Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
File: hNt0eyiXF6BoTNasgjB6pnuy17s.cer (raw, json)
Hash identifier: u4CEz2ML165yzGpdczfImSs1oCabq03C3sFf09M0jso=
Subject key identifier: 84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56DECBF133B0704B2369FB7BDDDB752
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 12363
AS: 206191
IP: 195.110.96.0/19
IP: 2a0e:f080::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:ec:bf:13:3b:07:04:b2:36:9f:b7:bd:dd:b7:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=84db747b289717a0684cd6ac82307aa67bb2d7bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0f:f5:ef:92:6c:9e:e7:41:c3:0f:03:94:dd:
79:13:15:72:72:45:2c:e5:b7:85:59:a2:dc:42:64:
d2:3d:44:17:7c:c3:79:35:48:ed:e9:09:5d:7e:b5:
63:cf:f8:40:9b:4c:0c:8c:7c:7e:01:3f:fe:3b:1f:
b3:a6:3f:40:f5:b6:a7:f0:8a:97:a3:d1:02:22:0a:
12:7b:c5:70:cf:86:9e:89:60:14:fd:1c:9b:fd:05:
2e:42:37:d3:56:14:8d:3a:96:ad:93:f9:39:c5:63:
e5:c2:b4:8d:c5:ba:e8:c8:61:f2:2b:b7:d3:9d:ea:
43:3a:9d:05:64:68:9c:fd:ca:51:1c:62:9b:cf:7f:
c9:c5:db:a7:af:50:14:c0:41:ec:81:3d:50:00:7c:
07:83:0f:ec:22:96:02:b2:ff:69:3c:05:f6:4a:7c:
4b:e8:43:5d:e6:cb:e6:a2:99:7b:87:a5:b5:45:44:
bb:7e:58:90:7e:af:85:a9:43:c2:2f:43:27:6f:fa:
4f:95:68:68:6d:9b:6e:e1:d6:43:60:d9:17:0d:f6:
f6:99:29:60:59:c6:5a:5c:b2:40:fa:56:cd:c2:9a:
e6:60:02:21:4c:60:67:9c:92:4e:e9:8f:05:04:57:
29:5c:b2:d8:b4:c9:4c:1f:e6:aa:1a:b4:78:b5:05:
56:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.110.96.0/19
IPv6:
2a0e:f080::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12363
206191
Signature Algorithm: sha256WithRSAEncryption
aa:df:85:74:ec:07:5b:61:0a:f8:04:b9:bc:cc:b2:d7:2c:5a:
a0:47:73:88:fa:b6:db:39:7a:c9:7c:66:1c:3e:10:8e:f6:3a:
2d:98:29:54:08:30:31:6c:37:8c:1d:79:1d:5e:de:1e:83:75:
c6:d8:68:4b:bd:e7:a6:f4:2a:54:5e:27:32:29:41:bc:88:c6:
72:0d:fd:e6:3e:04:c8:db:99:eb:31:a8:2e:9a:e7:8a:f3:d0:
08:ed:d0:a5:03:3e:8e:f5:1c:d8:06:1e:6f:a1:a7:a6:cd:6c:
d8:e2:c6:38:4e:22:1f:1e:e0:67:42:fa:60:7a:90:69:3f:69:
4a:ec:b6:28:40:23:65:af:43:74:6e:bd:be:7b:75:d5:d3:9d:
c6:1a:67:83:da:de:2f:f8:37:dc:17:5e:86:e2:d4:5f:36:1d:
e1:ba:cb:28:64:14:e9:86:87:23:98:b3:71:fd:14:a4:d1:22:
18:fd:44:a7:c0:d3:20:48:91:11:99:56:4a:a7:11:14:9f:6b:
66:dc:9d:d6:8f:29:30:31:2a:28:2d:a5:f6:f3:2f:06:a1:05:
0e:04:a4:0c:5e:20:b9:76:ad:4b:ce:36:f5:84:dd:c1:4e:ba:
0d:e9:3f:f1:d7:49:71:a9:ab:87:66:64:f5:53:3d:07:7a:53:
87:cd:4c:08
-----BEGIN CERTIFICATE-----
MIIFpzCCBI+gAwIBAgISAYzFbey/EzsHBLI2n7e93bdSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTQyOTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NGRiNzQ3YjI4OTcxN2EwNjg0Y2Q2YWM4MjMwN2FhNjdiYjJkN2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzg/175JsnudBww8DlN15ExVyckUs
5beFWaLcQmTSPUQXfMN5NUjt6QldfrVjz/hAm0wMjHx+AT/+Ox+zpj9A9ban8IqX
o9ECIgoSe8Vwz4aeiWAU/Ryb/QUuQjfTVhSNOpatk/k5xWPlwrSNxbroyGHyK7fT
nepDOp0FZGic/cpRHGKbz3/Jxdunr1AUwEHsgT1QAHwHgw/sIpYCsv9pPAX2SnxL
6ENd5svmopl7h6W1RUS7fliQfq+FqUPCL0Mnb/pPlWhobZtu4dZDYNkXDfb2mSlg
WcZaXLJA+lbNwprmYAIhTGBnnJJO6Y8FBFcpXLLYtMlMH+aqGrR4tQVWJQIDAQAB
o4ICszCCAq8wHQYDVR0OBBYEFITbdHsolxegaEzWrIIweqZ7ste7MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVmLzcxNDJi
MS03MDkxLTRkM2EtYmQ2ZC05ZmU3ZWU5YzAzNjgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWYvNzE0MmIx
LTcwOTEtNGQzYS1iZDZkLTlmZTdlZTljMDM2OC8xL2hOdDBleWlYRjZCb1ROYXNn
akI2cG51eTE3cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQFw25gMA0EAgACMAcDBQAqDvCAMB4GCCsGAQUF
BwEIAQH/BA8wDaALMAkCAjBLAgMDJW8wDQYJKoZIhvcNAQELBQADggEBAKrfhXTs
B1thCvgEubzMstcsWqBHc4j6tts5esl8Zhw+EI72Oi2YKVQIMDFsN4wdeR1e3h6D
dcbYaEu956b0KlReJzIpQbyIxnIN/eY+BMjbmesxqC6a54rz0Ajt0KUDPo71HNgG
Hm+hp6bNbNjixjhOIh8e4GdC+mB6kGk/aUrstihAI2WvQ3Ruvb57ddXTncYaZ4Pa
3i/4N9wXXobi1F82HeG6yyhkFOmGhyOYs3H9FKTRIhj9RKfA0yBIkRGZVkqnERSf
a2bcndaPKTAxKigtpfbzLwahBQ4EpAxeILl2rUvONvWE3cFOug3pP/HXSXGpq4dm
ZPVTPQd6U4fNTAg=
-----END CERTIFICATE-----
Generated at Fri May 3 13:54:21 2024 by rpki-client on console-fra.rpki-client.org