Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer
File: h19BKtsY1C-t0KhYc3GNrakx0cI.cer (raw, json)
Hash identifier: iqtNLRpFBzqQAxtxT1u7Ep07MgrlKZffBYj/75uHgYg=
Subject key identifier: 87:5F:41:2A:DB:18:D4:2F:AD:D0:A8:58:73:71:8D:AD:A9:31:D1:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D73886114F7D6B4FFBD37076D0AB377BC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 04 Feb 2024 09:52:14 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 5.63.21.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:73:88:61:14:f7:d6:b4:ff:bd:37:07:6d:0a:b3:77:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 4 09:52:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=875f412adb18d42fadd0a85873718dada931d1c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a1:90:00:5e:5c:e7:22:ff:d2:b0:30:cb:47:
ca:4e:68:88:bd:f2:b7:22:21:00:ae:2f:56:d2:ab:
88:3e:15:45:a2:91:65:fc:f2:4e:4c:ee:93:35:ca:
0e:35:eb:17:28:6c:d7:b4:ca:19:cb:42:83:e7:a9:
2a:d8:fb:41:99:eb:8e:c1:11:09:bb:ed:13:fe:46:
d5:90:f8:00:99:93:ed:51:ab:90:26:33:90:8b:a0:
5d:1f:82:be:d9:89:fd:b5:ed:0e:57:91:a2:db:e3:
f1:8c:86:13:45:e7:d6:7e:44:69:7d:b8:fc:0a:38:
51:be:32:18:54:33:21:35:ad:83:1c:59:e5:0b:dc:
e6:ee:56:5e:97:2c:7b:0c:8e:34:08:61:4e:81:a5:
a4:c8:d5:2f:92:0c:6a:5f:f5:ea:7c:54:72:bd:69:
e1:a5:bf:3a:b9:ea:53:a0:03:b0:17:5f:37:50:1b:
a8:2d:f5:da:e9:b8:71:bf:42:47:60:4d:4a:69:02:
9f:7c:e5:a5:c6:90:97:b7:92:20:2b:3f:d9:83:98:
eb:2d:44:ee:35:9f:5b:f7:9f:e5:bb:8e:6f:f5:5a:
6d:bc:b8:5f:db:41:b2:b0:8e:4e:20:31:cc:c3:45:
dc:2e:9c:95:19:c4:f7:d4:96:c4:94:ab:8b:83:39:
4c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:5F:41:2A:DB:18:D4:2F:AD:D0:A8:58:73:71:8D:AD:A9:31:D1:C2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.21.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:22:0e:05:84:9b:dd:47:25:e3:d2:98:a4:19:69:16:5d:5a:
7a:e7:9a:71:10:34:c7:36:01:8d:64:c1:c8:c0:6b:e3:e5:0d:
6f:9b:4f:1d:a0:9b:0d:dd:9d:70:73:86:72:a1:77:65:9c:98:
b7:b9:8b:2a:e3:0b:f5:5f:fa:8d:aa:9d:c0:40:8c:dc:99:67:
51:76:55:8a:c3:0a:f2:28:b4:80:24:ef:2c:8d:a1:35:df:60:
5b:7b:e8:dc:f7:5f:be:d9:2a:86:7c:b0:61:b4:ed:c7:9f:69:
86:2a:95:df:a0:2c:50:fc:cd:bd:cf:89:a7:ac:20:c2:75:6b:
e3:08:7d:ae:29:b9:2f:03:ba:89:5a:50:99:9a:f9:47:ce:4f:
b0:09:6d:8c:a1:13:89:63:cb:09:6c:2f:19:66:fb:0b:71:a0:
3a:5b:39:aa:97:64:63:18:68:55:6b:e8:ad:32:8f:ab:34:65:
4f:ec:80:4b:90:af:56:67:bd:6f:01:5b:d3:fc:9f:56:d3:30:
03:57:2f:2d:c1:19:23:2e:66:41:c5:d9:60:07:9d:18:7c:3c:
44:25:50:88:22:5c:a4:38:16:f2:ae:3a:63:f5:5f:e0:d3:3d:
1e:98:c7:2f:02:0e:49:41:5b:ad:49:45:4c:db:de:ff:e5:bb:
bb:0d:f0:b4
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAY1ziGEU99a0/703B20Ks3e8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMjA0MDk1MjE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NzVmNDEyYWRiMThkNDJmYWRkMGE4NTg3MzcxOGRhZGE5MzFkMWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqGQAF5c5yL/0rAwy0fKTmiIvfK3
IiEAri9W0quIPhVFopFl/PJOTO6TNcoONesXKGzXtMoZy0KD56kq2PtBmeuOwREJ
u+0T/kbVkPgAmZPtUauQJjOQi6BdH4K+2Yn9te0OV5Gi2+PxjIYTRefWfkRpfbj8
CjhRvjIYVDMhNa2DHFnlC9zm7lZelyx7DI40CGFOgaWkyNUvkgxqX/XqfFRyvWnh
pb86uepToAOwF183UBuoLfXa6bhxv0JHYE1KaQKffOWlxpCXt5IgKz/Zg5jrLUTu
NZ9b95/lu45v9VptvLhf20GysI5OIDHMw0XcLpyVGcT31JbElKuLgzlM0wIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFIdfQSrbGNQvrdCoWHNxja2pMdHCMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE2L2I4NDFj
Yy1kNjYzLTQ2MzMtOWM0OS0xNDdlMzg2YzAxNTAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvYjg0MWNj
LWQ2NjMtNDYzMy05YzQ5LTE0N2UzODZjMDE1MC8xL2gxOUJLdHNZMUMtdDBLaFlj
M0dOcmFreDBjSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQABT8VMA0GCSqGSIb3DQEBCwUAA4IBAQCeIg4F
hJvdRyXj0pikGWkWXVp655pxEDTHNgGNZMHIwGvj5Q1vm08doJsN3Z1wc4ZyoXdl
nJi3uYsq4wv1X/qNqp3AQIzcmWdRdlWKwwryKLSAJO8sjaE132Bbe+jc91++2SqG
fLBhtO3Hn2mGKpXfoCxQ/M29z4mnrCDCdWvjCH2uKbkvA7qJWlCZmvlHzk+wCW2M
oROJY8sJbC8ZZvsLcaA6Wzmql2RjGGhVa+itMo+rNGVP7IBLkK9WZ71vAVvT/J9W
0zADVy8twRkjLmZBxdlgB50YfDxEJVCIIlykOBbyrjpj9V/g0z0emMcvAg5JQVut
SUVM297/5bu7DfC0
-----END CERTIFICATE-----
Generated at Fri May 3 11:57:46 2024 by rpki-client on console-ams.rpki-client.org