Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.cer
File: hyS0Af_qw9XbQvgoyrTxY8Bk1tU.cer (raw, json)
Hash identifier: xjPbLkOlWZ0eHpjLySGJq85L7ZRzGcZqNqhelJMKgak=
Subject key identifier: 87:24:B4:01:FF:EA:C3:D5:DB:42:F8:28:CA:B4:F1:63:C0:64:D6:D5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC42488EB59BF7F26B828F9FDFA5563E5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:37 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.239.52.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:88:eb:59:bf:7f:26:b8:28:f9:fd:fa:55:63:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8724b401ffeac3d5db42f828cab4f163c064d6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c0:fc:ab:bb:7d:fd:8d:ec:89:24:77:1d:c2:
8b:98:e0:8e:7d:26:11:ed:a3:15:0c:b2:6c:4e:9d:
44:f2:14:f7:32:1c:0b:30:af:63:55:55:2f:01:03:
d3:c4:95:2c:89:41:d0:70:39:bb:14:c0:df:1c:69:
7b:0e:4a:91:6c:cb:c5:22:d7:5e:63:1b:0b:89:61:
b5:88:e3:a9:95:59:ba:b8:3a:c9:21:02:00:d5:4b:
03:3e:8c:07:1e:28:f0:0e:cf:fb:19:96:0e:6e:53:
fd:ec:b0:40:0f:a1:97:3e:52:b4:25:02:b5:f4:77:
02:12:4a:f5:ea:f9:a2:80:22:bb:24:ba:b6:72:9f:
be:5b:c5:d4:0d:aa:ca:e6:fa:98:2b:45:6b:24:93:
1a:05:3f:a4:8e:aa:cc:7c:15:ef:72:a8:04:94:84:
d6:27:ac:24:24:43:b5:c4:fb:e3:bd:46:0e:47:de:
90:2c:91:37:1e:cd:56:f9:ec:c2:53:82:46:3e:2f:
e4:29:59:14:47:e4:fa:9c:5e:e3:d7:2e:f3:a8:b5:
29:f4:0d:dd:82:88:8b:41:f7:95:f4:f4:67:f4:40:
5b:8c:21:ed:4f:cf:d2:2e:66:6d:85:54:d5:3c:c0:
c2:4d:7b:7d:a4:5c:f5:82:d2:53:c0:c9:b2:a1:f5:
18:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:24:B4:01:FF:EA:C3:D5:DB:42:F8:28:CA:B4:F1:63:C0:64:D6:D5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.52.0/22
Signature Algorithm: sha256WithRSAEncryption
83:d7:78:12:88:f6:f4:c1:3a:f3:b2:cb:95:45:e7:34:70:f9:
82:18:e5:0b:63:dd:53:6f:0b:9b:a3:6a:f4:25:7e:8f:04:5b:
f7:0d:1a:a5:07:4f:71:67:dc:f8:ad:69:b2:12:dc:fe:3c:f7:
a3:86:e1:3a:91:34:c3:59:64:18:c9:31:07:3d:1b:a7:32:b8:
7e:a3:24:aa:a8:47:f1:26:2a:85:8a:cb:dc:7f:ef:c7:68:9d:
89:f4:de:3d:63:24:32:21:76:fc:50:04:03:28:1c:1d:6e:b0:
cf:ae:29:88:d6:07:bb:dd:3a:a2:ed:ae:32:dd:73:1f:14:6b:
68:4e:33:f8:2d:f2:63:5a:f0:d8:da:6c:e6:f0:d3:4d:df:d8:
75:56:67:28:0e:33:08:b2:bc:27:44:f0:45:d4:94:f0:58:f3:
1c:bc:85:04:b3:c0:c9:af:52:d5:4b:72:67:a1:7c:70:62:a9:
03:38:60:c5:f1:1b:cb:3c:96:1a:c8:95:76:53:32:15:fd:47:
f7:a3:58:43:80:e9:76:02:07:92:c5:81:95:31:e1:71:ae:fe:
35:46:c2:97:49:51:31:f1:cc:d2:83:cf:ee:d6:e5:9c:36:9f:
b9:41:1a:51:92:3c:9b:32:9d:bc:82:70:4c:84:ef:62:64:a8:
4a:fa:1c:3e
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzEJIjrWb9/Jrgo+f36VWPlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDgyOTM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NzI0YjQwMWZmZWFjM2Q1ZGI0MmY4MjhjYWI0ZjE2M2MwNjRkNmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMD8q7t9/Y3siSR3HcKLmOCOfSYR
7aMVDLJsTp1E8hT3MhwLMK9jVVUvAQPTxJUsiUHQcDm7FMDfHGl7DkqRbMvFItde
YxsLiWG1iOOplVm6uDrJIQIA1UsDPowHHijwDs/7GZYOblP97LBAD6GXPlK0JQK1
9HcCEkr16vmigCK7JLq2cp++W8XUDarK5vqYK0VrJJMaBT+kjqrMfBXvcqgElITW
J6wkJEO1xPvjvUYOR96QLJE3Hs1W+ezCU4JGPi/kKVkUR+T6nF7j1y7zqLUp9A3d
goiLQfeV9PRn9EBbjCHtT8/SLmZthVTVPMDCTXt9pFz1gtJTwMmyofUY1QIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFIcktAH/6sPV20L4KMq08WPAZNbVMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc1LzNlNTBj
OS05NWQwLTRhYjctYTdlMS0wMTExMDM4OTM0ZDMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzUvM2U1MGM5
LTk1ZDAtNGFiNy1hN2UxLTAxMTEwMzg5MzRkMy8xL2h5UzBBZl9xdzlYYlF2Z295
clR4WThCazF0VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCue80MA0GCSqGSIb3DQEBCwUAA4IBAQCD13gS
iPb0wTrzssuVRec0cPmCGOULY91Tbwubo2r0JX6PBFv3DRqlB09xZ9z4rWmyEtz+
PPejhuE6kTTDWWQYyTEHPRunMrh+oySqqEfxJiqFisvcf+/HaJ2J9N49YyQyIXb8
UAQDKBwdbrDPrimI1ge73Tqi7a4y3XMfFGtoTjP4LfJjWvDY2mzm8NNN39h1Vmco
DjMIsrwnRPBF1JTwWPMcvIUEs8DJr1LVS3JnoXxwYqkDOGDF8RvLPJYayJV2UzIV
/Uf3o1hDgOl2AgeSxYGVMeFxrv41RsKXSVEx8czSg8/u1uWcNp+5QRpRkjybMp28
gnBMhO9iZKhK+hw+
-----END CERTIFICATE-----
Generated at Fri May 3 08:12:03 2024 by rpki-client on console-fra.rpki-client.org