Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3BJpbLfBi_E4RlYQGU8P1kgySE.cer
File: f3BJpbLfBi_E4RlYQGU8P1kgySE.cer (raw, json)
Hash identifier: hmlbRoNVUBG8LFWDpfWxBx40x2u32tusHcCXZugUJ1c=
Subject key identifier: 7F:70:49:A5:B2:DF:06:2F:C4:E1:19:58:40:65:3C:3F:59:20:C9:21
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC4D528F25633D2B4450DF94D3BC14
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a9/a3b09c-a94a-46e5-a776-f40ed501f1df/1/f3BJpbLfBi_E4RlYQGU8P1kgySE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a9/a3b09c-a94a-46e5-a776-f40ed501f1df/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:58 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.79.224.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:4d:52:8f:25:63:3d:2b:44:50:df:94:d3:bc:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f7049a5b2df062fc4e1195840653c3f5920c921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7d:80:47:e2:75:b0:c0:98:45:d2:e6:c0:a1:
5b:a4:0e:74:63:c2:bc:8a:24:0e:9a:c9:76:6f:d1:
e9:47:c7:26:ec:87:89:f3:49:c7:64:f8:4f:e9:cf:
53:47:84:3a:bc:ff:9e:49:9d:23:1d:ac:3f:92:4a:
8f:a2:e3:49:03:f9:85:f4:ee:ce:0f:de:0d:b0:04:
fa:65:7e:e5:ff:08:2a:62:09:5f:9d:65:37:98:ab:
dd:75:7b:4f:e5:3f:1b:27:ab:70:03:72:50:41:c3:
cd:38:6b:a2:6f:2e:70:47:2f:f1:1c:15:4d:9b:e5:
41:e0:03:45:0e:32:53:2d:57:b0:44:8a:dd:16:44:
60:9f:fa:29:9c:ef:73:a9:ea:0c:e3:e5:ca:e4:10:
ae:ec:54:9b:1d:0d:97:0d:47:19:87:8f:6e:f5:84:
ac:65:9d:c2:f8:af:0c:c4:ce:14:95:6a:91:0f:93:
d3:38:db:10:93:d0:e6:f7:02:16:f0:a5:c1:5c:c6:
ab:41:46:29:b1:85:7b:34:d8:f8:ac:20:c8:02:68:
a8:fd:97:1f:68:7b:4d:92:e8:4a:b0:be:2b:8b:af:
54:9c:a4:29:d1:7d:b1:2b:96:01:40:c4:66:62:62:
64:7e:c2:d5:f8:61:85:20:70:65:2e:c0:70:a7:a9:
9b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:70:49:A5:B2:DF:06:2F:C4:E1:19:58:40:65:3C:3F:59:20:C9:21
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a3b09c-a94a-46e5-a776-f40ed501f1df/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a3b09c-a94a-46e5-a776-f40ed501f1df/1/f3BJpbLfBi_E4RlYQGU8P1kgySE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.79.224.0/20
Signature Algorithm: sha256WithRSAEncryption
66:d3:d2:99:43:e6:a5:b9:35:b3:31:a8:53:70:29:3f:99:21:
f2:16:6b:b8:7b:26:de:fa:dd:59:3a:83:2f:eb:a3:34:db:c4:
df:b4:56:10:1c:64:3c:3b:d6:0a:38:87:15:2b:b8:2f:13:51:
ad:3b:aa:22:a9:9e:9c:f8:07:49:d5:3f:82:b0:d2:a4:5d:4d:
b3:04:72:f1:a9:a8:d4:6b:35:09:9d:09:b6:dc:9e:1a:80:a9:
ec:d0:e9:32:2a:11:11:d0:c1:75:4d:78:c4:9b:74:f4:40:d1:
ac:96:92:e7:ed:3f:ef:dc:b4:78:98:f5:f6:aa:01:f3:65:19:
0d:d1:c1:aa:20:28:32:71:e6:73:6d:ab:ee:53:81:58:08:e2:
9e:c6:53:89:be:10:c8:96:af:5e:88:59:56:ca:2e:29:ef:0d:
d6:ae:1a:3a:84:89:20:f4:6a:ad:0e:ff:6c:8a:b1:7a:10:04:
bf:9e:4d:5d:c0:73:64:24:fd:2f:7c:d1:62:56:37:3b:7c:29:
69:df:50:88:27:be:9c:c4:61:d7:fb:d1:17:f9:3f:00:24:d9:
0f:fe:9b:f2:d7:ba:d6:2c:0f:2b:a4:86:6e:8c:14:e3:a5:09:
3e:4f:71:4d:17:2f:b9:00:6e:16:7a:98:69:91:2d:5b:2b:d2:
f8:a4:5d:0f
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzF3E1SjyVjPStEUN+U07wUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTYyOTU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjcwNDlhNWIyZGYwNjJmYzRlMTE5NTg0MDY1M2MzZjU5MjBjOTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx32AR+J1sMCYRdLmwKFbpA50Y8K8
iiQOmsl2b9HpR8cm7IeJ80nHZPhP6c9TR4Q6vP+eSZ0jHaw/kkqPouNJA/mF9O7O
D94NsAT6ZX7l/wgqYglfnWU3mKvddXtP5T8bJ6twA3JQQcPNOGuiby5wRy/xHBVN
m+VB4ANFDjJTLVewRIrdFkRgn/opnO9zqeoM4+XK5BCu7FSbHQ2XDUcZh49u9YSs
ZZ3C+K8MxM4UlWqRD5PTONsQk9Dm9wIW8KXBXMarQUYpsYV7NNj4rCDIAmio/Zcf
aHtNkuhKsL4ri69UnKQp0X2xK5YBQMRmYmJkfsLV+GGFIHBlLsBwp6mbDwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFH9wSaWy3wYvxOEZWEBlPD9ZIMkhMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E5L2EzYjA5
Yy1hOTRhLTQ2ZTUtYTc3Ni1mNDBlZDUwMWYxZGYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTkvYTNiMDlj
LWE5NGEtNDZlNS1hNzc2LWY0MGVkNTAxZjFkZi8xL2YzQkpwYkxmQmlfRTRSbFlR
R1U4UDFrZ3lTRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQEwk/gMA0GCSqGSIb3DQEBCwUAA4IBAQBm09KZ
Q+aluTWzMahTcCk/mSHyFmu4eybe+t1ZOoMv66M028TftFYQHGQ8O9YKOIcVK7gv
E1GtO6oiqZ6c+AdJ1T+CsNKkXU2zBHLxqajUazUJnQm23J4agKns0OkyKhER0MF1
TXjEm3T0QNGslpLn7T/v3LR4mPX2qgHzZRkN0cGqICgyceZzbavuU4FYCOKexlOJ
vhDIlq9eiFlWyi4p7w3Wrho6hIkg9GqtDv9sirF6EAS/nk1dwHNkJP0vfNFiVjc7
fClp31CIJ76cxGHX+9EX+T8AJNkP/pvy17rWLA8rpIZujBTjpQk+T3FNFy+5AG4W
ephpkS1bK9L4pF0P
-----END CERTIFICATE-----
Generated at Fri May 3 10:47:29 2024 by rpki-client on console-fra.rpki-client.org