Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer
File: h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer (raw, json)
Hash identifier: utpKCZ7vTpitfSffPkZufTFblAQ0LlHKiTXKIKgfx2o=
Subject key identifier: 87:C3:7D:03:5D:95:FE:FB:A1:D4:7F:98:B9:FF:49:73:F1:7D:F6:CD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94E1FD08F1DC52BB5B0460ED048769B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:33:09 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 200286
IP: 185.59.52.0/22
IP: 2a04:e300::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:1f:d0:8f:1d:c5:2b:b5:b0:46:0e:d0:48:76:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:33:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87c37d035d95fefba1d47f98b9ff4973f17df6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:73:b1:0d:29:46:08:02:10:76:9c:b3:51:e9:
87:37:bd:4d:70:6d:0a:be:02:25:b5:d3:7c:23:b4:
ff:5e:98:36:ce:3d:2b:4d:e1:3f:ec:89:db:dc:f7:
7f:bb:48:55:cc:22:4d:10:fd:b4:98:67:22:e3:c0:
d0:2e:ab:87:0b:dc:b9:88:3e:56:f7:90:47:a4:99:
d0:2a:24:f6:ec:c5:e8:b4:cb:98:14:2d:37:c7:0f:
b2:5f:0f:f8:3b:5e:d2:cc:60:de:20:90:ed:8c:3d:
ef:06:07:2a:33:b2:00:fd:a9:fa:a5:65:9a:17:42:
56:00:3a:fb:d5:e5:98:d0:89:c0:9d:2e:8d:48:e1:
c5:49:24:81:13:21:9a:f0:aa:c3:11:46:ff:dc:21:
d5:4e:d8:87:a5:df:8b:db:03:04:91:d6:ab:5b:2a:
49:ff:9b:95:62:3c:91:94:cd:44:55:8a:04:5d:4a:
22:b9:e4:85:24:29:ba:2a:b4:ed:6f:74:d7:01:ad:
f6:8a:b2:2b:c9:c6:b1:8f:8a:cf:35:23:04:cf:a9:
91:12:6a:1d:ab:5f:85:13:7b:81:f3:f5:d4:44:ce:
07:45:41:d7:c1:7e:9f:f3:7e:3d:92:45:3e:e0:a7:
0f:57:87:9d:cf:4c:c4:a4:e5:a7:33:d1:07:60:08:
d4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C3:7D:03:5D:95:FE:FB:A1:D4:7F:98:B9:FF:49:73:F1:7D:F6:CD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.59.52.0/22
IPv6:
2a04:e300::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200286
Signature Algorithm: sha256WithRSAEncryption
75:79:da:4f:96:83:0c:b7:81:0f:c2:3d:e0:73:1d:de:9a:e5:
9c:14:82:14:f1:ca:b1:a4:52:c4:11:72:ee:48:da:bf:f9:0f:
b0:42:57:c5:f2:86:42:43:23:82:b9:04:b1:cc:d4:18:e8:3b:
8d:5a:33:fd:b1:1b:b4:f5:6d:46:68:01:88:66:52:45:4c:ce:
a0:52:82:56:87:bc:26:6d:3e:15:08:d8:3d:a1:f7:40:82:1b:
6f:2c:79:44:38:a5:1c:48:b5:3e:37:47:08:ba:87:4f:dd:a3:
d2:b0:db:1b:1e:6c:3b:8a:01:ac:d0:11:f6:65:4a:c7:9f:aa:
48:05:9d:41:e0:4c:3c:9c:fc:28:9d:de:2c:a2:5a:e6:9d:63:
78:f1:d2:5e:f8:4f:bf:e9:1d:40:bb:a5:ba:02:2b:c9:8c:7d:
ce:09:41:4a:eb:a7:b1:4f:4d:7a:22:06:2e:37:37:97:eb:8e:
1c:f8:03:9b:a0:be:0c:ad:24:04:f9:47:93:a3:93:4e:0a:80:
cc:24:52:86:a9:ac:d2:79:67:ff:58:51:22:c6:5c:ba:d9:08:
53:d8:9b:26:d9:05:61:c3:9f:a9:16:98:63:c4:40:ee:2d:41:
a4:f1:08:a1:dd:a2:a7:c5:48:f2:7c:33:8b:01:58:a1:8f:4a:
11:98:51:4c
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzJTh/Qjx3FK7WwRg7QSHabMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDgzMzA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4N2MzN2QwMzVkOTVmZWZiYTFkNDdmOThiOWZmNDk3M2YxN2RmNmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHOxDSlGCAIQdpyzUemHN71NcG0K
vgIltdN8I7T/Xpg2zj0rTeE/7Inb3Pd/u0hVzCJNEP20mGci48DQLquHC9y5iD5W
95BHpJnQKiT27MXotMuYFC03xw+yXw/4O17SzGDeIJDtjD3vBgcqM7IA/an6pWWa
F0JWADr71eWY0InAnS6NSOHFSSSBEyGa8KrDEUb/3CHVTtiHpd+L2wMEkdarWypJ
/5uVYjyRlM1EVYoEXUoiueSFJCm6KrTtb3TXAa32irIrycaxj4rPNSMEz6mREmod
q1+FE3uB8/XURM4HRUHXwX6f8349kkU+4KcPV4edz0zEpOWnM9EHYAjUMQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFIfDfQNdlf77odR/mLn/SXPxffbNMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QxLzVlZjA2
MC1mNDczLTQwNDMtYjhhMi1lMWI3Yzc2NDlmYTMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDEvNWVmMDYw
LWY0NzMtNDA0My1iOGEyLWUxYjdjNzY0OWZhMy8xL2g4TjlBMTJWX3Z1aDFILVl1
ZjlKY19GOTlzMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuTs0MA0EAgACMAcDBQMqBOMAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMOXjANBgkqhkiG9w0BAQsFAAOCAQEAdXnaT5aDDLeB
D8I94HMd3prlnBSCFPHKsaRSxBFy7kjav/kPsEJXxfKGQkMjgrkEsczUGOg7jVoz
/bEbtPVtRmgBiGZSRUzOoFKCVoe8Jm0+FQjYPaH3QIIbbyx5RDilHEi1PjdHCLqH
T92j0rDbGx5sO4oBrNAR9mVKx5+qSAWdQeBMPJz8KJ3eLKJa5p1jePHSXvhPv+kd
QLulugIryYx9zglBSuunsU9NeiIGLjc3l+uOHPgDm6C+DK0kBPlHk6OTTgqAzCRS
hqms0nln/1hRIsZcutkIU9ibJtkFYcOfqRaYY8RA7i1BpPEIod2ip8VI8nwziwFY
oY9KEZhRTA==
-----END CERTIFICATE-----
Generated at Fri May 3 11:57:51 2024 by rpki-client on console-ams.rpki-client.org