Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer
File: h7PLLW-2jm7bhEL-sKv8la61sVc.cer (raw, json)
Hash identifier: qXI1GjW+Ngs9LRgrWfA4URo9hmYB/7qjw4u0055fCBM=
Subject key identifier: 87:B3:CB:2D:6F:B6:8E:6E:DB:84:42:FE:B0:AB:FC:95:AE:B5:B1:57
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E58CAB887AFCC6DE6B0EB8D16A103B8AC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 19 Mar 2024 22:17:44 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 85.208.92.0/22
IP: 2a09:84c0::/30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:58:ca:b8:87:af:cc:6d:e6:b0:eb:8d:16:a1:03:b8:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 19 22:17:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87b3cb2d6fb68e6edb8442feb0abfc95aeb5b157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:18:a4:2b:6b:3c:aa:2b:a4:37:9c:d5:8b:ff:
ab:9c:3d:cc:a2:5a:1b:1c:25:25:21:f5:29:23:f5:
7c:81:ba:f2:38:7d:79:57:72:cf:82:5c:6b:04:5d:
d4:60:91:bc:fb:66:94:31:27:07:de:97:c1:c4:c8:
b8:03:a8:50:a7:df:35:87:1c:96:9b:b1:d8:88:9d:
b7:1f:54:43:f3:11:36:36:fc:14:f4:a8:7b:9b:f1:
d4:56:de:77:db:86:bb:39:8f:7c:bf:e8:00:ea:04:
bc:f9:4d:5f:fa:0a:81:54:16:9a:22:c4:77:7d:f2:
2e:23:77:f0:38:14:0a:26:64:2a:fa:bd:b7:82:81:
db:80:7f:f9:eb:cd:68:12:05:0e:3b:b1:94:9a:ac:
c1:61:6a:82:84:65:97:53:6a:d0:a0:5a:5f:bd:a8:
ac:56:9a:26:4e:df:38:64:6e:ee:18:67:27:e4:4d:
2d:f2:f4:0d:48:6a:46:ab:8d:d0:43:02:ab:95:47:
ce:fc:46:49:b5:28:cb:01:c3:9d:03:be:6a:11:20:
42:22:f1:6d:f1:ce:40:81:3f:9e:da:cf:60:d7:49:
01:fe:fe:4c:b6:e0:2c:4f:33:1c:b3:34:b4:53:76:
2b:01:a4:a1:22:f8:17:bf:d2:d6:42:41:3b:45:7d:
b9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B3:CB:2D:6F:B6:8E:6E:DB:84:42:FE:B0:AB:FC:95:AE:B5:B1:57
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.92.0/22
IPv6:
2a09:84c0::/30
Signature Algorithm: sha256WithRSAEncryption
7f:23:e6:0a:e4:d5:78:06:6c:5a:d1:f9:c4:b9:35:19:6a:e8:
1d:95:55:21:af:f6:bf:e6:10:82:32:d5:8f:ab:c4:f5:b4:60:
ee:9e:8f:35:7d:b4:08:f1:a9:70:eb:6b:58:1f:37:a8:ff:bb:
fe:d7:f8:34:db:22:0e:a4:22:3e:13:09:63:94:b2:28:cf:fb:
41:0b:f5:4a:ad:6b:7e:a5:3f:25:d7:31:48:b8:d2:db:a5:ad:
1c:38:c3:de:e0:93:89:b9:51:7e:37:35:c4:de:b3:c0:fb:1f:
93:13:66:7a:42:85:7b:ab:50:3e:8e:d5:a7:b1:dc:40:8d:8c:
3a:e6:e8:69:51:78:5a:ac:3d:0a:a0:60:ef:89:f2:02:40:00:
a1:29:6e:12:39:04:ce:ff:6f:d6:92:ad:c3:e1:a4:2b:48:62:
cd:43:f2:25:1b:44:98:08:a6:23:bf:c7:51:c7:59:b5:f6:35:
a8:f3:0c:44:00:e0:f0:17:1e:8a:c3:c1:5e:da:c4:a6:dd:aa:
a4:df:7c:d8:f7:65:8b:e1:98:00:9a:ec:01:f3:f2:9e:db:03:
5f:fe:82:38:bc:08:cc:98:84:ad:26:ce:9e:70:86:67:19:5c:
4e:b0:97:b3:2b:87:1c:dd:db:a1:7d:45:4b:fd:b1:0d:32:16:
96:a3:3c:61
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAY5YyriHr8xt5rDrjRahA7isMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMzE5MjIxNzQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4N2IzY2IyZDZmYjY4ZTZlZGI4NDQyZmViMGFiZmM5NWFlYjViMTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRikK2s8qiukN5zVi/+rnD3Molob
HCUlIfUpI/V8gbryOH15V3LPglxrBF3UYJG8+2aUMScH3pfBxMi4A6hQp981hxyW
m7HYiJ23H1RD8xE2NvwU9Kh7m/HUVt5324a7OY98v+gA6gS8+U1f+gqBVBaaIsR3
ffIuI3fwOBQKJmQq+r23goHbgH/5681oEgUOO7GUmqzBYWqChGWXU2rQoFpfvais
VpomTt84ZG7uGGcn5E0t8vQNSGpGq43QQwKrlUfO/EZJtSjLAcOdA75qESBCIvFt
8c5AgT+e2s9g10kB/v5MtuAsTzMcszS0U3YrAaShIvgXv9LWQkE7RX25mwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFIezyy1vto5u24RC/rCr/JWutbFXMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JjLzk5ZDlh
Ni0xM2JlLTQwYWItYmU1My1iNDJhNGMzZTkxNmIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMvOTlkOWE2
LTEzYmUtNDBhYi1iZTUzLWI0MmE0YzNlOTE2Yi8xL2g3UExMVy0yam03YmhFTC1z
S3Y4bGE2MXNWYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCVdBcMA0EAgACMAcDBQIqCYTAMA0GCSqGSIb3
DQEBCwUAA4IBAQB/I+YK5NV4Bmxa0fnEuTUZaugdlVUhr/a/5hCCMtWPq8T1tGDu
no81fbQI8alw62tYHzeo/7v+1/g02yIOpCI+EwljlLIoz/tBC/VKrWt+pT8l1zFI
uNLbpa0cOMPe4JOJuVF+NzXE3rPA+x+TE2Z6QoV7q1A+jtWnsdxAjYw65uhpUXha
rD0KoGDvifICQAChKW4SOQTO/2/Wkq3D4aQrSGLNQ/IlG0SYCKYjv8dRx1m19jWo
8wxEAODwFx6Kw8Fe2sSm3aqk33zY92WL4ZgAmuwB8/Ke2wNf/oI4vAjMmIStJs6e
cIZnGVxOsJezK4cc3duhfUVL/bENMhaWozxh
-----END CERTIFICATE-----
Generated at Fri May 3 02:09:46 2024 by rpki-client on console-ams.rpki-client.org