Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dz3QNO_lbRI_0h6wQTNQzof28bw.cer
File: dz3QNO_lbRI_0h6wQTNQzof28bw.cer (raw, json)
Hash identifier: qxrl/ID7AC/wmHB4KhwqMTEJ6feIeezJ3lYt7T3KGSs=
Subject key identifier: 77:3D:D0:34:EF:E5:6D:12:3F:D2:1E:B0:41:33:50:CE:87:F6:F1:BC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DD9116A3C4EDF30CDE090B5D215627
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0b/7129e9-12ec-4a76-aa5c-a63ab541effd/1/dz3QNO_lbRI_0h6wQTNQzof28bw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0b/7129e9-12ec-4a76-aa5c-a63ab541effd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:30:13 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.235.34.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:91:16:a3:c4:ed:f3:0c:de:09:0b:5d:21:56:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=773dd034efe56d123fd21eb0413350ce87f6f1bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5f:ed:fc:63:97:30:c9:78:78:4b:de:52:85:
26:b6:34:e8:2c:6b:ca:8a:ec:d9:15:49:32:36:e4:
b4:b8:96:44:c7:9b:a1:1b:25:ed:e0:79:79:c0:bd:
93:d9:5d:5c:7c:0e:28:a9:07:de:0e:b9:c5:b0:5b:
98:d1:6d:8c:f5:42:ea:92:a4:cd:67:b8:a0:7b:7c:
83:d5:a3:d9:f3:2d:4d:79:df:87:3a:40:6d:dd:41:
61:1b:6f:9d:1f:5c:39:b8:42:c5:e1:2a:5e:1c:45:
72:cb:b8:2d:17:2e:72:34:32:9c:2d:20:a6:e2:5e:
7e:73:06:5a:46:0d:57:47:24:24:98:ed:5f:28:5f:
3e:8f:40:47:89:75:d1:89:75:ab:ea:48:5d:c2:43:
4a:c6:f3:ed:41:07:85:1f:4c:bf:93:30:62:0a:4a:
4c:01:18:de:86:38:c5:19:b3:23:1a:cb:08:32:a2:
5c:3b:ec:14:af:53:7c:d1:39:ec:0a:fd:d2:df:61:
9e:67:8e:50:38:a0:0a:fe:62:17:8d:55:1f:0d:5e:
2d:86:38:00:50:06:c7:82:b6:b3:a6:57:2e:ea:f7:
fd:61:79:ba:fa:3c:21:d4:b3:d5:5a:ad:9b:93:d4:
3b:8c:bf:c5:32:d7:ef:79:a8:13:4f:3f:61:d5:b9:
cc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3D:D0:34:EF:E5:6D:12:3F:D2:1E:B0:41:33:50:CE:87:F6:F1:BC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7129e9-12ec-4a76-aa5c-a63ab541effd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7129e9-12ec-4a76-aa5c-a63ab541effd/1/dz3QNO_lbRI_0h6wQTNQzof28bw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.34.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:b0:42:4a:d6:e5:74:59:48:de:2a:94:6f:d7:50:04:0a:22:
d6:19:44:1a:03:1d:50:e0:41:ae:01:fc:d5:49:d2:68:90:4b:
90:46:55:7d:2f:86:80:78:8a:6e:0a:e2:e0:56:1d:4e:7b:89:
89:d6:1a:a1:0f:b7:28:48:32:b5:8c:3f:cc:7a:c8:77:ab:ff:
45:0e:fc:f3:a3:c0:91:55:65:6a:34:6a:74:7a:9a:49:01:41:
15:e6:71:f4:26:30:1e:9b:83:5d:c1:96:1a:04:a4:ef:56:7d:
9f:42:8a:a3:e0:8c:75:86:b8:d8:8f:a9:dc:9e:72:08:2a:a5:
5c:af:68:dc:2d:5b:f4:46:be:86:00:7e:ee:d4:63:fd:f7:8c:
9e:60:db:50:83:26:b6:03:88:7f:6a:9f:bf:be:5a:f3:29:34:
aa:b2:40:bc:83:3d:cb:21:22:e1:a4:c8:9a:71:13:4f:21:04:
be:d3:e2:a0:82:10:53:dd:7c:14:53:ab:cd:fe:f9:8f:26:1b:
d9:ba:6a:11:d6:6f:cf:04:7e:99:a9:8d:0a:27:d7:3d:40:c3:
19:9a:af:52:fb:d6:03:64:41:04:7c:47:34:f7:bb:56:5c:fe:
86:58:ce:e0:65:87:eb:cb:de:e2:94:74:b9:5e:3a:8f:78:19:
be:14:fd:3a
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzI3ZEWo8Tt8wzeCQtdIVYnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDYzMDEzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzNkZDAzNGVmZTU2ZDEyM2ZkMjFlYjA0MTMzNTBjZTg3ZjZmMWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzV/t/GOXMMl4eEveUoUmtjToLGvK
iuzZFUkyNuS0uJZEx5uhGyXt4Hl5wL2T2V1cfA4oqQfeDrnFsFuY0W2M9ULqkqTN
Z7ige3yD1aPZ8y1Ned+HOkBt3UFhG2+dH1w5uELF4SpeHEVyy7gtFy5yNDKcLSCm
4l5+cwZaRg1XRyQkmO1fKF8+j0BHiXXRiXWr6khdwkNKxvPtQQeFH0y/kzBiCkpM
ARjehjjFGbMjGssIMqJcO+wUr1N80TnsCv3S32GeZ45QOKAK/mIXjVUfDV4thjgA
UAbHgrazplcu6vf9YXm6+jwh1LPVWq2bk9Q7jL/FMtfveagTTz9h1bnMowIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFHc90DTv5W0SP9IesEEzUM6H9vG8MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBiLzcxMjll
OS0xMmVjLTRhNzYtYWE1Yy1hNjNhYjU0MWVmZmQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGIvNzEyOWU5
LTEyZWMtNGE3Ni1hYTVjLWE2M2FiNTQxZWZmZC8xL2R6M1FOT19sYlJJXzBoNndR
VE5Rem9mMjhidy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAuesiMA0GCSqGSIb3DQEBCwUAA4IBAQCpsEJK
1uV0WUjeKpRv11AECiLWGUQaAx1Q4EGuAfzVSdJokEuQRlV9L4aAeIpuCuLgVh1O
e4mJ1hqhD7coSDK1jD/Mesh3q/9FDvzzo8CRVWVqNGp0eppJAUEV5nH0JjAem4Nd
wZYaBKTvVn2fQoqj4Ix1hrjYj6ncnnIIKqVcr2jcLVv0Rr6GAH7u1GP994yeYNtQ
gya2A4h/ap+/vlrzKTSqskC8gz3LISLhpMiacRNPIQS+0+KgghBT3XwUU6vN/vmP
JhvZumoR1m/PBH6ZqY0KJ9c9QMMZmq9S+9YDZEEEfEc097tWXP6GWM7gZYfry97i
lHS5XjqPeBm+FP06
-----END CERTIFICATE-----
Generated at Fri May 3 11:50:52 2024 by rpki-client on console-ams.rpki-client.org