Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
File: fC4N6VOoXYdf1kZKwSNQcr95xto.cer (raw, json)
Hash identifier: HIAdWLYIGt3yzmcmpxiK8sTmvv8WNfcO6yERGLpB1cw=
Subject key identifier: 7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D456E8DC724737C591F05C43F644420D9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 26 Jan 2024 11:01:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.147.73.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:45:6e:8d:c7:24:73:7c:59:1f:05:c4:3f:64:44:20:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 26 11:01:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c2e0de953a85d875fd6464ac1235072bf79c6da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:df:42:01:cd:f3:62:50:97:4f:40:77:53:4e:
e6:29:cc:23:e5:41:62:6b:e0:60:b1:d4:69:d1:61:
ad:0c:68:d9:a7:ea:bf:90:ca:c2:c8:c9:3e:6c:69:
be:7f:79:6e:84:38:3e:0f:04:f6:d0:ea:41:32:b2:
36:8f:53:5b:63:69:0c:ac:cd:35:b6:14:e0:de:89:
af:19:9c:a5:d5:9e:8c:1b:a6:8a:f1:5f:a7:15:9d:
4a:2f:0e:5d:cc:5c:e7:f0:16:8e:5f:2f:e9:9b:2c:
ec:a8:85:f0:23:6a:5f:bd:e6:10:2d:73:30:0e:e9:
40:5e:db:40:09:7e:90:93:d6:d1:89:a6:59:21:12:
c9:4e:3b:5b:88:a1:ac:57:0b:e9:cf:a8:4c:f9:50:
da:f2:97:7a:ed:87:77:56:8d:53:8b:ae:cd:fd:f2:
07:5b:b4:dd:3c:aa:46:a8:64:67:b0:c1:ff:8c:3b:
8d:e9:65:a7:76:bc:a4:00:09:da:86:78:09:09:02:
62:a8:87:37:6b:ac:c6:67:78:8f:10:83:86:04:02:
51:af:62:f5:f4:c1:ed:a2:d2:f5:d4:36:fc:f5:b2:
59:95:14:ba:a1:4b:e4:6e:fb:53:4e:35:28:8b:7f:
a1:4a:ff:8a:83:5e:5a:ca:7d:32:26:d5:0d:a7:99:
5f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.73.0/24
Signature Algorithm: sha256WithRSAEncryption
23:9d:d6:6a:c6:72:28:76:38:65:89:29:e5:d2:f6:b2:46:88:
ff:03:44:cb:ea:43:b7:d5:0e:b5:7f:b3:a7:4f:ff:18:b1:6e:
1a:43:59:15:54:86:2c:59:bd:1b:12:e9:59:bc:bc:02:fb:9c:
46:ea:0c:4d:dc:4e:3b:3c:8c:95:26:a2:43:ff:e7:d7:69:d4:
d7:03:c8:b5:32:94:b7:6f:18:87:66:a8:50:dd:51:eb:b0:d6:
ec:da:6e:4b:d4:25:dc:60:79:74:df:9f:70:5a:ec:e1:fa:24:
67:37:3a:cf:0d:f3:b1:02:3d:ef:d3:d0:b0:d1:c5:51:da:e6:
68:7c:fe:4d:21:e4:47:86:23:41:9f:5c:0e:b5:2a:f9:61:92:
20:6d:8f:ea:c0:db:c0:7d:b7:cb:c4:d8:95:77:cd:f8:e6:19:
58:a0:42:e8:97:0a:23:f1:4f:03:65:f0:cf:82:a3:62:9e:bf:
5e:ac:30:cc:52:83:d8:1c:7e:a1:28:56:2e:9b:fe:9d:cb:31:
01:bd:78:49:39:b7:e6:41:fe:d0:17:8e:6b:b6:05:1a:2c:89:
67:bf:d0:ca:4f:2e:66:55:72:5e:8a:64:cb:64:1a:a4:30:eb:
1e:6d:8d:47:16:1e:92:a1:65:2f:fe:dd:25:df:44:8c:53:80:
60:c6:51:25
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAY1Fbo3HJHN8WR8FxD9kRCDZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTI2MTEwMTI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzJlMGRlOTUzYTg1ZDg3NWZkNjQ2NGFjMTIzNTA3MmJmNzljNmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxN9CAc3zYlCXT0B3U07mKcwj5UFi
a+BgsdRp0WGtDGjZp+q/kMrCyMk+bGm+f3luhDg+DwT20OpBMrI2j1NbY2kMrM01
thTg3omvGZyl1Z6MG6aK8V+nFZ1KLw5dzFzn8BaOXy/pmyzsqIXwI2pfveYQLXMw
DulAXttACX6Qk9bRiaZZIRLJTjtbiKGsVwvpz6hM+VDa8pd67Yd3Vo1Ti67N/fIH
W7TdPKpGqGRnsMH/jDuN6WWndrykAAnahngJCQJiqIc3a6zGZ3iPEIOGBAJRr2L1
9MHtotL11Db89bJZlRS6oUvkbvtTTjUoi3+hSv+Kg15ayn0yJtUNp5lfBQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFHwuDelTqF2HX9ZGSsEjUHK/ecbaMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IyL2QxYzg4
MS1lYjc1LTQ0MTMtOGI2NC1kNjBhYTczM2NkMTAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjIvZDFjODgx
LWViNzUtNDQxMy04YjY0LWQ2MGFhNzMzY2QxMC8xL2ZDNE42Vk9vWFlkZjFrWkt3
U05RY3I5NXh0by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwpNJMA0GCSqGSIb3DQEBCwUAA4IBAQAjndZq
xnIodjhliSnl0vayRoj/A0TL6kO31Q61f7OnT/8YsW4aQ1kVVIYsWb0bEulZvLwC
+5xG6gxN3E47PIyVJqJD/+fXadTXA8i1MpS3bxiHZqhQ3VHrsNbs2m5L1CXcYHl0
359wWuzh+iRnNzrPDfOxAj3v09Cw0cVR2uZofP5NIeRHhiNBn1wOtSr5YZIgbY/q
wNvAfbfLxNiVd8345hlYoELolwoj8U8DZfDPgqNinr9erDDMUoPYHH6hKFYum/6d
yzEBvXhJObfmQf7QF45rtgUaLIlnv9DKTy5mVXJeimTLZBqkMOsebY1HFh6SoWUv
/t0l30SMU4BgxlEl
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:18:45 2024 by rpki-client on console-fra.rpki-client.org