Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ge7hf9vLCdu87vZjxhV7X-MIH_Q.cer
File: ge7hf9vLCdu87vZjxhV7X-MIH_Q.cer (raw, json)
Hash identifier: Q+YW0otCgdP1TdZrWPinXPzNknZDIvZgZiVxlhEUKns=
Subject key identifier: 81:EE:E1:7F:DB:CB:09:DB:BC:EE:F6:63:C6:15:7B:5F:E3:08:1F:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4938E30883BF9432CF9D0845A1A498A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/650a6b-4826-4c1e-a972-48ad14ba7498/1/ge7hf9vLCdu87vZjxhV7X-MIH_Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/650a6b-4826-4c1e-a972-48ad14ba7498/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:53 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 197965
IP: 93.180.72.0/21
IP: 185.176.16.0/22
IP: 2a00:4c40::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:8e:30:88:3b:f9:43:2c:f9:d0:84:5a:1a:49:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81eee17fdbcb09dbbceef663c6157b5fe3081ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:da:fe:39:fa:a4:13:ce:fb:ec:4f:76:3a:7c:
c0:1f:78:d4:47:9d:cc:7c:d0:a0:b2:ee:be:07:96:
3a:33:de:00:5d:27:b7:b3:d7:64:e6:ba:d2:9b:74:
54:27:ae:32:af:ea:74:c5:ec:17:20:b8:df:81:aa:
15:15:4c:d1:4f:f5:97:af:f9:97:30:92:14:f3:68:
5e:56:20:59:5b:12:a1:4f:78:86:f3:e0:e2:cb:cb:
37:26:7d:e4:67:6d:dd:ec:27:9c:5c:47:4d:53:02:
ae:c8:cb:53:dc:e4:3c:73:98:a7:0e:ba:80:76:5a:
6d:c6:04:7d:d1:dd:bd:43:a8:fe:1e:d7:9d:29:8b:
46:b5:c3:cc:cc:27:72:89:d0:fd:d4:15:b5:f7:83:
72:b3:92:f1:34:ff:63:6f:da:51:05:c8:3d:4a:9d:
3d:d5:ba:d4:b3:ef:02:69:3d:82:63:d2:9c:1b:c5:
63:4f:49:60:15:86:c1:d1:ad:52:2f:1f:49:39:aa:
4e:09:ec:a4:54:e9:6d:48:79:e7:fb:0e:aa:5a:3b:
95:12:78:e9:9d:27:65:4e:25:d8:55:ab:d2:06:c4:
9e:9e:1e:e8:5b:79:4a:8a:fe:38:a0:b4:2a:22:7c:
b4:2d:88:1b:5c:49:af:4e:6a:9c:9d:01:8c:5d:7d:
db:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:EE:E1:7F:DB:CB:09:DB:BC:EE:F6:63:C6:15:7B:5F:E3:08:1F:F4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/650a6b-4826-4c1e-a972-48ad14ba7498/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/650a6b-4826-4c1e-a972-48ad14ba7498/1/ge7hf9vLCdu87vZjxhV7X-MIH_Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.180.72.0/21
185.176.16.0/22
IPv6:
2a00:4c40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197965
Signature Algorithm: sha256WithRSAEncryption
a8:5c:37:30:c2:37:e4:04:98:79:0a:43:65:fd:60:be:93:ea:
09:08:a7:05:eb:59:26:e3:88:f0:55:00:46:6f:46:f5:66:7a:
d3:a2:2b:ab:60:a5:11:fd:e8:69:fd:f3:08:ca:aa:f1:e7:b1:
91:3c:83:04:fa:b8:f2:29:2f:f2:1e:c6:4f:fa:c8:a1:ad:cb:
2c:9e:e5:63:16:83:a0:5c:90:82:79:2b:e3:6c:f5:aa:8e:27:
6b:7d:b6:97:c6:56:e8:c8:12:05:65:d8:ae:05:4a:94:82:0d:
d1:d4:5b:8e:cf:39:36:d3:63:66:e7:21:b2:9c:81:f5:77:f7:
16:03:67:33:7e:a2:d2:c2:5c:8a:a7:42:a8:60:1f:92:ea:b4:
04:b4:44:ed:25:16:d2:59:f1:81:b7:3d:8d:0b:ab:86:51:5a:
fa:85:88:4c:6d:a4:b1:67:63:e0:f3:fc:89:35:2b:bb:ed:3c:
f7:24:20:cd:ad:70:6b:6e:2b:13:af:4b:3e:7b:cc:de:10:d8:
d6:73:23:cf:f6:81:e7:ea:fe:a4:4b:2b:2c:77:f0:4e:87:d5:
82:e6:19:f3:63:aa:cc:d5:75:33:01:55:63:89:4e:7e:49:99:
2f:94:c1:fb:fd:39:f1:69:5b:ae:59:7d:ff:7d:7d:bf:68:1f:
cf:01:71:9f
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAYzEk44wiDv5Qyz50IRaGkmKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTAzMDUzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MWVlZTE3ZmRiY2IwOWRiYmNlZWY2NjNjNjE1N2I1ZmUzMDgxZmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9r+OfqkE8777E92OnzAH3jUR53M
fNCgsu6+B5Y6M94AXSe3s9dk5rrSm3RUJ64yr+p0xewXILjfgaoVFUzRT/WXr/mX
MJIU82heViBZWxKhT3iG8+Diy8s3Jn3kZ23d7CecXEdNUwKuyMtT3OQ8c5inDrqA
dlptxgR90d29Q6j+HtedKYtGtcPMzCdyidD91BW194Nys5LxNP9jb9pRBcg9Sp09
1brUs+8CaT2CY9KcG8VjT0lgFYbB0a1SLx9JOapOCeykVOltSHnn+w6qWjuVEnjp
nSdlTiXYVavSBsSenh7oW3lKiv44oLQqIny0LYgbXEmvTmqcnQGMXX3bbQIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFIHu4X/bywnbvO72Y8YVe1/jCB/0MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMyLzY1MGE2
Yi00ODI2LTRjMWUtYTk3Mi00OGFkMTRiYTc0OTgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzIvNjUwYTZi
LTQ4MjYtNGMxZS1hOTcyLTQ4YWQxNGJhNzQ5OC8xL2dlN2hmOXZMQ2R1ODd2Wmp4
aFY3WC1NSUhfUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQDXbRIAwQCubAQMA0EAgACMAcDBQAqAExAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMFTTANBgkqhkiG9w0BAQsFAAOCAQEAqFw3
MMI35ASYeQpDZf1gvpPqCQinBetZJuOI8FUARm9G9WZ606Irq2ClEf3oaf3zCMqq
8eexkTyDBPq48ikv8h7GT/rIoa3LLJ7lYxaDoFyQgnkr42z1qo4na322l8ZW6MgS
BWXYrgVKlIIN0dRbjs85NtNjZuchspyB9Xf3FgNnM36i0sJciqdCqGAfkuq0BLRE
7SUW0lnxgbc9jQurhlFa+oWITG2ksWdj4PP8iTUru+089yQgza1wa24rE69LPnvM
3hDY1nMjz/aB5+r+pEsrLHfwTofVguYZ82OqzNV1MwFVY4lOfkmZL5TB+/058Wlb
rll9/319v2gfzwFxnw==
-----END CERTIFICATE-----
Generated at Fri May 3 02:09:29 2024 by rpki-client on console-ams.rpki-client.org