:8b:ae:4f:b1:0c:30:47:01:0c:d1:ed:fe:52:54:
d8:f9:1d:7f:f8:9c:f3:d6:22:54:29:41:65:b4:fc:
c2:15:1e:31:4e:64:15:d9:15:ef:98:9f:fe:ae:62:
59:b5:c6:ae:4c:8b:8d:55:54:d7:1c:bd:0c:3e:94:
cc:64:0e:90:3a:55:c3:c4:50:29:55:5d:8d:6f:5a:
9e:96:08:ec:f6:0e:3f:3c:67:8c:33:a3:28:5e:f3:
18:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:5E:A3:40:0A:37:48:C3:B6:C6:12:68:D4:92:F8:BF:0A:90:82:39
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.220.0/22
IPv6:
2a0b:6140::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207254
Signature Algorithm: sha256WithRSAEncryption
48:9a:00:0b:0d:d7:f1:58:85:67:f7:5d:ca:9a:a5:f1:f2:16:
92:80:e3:7d:42:53:07:7f:65:bc:62:5a:9e:83:35:0a:0b:37:
a9:ad:5b:73:6a:bc:e4:45:f0:54:71:6f:a1:d7:0c:51:fd:f2:
bd:a8:8e:69:04:4b:37:b9:fb:c1:44:ac:f8:e9:80:32:b8:2c:
2b:d7:ef:25:18:e3:d6:cb:78:9b:e7:9d:15:e3:9b:c4:c5:80:
a8:24:2f:8e:73:6a:cd:f5:4b:f2:62:2f:6d:e2:f0:67:0f:db:
fe:53:d1:92:d0:6e:d1:5c:72:87:dc:f3:3d:b2:0c:d6:5f:54:
79:2e:c9:2b:90:f9:34:e2:ac:e8:cb:73:25:e0:73:64:9b:fd:
1f:cb:64:7c:01:bc:2b:16:89:46:bb:5a:cb:19:f5:fc:ac:1a:
bf:3b:a8:f4:08:b6:b4:32:3d:93:3c:cb:6a:ca:c3:eb:64:46:
4d:52:26:18:9a:6b:38:c6:a3:c6:f5:5f:f0:d9:ae:92:f0:3b:
32:27:df:54:31:4d:49:26:57:e1:a2:37:e5:ab:dd:b7:1c:10:
4e:c0:cf:63:bc:33:c5:8d:15:39:c8:d0:f1:15:c7:41:0f:a7:
03:8d:47:3a:bf:32:46:71:60:4e:e5:9a:31:d5:35:09:b4:bb:
2f:5a:1d:29
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzKKzv6oWv7SDUkaLQa3OV1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTIzNDQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjVlYTM0MDBhMzc0OGMzYjZjNjEyNjhkNDkyZjhiZjBhOTA4MjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoB5EruRcGmcUFKOjjGeT4tmoMoDd
BR2yLcwoCk2Uf47KtrvpqaiCtINcNsC8EehJrlHbv60H9mp8CXf1O9WJ/lPntw6Z
mx9XMnwzNXU+3wrj92Hh7UWdb4C8uOvw3YwbUAcGBva2paudeLU3sUR6JViqM7j8
u8uIadKzGCNBa2p7w2oukPZEciAKJW5IXoxUZllLy1Xike5xUox60TLq+GdFRRoU
i65PsQwwRwEM0e3+UlTY+R1/+Jzz1iJUKUFltPzCFR4xTmQV2RXvmJ/+rmJZtcau
TIuNVVTXHL0MPpTMZA6QOlXDxFApVV2Nb1qelgjs9g4/PGeMM6MoXvMYcQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFHZeo0AKN0jDtsYSaNSS+L8KkII5MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY1Lzc0ZTE1
Zi1mNDg3LTQ1NTktYmZkZC0wZmM1OGU1OGNhYzkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUvNzRlMTVm
LWY0ODctNDU1OS1iZmRkLTBmYzU4ZTU4Y2FjOS8xL2RsNmpRQW8zU01PMnhoSm8x
Skw0dndxUWdqay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuZrcMA0EAgACMAcDBQMqC2FAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMpljANBgkqhkiG9w0BAQsFAAOCAQEASJoACw3X8ViF
Z/ddypql8fIWkoDjfUJTB39lvGJanoM1Cgs3qa1bc2q85EXwVHFvodcMUf3yvaiO
aQRLN7n7wUSs+OmAMrgsK9fvJRjj1st4m+edFeObxMWAqCQvjnNqzfVL8mIvbeLw
Zw/b/lPRktBu0Vxyh9zzPbIM1l9UeS7JK5D5NOKs6MtzJeBzZJv9H8tkfAG8KxaJ
Rrtayxn1/Kwavzuo9Ai2tDI9kzzLasrD62RGTVImGJprOMajxvVf8NmukvA7Miff
VDFNSSZX4aI35avdtxwQTsDPY7wzxY0VOcjQ8RXHQQ+nA41HOr8yRnFgTuWaMdU1
CbS7L1odKQ==
-----END CERTIFICATE-----
Generated at Fri May 3 07:18:23 2024 by rpki-client on console-ams.rpki-client.org