Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3NriKAkBNQwS92tX_VQSmgz57c.cer
File: f3NriKAkBNQwS92tX_VQSmgz57c.cer (raw, json)
Hash identifier: 2ZrsZ5mTMtzI7tuhV85jWTJkWYftZF2sP7GHrDzzczc=
Subject key identifier: 7F:73:6B:88:A0:24:04:D4:30:4B:DD:AD:5F:F5:50:4A:68:33:E7:B7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86F0992291747A7BC085F4DFC76756A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:29:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.151.8.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:09:92:29:17:47:a7:bc:08:5f:4d:fc:76:75:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f736b88a02404d4304bddad5ff5504a6833e7b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0c:2c:f2:5b:20:63:96:cf:2b:2b:c9:7c:2f:
1a:50:07:af:17:e4:19:ff:89:22:fb:c9:87:6e:04:
9d:c3:89:ed:8e:40:88:3f:11:36:24:06:d8:10:2c:
ac:6b:eb:42:df:5d:be:b1:2a:32:80:12:5a:dd:2e:
0b:a6:c8:3b:ab:b7:21:dd:d5:05:ca:7c:d5:04:40:
b8:e6:82:a5:b0:c8:9f:5d:4e:c1:a2:22:60:a4:d2:
a3:dc:2a:d7:b4:e6:f5:cc:40:9d:9f:75:4a:b0:72:
39:9c:05:f6:bd:4f:5e:80:27:0b:4c:9d:ec:de:65:
7c:d7:c6:c4:d4:25:48:2d:61:da:56:ca:7d:b3:01:
8b:bd:c1:4b:6b:0e:4d:41:1c:d4:91:ea:3c:f7:f2:
eb:77:bc:bd:7a:51:04:e6:50:44:45:e8:02:9c:41:
46:34:82:17:7a:ae:0e:d4:cf:9f:c3:ba:98:ae:ce:
73:ea:63:b0:a7:1f:e7:46:53:0d:b5:34:f9:71:91:
7b:13:72:fe:68:78:64:d4:16:c7:ba:fc:c7:00:55:
3f:70:59:40:86:fc:1c:53:2a:76:28:21:2a:e4:b9:
20:ee:30:fe:52:d6:9e:d6:da:a9:9b:fe:e8:9c:44:
02:23:2f:27:f8:73:35:27:df:ab:d0:75:a1:45:36:
f4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:73:6B:88:A0:24:04:D4:30:4B:DD:AD:5F:F5:50:4A:68:33:E7:B7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.8.0/22
Signature Algorithm: sha256WithRSAEncryption
32:16:09:c6:8a:a1:b1:6d:e1:f1:4f:c6:35:39:66:68:21:41:
59:80:ce:b8:9c:30:33:5c:95:2c:d6:08:cd:01:f2:53:c2:57:
8b:95:4a:65:59:8e:06:08:05:15:ae:2f:c9:35:f1:b1:b6:50:
99:44:a2:f9:ad:89:98:a2:43:8a:b2:b4:cf:b0:df:47:ad:3e:
24:20:50:9d:d2:70:e2:e0:eb:fb:ac:58:1a:9f:3b:b5:3d:c0:
f4:c5:7d:7b:d1:ff:2d:93:52:1f:cb:fa:0b:7a:2d:e0:ff:bd:
67:19:23:9c:fd:84:fa:22:fb:5c:5a:20:c3:94:31:7b:07:f0:
b8:ad:fd:04:56:3d:95:8a:b7:fc:d1:a3:98:24:f0:40:6b:44:
92:7c:fb:da:2e:8c:61:09:b1:9c:56:2e:d7:20:7c:80:bd:23:
94:66:13:11:14:b6:84:70:9f:79:7c:39:6e:97:3a:6e:13:ed:
3f:d8:e1:84:9b:93:ff:31:64:c2:32:51:3f:79:7f:24:8c:ab:
50:cf:31:60:9e:04:03:d0:72:7d:29:1e:95:dc:70:16:c9:43:
e0:9c:89:7a:6a:61:e8:a6:81:a2:09:7b:ba:f1:f3:0e:59:5e:
85:e9:37:2f:e9:3b:11:c6:1d:a8:eb:5d:9e:a9:77:10:84:e7:
cc:b7:73:b5
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzIbwmSKRdHp7wIX038dnVqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDQyOTI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjczNmI4OGEwMjQwNGQ0MzA0YmRkYWQ1ZmY1NTA0YTY4MzNlN2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQws8lsgY5bPKyvJfC8aUAevF+QZ
/4ki+8mHbgSdw4ntjkCIPxE2JAbYECysa+tC312+sSoygBJa3S4Lpsg7q7ch3dUF
ynzVBEC45oKlsMifXU7BoiJgpNKj3CrXtOb1zECdn3VKsHI5nAX2vU9egCcLTJ3s
3mV818bE1CVILWHaVsp9swGLvcFLaw5NQRzUkeo89/Lrd7y9elEE5lBERegCnEFG
NIIXeq4O1M+fw7qYrs5z6mOwpx/nRlMNtTT5cZF7E3L+aHhk1BbHuvzHAFU/cFlA
hvwcUyp2KCEq5Lkg7jD+Utae1tqpm/7onEQCIy8n+HM1J9+r0HWhRTb05QIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFH9za4igJATUMEvdrV/1UEpoM+e3MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk5LzBmMjVj
ZS1iOTc3LTQ4NTMtOWVjMy05ZTU2Y2I1NGZlZjcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkvMGYyNWNl
LWI5NzctNDg1My05ZWMzLTllNTZjYjU0ZmVmNy8xL2YzTnJpS0FrQk5Rd1M5MnRY
X1ZRU21nejU3Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCwZcIMA0GCSqGSIb3DQEBCwUAA4IBAQAyFgnG
iqGxbeHxT8Y1OWZoIUFZgM64nDAzXJUs1gjNAfJTwleLlUplWY4GCAUVri/JNfGx
tlCZRKL5rYmYokOKsrTPsN9HrT4kIFCd0nDi4Ov7rFganzu1PcD0xX170f8tk1If
y/oLei3g/71nGSOc/YT6IvtcWiDDlDF7B/C4rf0EVj2Virf80aOYJPBAa0SSfPva
LoxhCbGcVi7XIHyAvSOUZhMRFLaEcJ95fDlulzpuE+0/2OGEm5P/MWTCMlE/eX8k
jKtQzzFgngQD0HJ9KR6V3HAWyUPgnIl6amHopoGiCXu68fMOWV6F6Tcv6TsRxh2o
612eqXcQhOfMt3O1
-----END CERTIFICATE-----
Generated at Fri May 3 03:31:17 2024 by rpki-client on console-fra.rpki-client.org