Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
File: feY3584h1skbVKBojiD5JBYiIjc.cer (raw, json)
Hash identifier: nr9lqhgRzfHqjm6zqM3J7ovrWiVy7Q4rXe1JDCbQXE8=
Subject key identifier: 7D:E6:37:E7:CE:21:D6:C9:1B:54:A0:68:8E:20:F9:24:16:22:22:37
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DCD50FA8D703E861D75FF9B500C0C7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:30:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211104
IP: 185.182.156.0/24
IP: 2a10:fec0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:d5:0f:a8:d7:03:e8:61:d7:5f:f9:b5:00:c0:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7de637e7ce21d6c91b54a0688e20f92416222237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2b:4f:d0:dd:90:23:e9:76:a7:de:df:b8:ca:
3d:c3:ff:72:97:f8:04:eb:a6:6b:d1:a3:26:b3:12:
d4:78:bd:76:2b:f9:c1:96:89:36:af:4c:d6:28:f7:
52:99:cf:cb:4f:b7:66:d6:6e:36:66:88:3a:1b:75:
03:2c:2b:59:eb:cc:c0:c7:fa:f3:4e:33:55:52:85:
ab:78:a3:be:55:16:42:4e:27:c9:d7:59:22:6f:e6:
11:db:56:98:46:40:47:cd:27:aa:b3:24:ba:67:77:
16:e8:11:e3:0d:2f:8c:af:f4:fc:54:b6:f2:50:18:
60:72:77:ec:af:80:c9:e2:1c:45:71:34:f3:80:0c:
b1:8b:be:0a:8a:97:ca:2a:1a:c1:1c:eb:70:a7:4f:
b6:cd:21:5c:b0:b2:3a:1b:e2:19:7b:db:10:c0:83:
96:ff:8d:fa:ef:fe:2c:65:bb:60:56:e0:67:9a:da:
4c:9a:b0:94:fc:91:ab:6b:b5:f9:a4:cf:82:1c:08:
36:03:63:91:9b:af:53:30:d2:09:3c:bc:ba:92:b2:
90:10:6e:bc:01:57:a6:aa:00:d5:1c:32:a1:6c:d1:
48:be:e5:80:96:4d:af:e9:07:0c:f7:89:cf:56:23:
13:47:bd:f9:65:6b:e4:26:e6:65:5b:98:c0:59:59:
89:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E6:37:E7:CE:21:D6:C9:1B:54:A0:68:8E:20:F9:24:16:22:22:37
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.156.0/24
IPv6:
2a10:fec0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211104
Signature Algorithm: sha256WithRSAEncryption
a2:83:45:c1:5f:17:44:b7:cc:5b:b8:b8:48:17:fe:07:f4:1e:
37:6e:43:6a:06:7f:69:da:76:9c:f5:2b:dc:4f:36:d2:dc:d3:
ee:f9:73:47:1d:73:39:9b:98:f1:b3:8e:f5:80:65:6f:b1:d2:
ee:37:eb:74:71:8e:e3:66:c5:ed:94:bb:84:11:5c:d4:31:47:
ad:9a:77:a2:26:76:4c:7d:f9:39:8f:81:54:64:f0:7e:e7:8b:
74:81:56:d3:74:13:63:78:b6:3b:e4:7b:a7:3e:ac:9a:79:26:
be:d4:04:3f:5a:5d:96:cb:2c:3a:51:19:25:3f:a6:44:32:40:
a1:21:47:b8:02:36:32:e2:11:1c:95:7f:6b:87:60:23:5e:a7:
33:20:1f:1c:45:d7:2c:2c:18:37:dc:44:d6:81:e7:71:a8:91:
a2:bd:48:b8:2f:79:96:89:ab:6d:3f:27:dc:cf:4b:38:77:0a:
05:22:81:78:3d:66:70:96:36:05:02:85:f6:e7:ed:58:4c:05:
62:58:39:db:15:ce:55:69:cc:16:36:11:1c:98:26:71:6d:75:
42:48:30:b0:61:5f:41:97:87:c7:9c:86:2a:dd:f1:4f:4e:15:
b1:f9:56:84:1f:34:6d:fb:00:9c:fb:58:25:25:cb:85:e9:67:
b8:70:79:8a
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzF3NUPqNcD6GHXX/m1AMDHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTYzMDMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZGU2MzdlN2NlMjFkNmM5MWI1NGEwNjg4ZTIwZjkyNDE2MjIyMjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApytP0N2QI+l2p97fuMo9w/9yl/gE
66Zr0aMmsxLUeL12K/nBlok2r0zWKPdSmc/LT7dm1m42Zog6G3UDLCtZ68zAx/rz
TjNVUoWreKO+VRZCTifJ11kib+YR21aYRkBHzSeqsyS6Z3cW6BHjDS+Mr/T8VLby
UBhgcnfsr4DJ4hxFcTTzgAyxi74KipfKKhrBHOtwp0+2zSFcsLI6G+IZe9sQwIOW
/4367/4sZbtgVuBnmtpMmrCU/JGra7X5pM+CHAg2A2ORm69TMNIJPLy6krKQEG68
AVemqgDVHDKhbNFIvuWAlk2v6QcM94nPViMTR735ZWvkJuZlW5jAWVmJQQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFH3mN+fOIdbJG1SgaI4g+SQWIiI3MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBlLzdkZDQ4
Yi0zMzFmLTQ1N2EtODQ5ZC0wMzk2MWUyYjA2MDEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGUvN2RkNDhi
LTMzMWYtNDU3YS04NDlkLTAzOTYxZTJiMDYwMS8xL2ZlWTM1ODRoMXNrYlZLQm9q
aUQ1SkJZaUlqYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAubacMA0EAgACMAcDBQMqEP7AMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM4oDANBgkqhkiG9w0BAQsFAAOCAQEAooNFwV8XRLfM
W7i4SBf+B/QeN25DagZ/adp2nPUr3E820tzT7vlzRx1zOZuY8bOO9YBlb7HS7jfr
dHGO42bF7ZS7hBFc1DFHrZp3oiZ2TH35OY+BVGTwfueLdIFW03QTY3i2O+R7pz6s
mnkmvtQEP1pdlsssOlEZJT+mRDJAoSFHuAI2MuIRHJV/a4dgI16nMyAfHEXXLCwY
N9xE1oHncaiRor1IuC95lomrbT8n3M9LOHcKBSKBeD1mcJY2BQKF9uftWEwFYlg5
2xXOVWnMFjYRHJgmcW11QkgwsGFfQZeHx5yGKt3xT04VsflWhB80bfsAnPtYJSXL
helnuHB5ig==
-----END CERTIFICATE-----
Generated at Fri May 3 03:34:21 2024 by rpki-client on console-fra.rpki-client.org