Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
File: hUavGPcHiqwAwvzSymf5MoAhfhU.cer (raw, json)
Hash identifier: UY6OR065mpLQCGMnhUiceXP4XCgxoLk+rYw4GobdvCY=
Subject key identifier: 85:46:AF:18:F7:07:8A:AC:00:C2:FC:D2:CA:67:F9:32:80:21:7E:15
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D35C243DFCDA5AAB36AC5008F2B2F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:46 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.102.131.0/24
IP: 2001:67c:53c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:35:c2:43:df:cd:a5:aa:b3:6a:c5:00:8f:2b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8546af18f7078aac00c2fcd2ca67f93280217e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8c:e0:f4:e7:a1:ce:9d:c5:81:6d:10:80:99:
65:35:13:ae:2b:f4:8a:2a:1a:d3:1f:7c:54:1f:7b:
f0:12:ac:cc:65:08:a2:61:8c:9c:0d:58:2c:32:1a:
38:13:3b:93:b7:93:b6:54:ed:dd:d6:31:da:ad:53:
f6:de:c6:5b:d0:84:be:5e:93:70:64:b0:87:c5:eb:
7a:c2:b8:43:73:2e:7c:b0:7d:fd:3e:a4:d6:7a:47:
d0:08:c2:b9:fc:93:9b:d8:c0:ef:bb:fa:1f:5d:f1:
c8:56:e7:ad:9f:0b:07:6d:e2:bc:5c:4f:3c:b4:63:
09:bd:4b:82:49:eb:cb:77:18:9a:3b:41:97:e6:01:
1b:84:65:76:3e:1d:b6:a6:f9:53:de:4d:98:6c:36:
cb:0c:ef:0e:d1:c8:db:33:90:79:a2:a8:36:aa:1c:
4e:28:e4:a1:c8:3b:5f:82:c8:fb:73:ff:9f:aa:23:
df:c7:61:32:e8:fe:80:5d:c5:1d:5c:e8:c3:52:37:
56:02:65:31:cf:0b:cb:d0:f9:f8:14:25:62:47:92:
b2:a0:8e:4e:f4:eb:16:ad:46:5b:c0:74:5f:84:e2:
6e:0b:49:2a:6b:ee:e1:3f:67:b1:f4:b2:e2:73:c8:
0b:da:1b:24:4f:89:a2:23:b4:85:e9:fe:47:60:a7:
f5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:46:AF:18:F7:07:8A:AC:00:C2:FC:D2:CA:67:F9:32:80:21:7E:15
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.131.0/24
IPv6:
2001:67c:53c::/48
Signature Algorithm: sha256WithRSAEncryption
01:42:09:f7:0e:85:d1:d7:e6:4d:f2:90:f7:10:4e:31:c5:4e:
61:b8:81:4f:e3:f0:c2:7f:a5:b6:41:95:aa:03:dd:33:01:76:
da:3f:0b:96:80:14:61:a5:af:a5:74:5b:5d:4d:34:74:18:73:
e9:9c:92:84:7b:bd:10:5e:cf:90:8b:04:0d:d9:5d:b0:01:e6:
0a:2b:f7:53:98:16:c3:c4:fb:78:bc:6c:3a:79:77:7d:e4:11:
1c:0e:ab:c1:d3:3b:fb:c4:8b:83:fc:43:dd:81:c9:a7:6a:4c:
55:7b:ff:83:6f:40:d9:77:70:1d:9a:55:08:b9:3e:bb:3c:cd:
22:b9:88:5f:b6:ab:69:b6:97:58:11:22:c1:80:de:b4:1f:ce:
56:af:28:34:8c:5a:b4:d8:88:a9:30:0b:78:36:57:be:dd:4a:
cd:54:53:c8:84:38:1f:ed:f3:b6:0f:4b:01:fc:5f:fb:da:f1:
05:6c:eb:92:e0:14:8a:63:38:ee:e1:6b:a4:fa:a2:5a:29:69:
02:f8:dc:43:0e:8c:1e:98:cb:64:7d:d8:82:12:7a:1a:32:8c:
cb:e8:da:3c:27:a8:ca:35:0a:67:1e:0d:62:af:44:3c:aa:f5:
07:9d:80:cb:62:83:04:85:82:85:48:2c:07:e4:2d:23:e2:66:
da:75:3c:12
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgISAYzCbTXCQ9/NpaqzasUAjysvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDAyOTQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTQ2YWYxOGY3MDc4YWFjMDBjMmZjZDJjYTY3ZjkzMjgwMjE3ZTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvozg9Oehzp3FgW0QgJllNROuK/SK
KhrTH3xUH3vwEqzMZQiiYYycDVgsMho4EzuTt5O2VO3d1jHarVP23sZb0IS+XpNw
ZLCHxet6wrhDcy58sH39PqTWekfQCMK5/JOb2MDvu/ofXfHIVuetnwsHbeK8XE88
tGMJvUuCSevLdxiaO0GX5gEbhGV2Ph22pvlT3k2YbDbLDO8O0cjbM5B5oqg2qhxO
KOShyDtfgsj7c/+fqiPfx2Ey6P6AXcUdXOjDUjdWAmUxzwvL0Pn4FCViR5KyoI5O
9OsWrUZbwHRfhOJuC0kqa+7hP2ex9LLic8gL2hskT4miI7SF6f5HYKf1OwIDAQAB
o4IClTCCApEwHQYDVR0OBBYEFIVGrxj3B4qsAML80spn+TKAIX4VMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MyLzFhNjg4
OC1iOWFkLTRiODEtYjkzNS02YmVhZWU1YjU4YTMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzIvMWE2ODg4
LWI5YWQtNGI4MS1iOTM1LTZiZWFlZTViNThhMy8xL2hVYXZHUGNIaXF3QXd2elN5
bWY1TW9BaGZoVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF
BwEHAQH/BCEwHzAMBAIAATAGAwQAwmaDMA8EAgACMAkDBwAgAQZ8BTwwDQYJKoZI
hvcNAQELBQADggEBAAFCCfcOhdHX5k3ykPcQTjHFTmG4gU/j8MJ/pbZBlaoD3TMB
dto/C5aAFGGlr6V0W11NNHQYc+mckoR7vRBez5CLBA3ZXbAB5gor91OYFsPE+3i8
bDp5d33kERwOq8HTO/vEi4P8Q92ByadqTFV7/4NvQNl3cB2aVQi5Prs8zSK5iF+2
q2m2l1gRIsGA3rQfzlavKDSMWrTYiKkwC3g2V77dSs1UU8iEOB/t87YPSwH8X/va
8QVs65LgFIpjOO7ha6T6olopaQL43EMOjB6Yy2R92IISehoyjMvo2jwnqMo1Cmce
DWKvRDyq9QedgMtigwSFgoVILAfkLSPiZtp1PBI=
-----END CERTIFICATE-----
Generated at Fri May 3 02:09:59 2024 by rpki-client on console-ams.rpki-client.org