Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/he1PzEWWTU6nL8RJLE15VxMyEMM.cer
File: he1PzEWWTU6nL8RJLE15VxMyEMM.cer (raw, json)
Hash identifier: Pqu3yLPPJBC8AXs4t0wKFjYvwFvvUX2mYr81nNW+c70=
Subject key identifier: 85:ED:4F:CC:45:96:4D:4E:A7:2F:C4:49:2C:4D:79:57:13:32:10:C3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94AC8FC13747095A0B14B7D76D69E15
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/he1PzEWWTU6nL8RJLE15VxMyEMM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:29:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208847
IP: 45.82.232.0/22
IP: 2a0e:7680::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:c8:fc:13:74:70:95:a0:b1:4b:7d:76:d6:9e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85ed4fcc45964d4ea72fc4492c4d7957133210c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6b:e2:d3:b8:7f:e2:7b:4f:9c:50:bb:81:a0:
55:a2:38:14:d5:57:af:ae:fa:b9:9e:a2:49:4e:89:
5f:9d:92:e0:a2:cc:60:3f:f7:20:0b:43:3b:5b:14:
7f:39:34:4d:3f:0b:9d:10:85:d0:d0:ad:96:0a:e6:
09:ae:c7:e3:d8:b0:f5:71:95:8e:66:49:f3:31:9d:
5c:ad:6e:c4:b5:78:be:2b:43:91:bb:5c:a8:4f:2d:
b4:d0:0b:80:27:b5:9e:16:bf:60:c4:1e:fa:94:4f:
17:78:57:7f:27:76:5b:1c:64:0a:d4:fe:ce:1f:d6:
d1:b2:84:d0:35:bd:27:30:9a:93:fd:0b:6b:22:86:
b0:fb:52:50:2d:07:6d:89:6a:9e:59:65:90:8f:16:
0c:02:d9:75:e8:69:95:0a:db:38:69:9f:95:ee:69:
65:de:a3:2c:67:86:32:60:e6:32:fd:f9:54:4f:e1:
5a:18:f0:99:72:f5:b5:2d:5c:b7:91:f5:c9:33:7f:
cf:c7:ce:97:f7:e7:9a:09:30:c9:82:54:58:66:87:
d8:17:dc:83:a2:9b:93:6a:af:2f:f7:d0:0d:02:70:
cc:fb:45:05:27:9b:96:0a:5a:ab:f1:5b:b1:9e:43:
1a:40:cb:ff:cb:05:b0:71:57:2b:40:18:9b:a1:39:
70:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:ED:4F:CC:45:96:4D:4E:A7:2F:C4:49:2C:4D:79:57:13:32:10:C3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/he1PzEWWTU6nL8RJLE15VxMyEMM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.232.0/22
IPv6:
2a0e:7680::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208847
Signature Algorithm: sha256WithRSAEncryption
80:8d:75:40:4f:5c:a0:a7:15:f1:cd:b5:19:e4:97:1b:e8:11:
f2:fd:3a:ae:12:65:5b:b0:fe:59:aa:b5:62:7b:85:f4:15:f3:
3e:ee:13:0a:7b:b6:13:7d:16:84:9b:2d:d7:35:2e:5e:5c:0a:
b4:00:6b:c5:3a:b6:73:23:33:1a:2b:cf:be:ba:e8:e6:e4:0d:
cd:bf:12:d3:f8:3b:ca:ee:69:dd:b1:0d:b4:ea:59:4d:99:28:
82:bc:c7:57:93:48:0a:b3:13:24:1f:11:29:8f:e2:6e:b9:31:
70:c2:3e:f5:a7:c6:9c:11:c7:a4:ba:34:3b:4d:7a:df:a7:58:
52:49:16:18:54:eb:04:2f:2a:8d:06:3e:55:e3:a6:90:5f:7a:
af:f3:4f:7c:7a:13:f4:87:b9:ca:32:5c:cd:9b:dc:89:a3:a5:
3e:d8:bb:20:ba:4b:bb:6a:b6:d9:87:d2:ec:21:0a:2b:a5:05:
f0:9b:ea:13:9f:1e:f5:5d:ff:b4:fc:6c:56:d3:7e:68:0b:5c:
e9:38:d9:52:43:9a:c7:06:d7:cd:e0:6a:7e:48:36:41:32:93:
06:a7:e4:6a:15:b8:72:43:db:59:67:2b:ef:60:64:1c:59:20:
c2:a8:66:30:14:70:59:5d:71:8e:8e:bb:f6:16:77:ac:4e:e6:
65:6e:8e:83
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzJSsj8E3RwlaCxS3121p4VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDgyOTMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NWVkNGZjYzQ1OTY0ZDRlYTcyZmM0NDkyYzRkNzk1NzEzMzIxMGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGvi07h/4ntPnFC7gaBVojgU1Vev
rvq5nqJJTolfnZLgosxgP/cgC0M7WxR/OTRNPwudEIXQ0K2WCuYJrsfj2LD1cZWO
ZknzMZ1crW7EtXi+K0ORu1yoTy200AuAJ7WeFr9gxB76lE8XeFd/J3ZbHGQK1P7O
H9bRsoTQNb0nMJqT/QtrIoaw+1JQLQdtiWqeWWWQjxYMAtl16GmVCts4aZ+V7mll
3qMsZ4YyYOYy/flUT+FaGPCZcvW1LVy3kfXJM3/Px86X9+eaCTDJglRYZofYF9yD
opuTaq8v99ANAnDM+0UFJ5uWClqr8VuxnkMaQMv/ywWwcVcrQBiboTlwKQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFIXtT8xFlk1Opy/ESSxNeVcTMhDDMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg0L2NhNDYw
ZS02NjM1LTQ4MWItYjZlOS1mODVhN2NiMWQxOTIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQvY2E0NjBl
LTY2MzUtNDgxYi1iNmU5LWY4NWE3Y2IxZDE5Mi8xL2hlMVB6RVdXVFU2bkw4UkpM
RTE1VnhNeUVNTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCLVLoMA0EAgACMAcDBQMqDnaAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMvzzANBgkqhkiG9w0BAQsFAAOCAQEAgI11QE9coKcV
8c21GeSXG+gR8v06rhJlW7D+Waq1YnuF9BXzPu4TCnu2E30WhJst1zUuXlwKtABr
xTq2cyMzGivPvrro5uQNzb8S0/g7yu5p3bENtOpZTZkogrzHV5NICrMTJB8RKY/i
brkxcMI+9afGnBHHpLo0O01636dYUkkWGFTrBC8qjQY+VeOmkF96r/NPfHoT9Ie5
yjJczZvciaOlPti7ILpLu2q22YfS7CEKK6UF8JvqE58e9V3/tPxsVtN+aAtc6TjZ
UkOaxwbXzeBqfkg2QTKTBqfkahW4ckPbWWcr72BkHFkgwqhmMBRwWV1xjo679hZ3
rE7mZW6Ogw==
-----END CERTIFICATE-----
Generated at Fri May 3 03:36:28 2024 by rpki-client on console-fra.rpki-client.org