Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
File: gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer (raw, json)
Hash identifier: WDKGMDMhTSfyVCjORv+aRJRlm0h6bSDMU9rYrdgC6SI=
Subject key identifier: 80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B6D78E982FF87AB4E4C7049E43A734
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:49 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 41435
AS: 42670
IP: 79.110.128.0/20
IP: 91.193.32.0/22
IP: 176.104.0.0/18
IP: 194.9.36.0/23
IP: 213.109.80.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:d7:8e:98:2f:f8:7a:b4:e4:c7:04:9e:43:a7:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=808c3a6c5cbff0739e438d05744405b16197b15b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:96:1a:1f:ff:f6:4f:4c:31:01:b5:62:24:b2:
63:64:ab:ce:23:db:4f:c3:c3:79:64:f3:11:7b:c5:
77:02:a4:8a:37:7f:6e:85:86:da:d5:3d:b7:5a:c4:
0c:21:01:91:02:cc:bd:d7:f4:67:c9:ae:49:c5:31:
c7:53:70:19:5e:24:2e:8e:25:0a:ac:ba:39:0a:88:
3c:5d:a6:f6:d9:ca:f6:68:39:11:f4:57:b2:f9:81:
91:0f:9e:5a:ba:10:9f:37:ba:52:93:d1:43:a6:54:
95:42:51:87:cb:76:5e:e4:95:dc:d4:53:5b:bb:02:
70:19:ca:c0:13:91:f9:57:b5:c1:5e:42:57:d1:31:
32:ad:6f:40:73:e6:95:f6:19:c4:26:16:b2:cb:85:
70:c0:be:be:02:f2:41:a5:73:54:2d:7f:51:f7:17:
cb:53:f2:85:a9:ff:32:a8:35:1a:db:1a:b5:8c:b2:
9c:a1:70:d8:5b:a4:b6:53:41:6c:52:8f:dd:4d:a5:
f3:0d:8a:71:1d:2d:46:7c:07:2d:90:26:b5:18:ea:
5b:8c:f9:e9:e0:c9:c7:7d:fd:61:c0:3a:0f:2f:d9:
be:00:45:79:6a:34:69:a9:72:ce:0e:64:61:74:b5:
16:6f:7d:b6:1d:6d:3a:c5:41:46:71:7e:74:ca:65:
8d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.128.0/20
91.193.32.0/22
176.104.0.0/18
194.9.36.0/23
213.109.80.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41435
42670
Signature Algorithm: sha256WithRSAEncryption
a3:a0:f9:f3:dd:dd:75:1d:48:21:50:d7:a3:62:1a:93:6b:12:
12:b0:30:62:3b:16:fa:d7:94:c4:b9:4f:82:3d:87:65:29:dd:
84:95:a1:e7:dc:be:f1:73:78:14:ae:dd:42:d5:0f:e4:3c:62:
fa:f4:e9:19:44:f5:70:df:0a:9a:49:34:d4:c3:bc:ef:6c:d3:
38:41:9f:4a:45:ef:20:6c:0a:90:40:1a:a4:af:52:87:f4:94:
7f:09:d3:1e:17:63:0b:31:19:8f:76:2b:be:0c:74:4c:ad:c5:
5b:fa:13:96:0c:4f:68:68:a2:67:9d:87:ab:f1:74:53:2e:a5:
de:40:9c:08:41:98:be:52:2c:9c:99:3a:51:99:1d:7e:97:d4:
ff:b5:1f:76:2b:d8:29:b6:0e:f8:fa:ee:3b:d3:42:d7:2b:74:
23:85:f9:b3:97:1e:9e:60:3b:cb:f3:e8:0a:7c:8f:7a:cb:6e:
6c:b3:5a:ca:50:6f:66:e4:15:73:d0:c3:b1:ec:1a:92:cc:ba:
81:28:56:3c:32:8c:f9:0f:d0:c4:d9:90:2c:48:71:c6:84:70:
da:06:e1:8f:13:5c:2d:86:ec:a1:03:78:ae:d5:09:60:b5:b7:
ad:41:12:4a:33:f5:a7:8c:c8:47:6e:50:40:04:43:e3:cc:84:
cc:8c:07:11
-----BEGIN CERTIFICATE-----
MIIFsTCCBJmgAwIBAgISAYzDtteOmC/4erTkxwSeQ6c0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDYyOTQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDhjM2E2YzVjYmZmMDczOWU0MzhkMDU3NDQ0MDViMTYxOTdiMTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpYaH//2T0wxAbViJLJjZKvOI9tP
w8N5ZPMRe8V3AqSKN39uhYba1T23WsQMIQGRAsy91/Rnya5JxTHHU3AZXiQujiUK
rLo5Cog8Xab22cr2aDkR9Fey+YGRD55auhCfN7pSk9FDplSVQlGHy3Ze5JXc1FNb
uwJwGcrAE5H5V7XBXkJX0TEyrW9Ac+aV9hnEJhayy4VwwL6+AvJBpXNULX9R9xfL
U/KFqf8yqDUa2xq1jLKcoXDYW6S2U0FsUo/dTaXzDYpxHS1GfActkCa1GOpbjPnp
4MnHff1hwDoPL9m+AEV5ajRpqXLODmRhdLUWb322HW06xUFGcX50ymWNIQIDAQAB
o4ICvTCCArkwHQYDVR0OBBYEFICMOmxcv/BznkONBXREBbFhl7FbMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RkLzY5OGU0
ZS0wYTM5LTQxNmItYWZmZS02MTgxOWM0ODBjYmUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGQvNjk4ZTRl
LTBhMzktNDE2Yi1hZmZlLTYxODE5YzQ4MGNiZS8xL2dJdzZiRnlfOEhPZVE0MEZk
RVFGc1dHWHNWcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUF
BwEHAQH/BCgwJjAkBAIAATAeAwQET26AAwQCW8EgAwQGsGgAAwQBwgkkAwQE1W1Q
MB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwCh2wIDAKauMA0GCSqGSIb3DQEBCwUA
A4IBAQCjoPnz3d11HUghUNejYhqTaxISsDBiOxb615TEuU+CPYdlKd2ElaHn3L7x
c3gUrt1C1Q/kPGL69OkZRPVw3wqaSTTUw7zvbNM4QZ9KRe8gbAqQQBqkr1KH9JR/
CdMeF2MLMRmPdiu+DHRMrcVb+hOWDE9oaKJnnYer8XRTLqXeQJwIQZi+UiycmTpR
mR1+l9T/tR92K9gptg74+u4700LXK3Qjhfmzlx6eYDvL8+gKfI96y25ss1rKUG9m
5BVz0MOx7BqSzLqBKFY8Moz5D9DE2ZAsSHHGhHDaBuGPE1wthuyhA3iu1Qlgtbet
QRJKM/WnjMhHblBABEPjzITMjAcR
-----END CERTIFICATE-----
Generated at Fri May 3 13:53:23 2024 by rpki-client on console-fra.rpki-client.org