Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g0hoQbT0rcViZMWWMIUYKiIORtQ.cer
File: g0hoQbT0rcViZMWWMIUYKiIORtQ.cer (raw, json)
Hash identifier: KZaev3kMSna2JJM00Dz2GDqttIuhioF3TgnI7SmH6Ow=
Subject key identifier: 83:48:68:41:B4:F4:AD:C5:62:64:C5:96:30:85:18:2A:22:0E:46:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018EA96BBFF42CE6CA432F642D07114FCC3F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 04 Apr 2024 14:03:14 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 206035
IP: 185.148.188.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a9:6b:bf:f4:2c:e6:ca:43:2f:64:2d:07:11:4f:cc:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 4 14:03:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83486841b4f4adc56264c5963085182a220e46d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:79:c0:f6:50:56:8a:30:10:e8:d2:75:d8:a5:
6a:28:87:a8:a9:0c:d4:36:3c:ea:5a:60:91:81:3f:
7b:dc:e6:7e:28:54:53:fb:d8:85:da:17:7c:9c:fd:
1c:78:38:ca:3c:8e:27:91:12:26:29:11:6a:d6:43:
86:8f:a4:94:56:c8:56:72:3b:8d:27:4d:bf:5d:90:
53:69:46:4d:55:df:12:20:fa:89:e0:f4:d6:80:99:
ca:7f:4a:03:1a:4a:8d:cd:de:c4:a6:2b:05:67:9b:
e2:fb:a8:29:4d:20:99:39:56:43:2b:f0:86:fb:76:
99:84:57:f4:af:67:e3:a2:f1:14:09:94:a7:03:d8:
77:3a:be:57:55:60:c6:47:b0:1e:72:9b:01:f9:dc:
6e:44:94:d6:f1:49:f4:8d:37:84:46:2d:bf:ce:8d:
09:e8:49:41:ef:ee:ed:c1:e2:22:00:04:e3:bc:e6:
42:38:61:a2:93:59:f0:05:fb:c0:cf:51:f9:ea:b9:
bd:1a:ad:2f:96:48:1e:0f:c1:86:11:79:fd:84:3f:
73:20:1c:6b:ff:9d:da:6e:74:62:95:c0:86:ed:cc:
54:37:c9:76:1a:46:54:ab:26:73:48:8e:8b:65:c5:
a7:23:28:46:4c:ca:22:f2:24:99:b8:d7:3c:08:6c:
a2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:48:68:41:B4:F4:AD:C5:62:64:C5:96:30:85:18:2A:22:0E:46:D4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.188.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206035
Signature Algorithm: sha256WithRSAEncryption
7e:e2:aa:d9:96:bc:2f:02:16:5f:34:b9:35:a6:6a:fa:df:81:
9b:ee:3c:97:d2:11:c9:4b:73:75:3b:25:6b:12:0d:3c:2a:06:
ee:e3:80:b4:13:13:31:36:d4:f6:a7:84:47:39:7c:ae:a5:46:
77:4c:d1:7d:4d:6f:f1:40:0f:c5:4f:a6:85:56:e8:d1:ce:60:
32:35:f6:9c:cd:64:36:e1:18:da:81:28:43:cb:6b:b2:8c:b2:
e7:57:c6:50:b4:79:81:ae:b7:4d:6c:8f:86:a1:8e:ca:aa:df:
74:8e:73:8e:fa:f3:33:eb:cf:61:8e:a6:56:f9:cf:27:f0:b6:
b1:30:8e:09:c3:6f:b3:20:0f:9a:2f:36:c8:50:7d:86:8b:8c:
aa:ac:5f:73:2e:6e:b5:34:3c:7e:a5:dd:1e:47:23:9a:aa:26:
9a:23:96:90:c9:3f:b4:a0:80:6a:92:f4:31:12:9c:7d:0f:c3:
61:fb:aa:81:6e:de:2a:b8:96:e7:93:cf:4f:fb:0f:8b:3b:77:
17:6f:8e:c3:93:ea:15:50:fa:4a:1c:5d:1c:e8:d3:f5:7c:6f:
a9:11:4a:91:0d:a4:bf:ae:13:0e:e1:e7:00:3f:92:ac:a4:d2:
5f:3b:0c:d9:63:2c:37:a0:f4:e7:05:1b:88:6f:80:f2:e2:22:
17:49:70:5b
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAY6pa7/0LObKQy9kLQcRT8w/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNDA0MTQwMzE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzQ4Njg0MWI0ZjRhZGM1NjI2NGM1OTYzMDg1MTgyYTIyMGU0NmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnnA9lBWijAQ6NJ12KVqKIeoqQzU
NjzqWmCRgT973OZ+KFRT+9iF2hd8nP0ceDjKPI4nkRImKRFq1kOGj6SUVshWcjuN
J02/XZBTaUZNVd8SIPqJ4PTWgJnKf0oDGkqNzd7EpisFZ5vi+6gpTSCZOVZDK/CG
+3aZhFf0r2fjovEUCZSnA9h3Or5XVWDGR7AecpsB+dxuRJTW8Un0jTeERi2/zo0J
6ElB7+7tweIiAATjvOZCOGGik1nwBfvAz1H56rm9Gq0vlkgeD8GGEXn9hD9zIBxr
/53abnRilcCG7cxUN8l2GkZUqyZzSI6LZcWnIyhGTMoi8iSZuNc8CGyidwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFINIaEG09K3FYmTFljCFGCoiDkbUMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MyLzU3Y2Iw
NC01OGNlLTQzM2ItOTNhYi0xMGJjNTlkOGZmOGQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzIvNTdjYjA0
LTU4Y2UtNDMzYi05M2FiLTEwYmM1OWQ4ZmY4ZC8xL2cwaG9RYlQwcmNWaVpNV1dN
SVVZS2lJT1J0US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCuZS8MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwMk0zANBgkqhkiG9w0BAQsFAAOCAQEAfuKq2Za8LwIWXzS5NaZq+t+Bm+48l9IR
yUtzdTslaxINPCoG7uOAtBMTMTbU9qeERzl8rqVGd0zRfU1v8UAPxU+mhVbo0c5g
MjX2nM1kNuEY2oEoQ8trsoyy51fGULR5ga63TWyPhqGOyqrfdI5zjvrzM+vPYY6m
VvnPJ/C2sTCOCcNvsyAPmi82yFB9houMqqxfcy5utTQ8fqXdHkcjmqommiOWkMk/
tKCAapL0MRKcfQ/DYfuqgW7eKriW55PPT/sPizt3F2+Ow5PqFVD6ShxdHOjT9Xxv
qRFKkQ2kv64TDuHnAD+SrKTSXzsM2WMsN6D05wUbiG+A8uIiF0lwWw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 11:02:10 2024 by rpki-client on console-ams.rpki-client.org