Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.cer
File: i1EYZZMCmXY-Dl8tglZ9xaHVPnk.cer (raw, json)
Hash identifier: muUwt6o6J7CTcwdv1t+VRkizNCLgz2Ze6jFrTkLSzQc=
Subject key identifier: 8B:51:18:65:93:02:99:76:3E:0E:5F:2D:82:56:7D:C5:A1:D5:3E:79
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01931B832241C14726C5B7FBC9E066B01C04
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 11 Nov 2024 13:56:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 15461
IP: 91.219.220.0/22
IP: 193.93.12.0/22
IP: 2001:67c:f84::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1b:83:22:41:c1:47:26:c5:b7:fb:c9:e0:66:b0:1c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 11 13:56:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b511865930299763e0e5f2d82567dc5a1d53e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5f:6d:ec:e3:8e:72:7b:28:21:ab:fd:68:6e:
77:c6:8c:a8:8c:8e:5f:ab:2a:94:65:13:3a:cb:7f:
2b:65:68:4e:2e:4d:a1:5b:99:cd:9f:b7:4c:be:1c:
b4:8b:91:c1:0c:76:48:d6:35:02:67:93:fc:88:ff:
ec:be:3b:d7:e1:5f:49:39:7a:aa:d0:f5:61:72:6f:
9c:d8:81:46:70:3f:f8:63:a2:80:9a:73:1b:4b:62:
ae:7e:ab:af:8b:99:6e:e2:8f:90:3a:09:05:c3:1a:
38:4f:ad:0b:1f:97:01:bb:00:ee:43:c3:0a:20:9d:
d3:c7:ec:78:92:a3:ab:b7:65:f5:da:45:69:25:9d:
63:4f:fe:3e:68:d2:fd:37:ff:b6:07:fe:2b:bc:8a:
17:78:86:78:b7:c2:7c:cb:8f:56:93:8e:af:13:54:
86:43:5e:bb:0b:f4:4e:cd:f1:dc:1f:73:dc:30:3f:
fd:a4:1f:38:aa:66:80:38:e3:5d:55:e3:6f:23:df:
8f:14:62:9b:7a:4a:c2:48:b5:30:b1:83:0f:5f:0b:
87:cf:f5:df:1d:3a:7b:76:b6:a0:1c:1a:9e:00:94:
52:ae:bd:47:f8:0b:c8:b4:7e:25:35:74:31:bf:f6:
f4:92:53:f6:39:ac:de:a7:70:6e:0f:aa:2d:d1:11:
9e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:51:18:65:93:02:99:76:3E:0E:5F:2D:82:56:7D:C5:A1:D5:3E:79
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.220.0/22
193.93.12.0/22
IPv6:
2001:67c:f84::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15461
Signature Algorithm: sha256WithRSAEncryption
3f:bb:aa:cf:24:39:de:2f:e7:74:7b:d2:6f:f7:19:5f:4d:28:
99:12:4e:b7:af:45:67:f0:b9:48:0c:fc:06:d7:1d:58:17:01:
4f:db:01:83:0a:3f:ad:45:0c:d1:73:a0:7b:04:0e:f3:ac:ed:
a0:15:a7:de:54:af:51:2a:79:d8:b6:42:fa:1a:5b:71:1b:a5:
5d:dd:4e:f1:13:c0:52:21:a0:1a:11:7e:b1:dc:4a:6d:30:00:
46:e4:16:32:b7:af:62:08:41:31:a6:38:6d:6d:6b:3b:22:9c:
d4:f8:e4:f4:80:85:d5:e1:f7:c8:5a:3e:eb:f1:66:ef:e7:c3:
ef:8b:07:de:22:65:f5:c8:f8:69:e9:90:35:cd:84:dd:c3:d3:
63:bb:4c:62:1c:8e:26:c3:7f:95:1e:0b:b6:d8:02:f0:e9:9c:
d4:14:35:8b:5a:8c:63:77:18:7f:2e:c8:cb:1a:33:0a:ad:a5:
12:24:26:0b:15:f3:eb:c1:c6:f4:3b:9f:dd:e6:26:b4:82:7e:
81:29:af:b6:2b:07:95:c1:c8:04:84:da:27:c1:75:07:e8:65:
8d:81:54:4c:01:dc:51:94:30:be:db:53:6a:fb:93:cd:0e:87:
6a:6b:86:cd:b6:2f:47:57:81:71:58:6b:44:ac:16:ba:f6:10:
dc:aa:66:1f
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgISAZMbgyJBwUcmxbf7yeBmsBwEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQxMTExMTM1NjM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjUxMTg2NTkzMDI5OTc2M2UwZTVmMmQ4MjU2N2RjNWExZDUzZTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu19t7OOOcnsoIav9aG53xoyojI5f
qyqUZRM6y38rZWhOLk2hW5nNn7dMvhy0i5HBDHZI1jUCZ5P8iP/svjvX4V9JOXqq
0PVhcm+c2IFGcD/4Y6KAmnMbS2Kufquvi5lu4o+QOgkFwxo4T60LH5cBuwDuQ8MK
IJ3Tx+x4kqOrt2X12kVpJZ1jT/4+aNL9N/+2B/4rvIoXeIZ4t8J8y49Wk46vE1SG
Q167C/ROzfHcH3PcMD/9pB84qmaAOONdVeNvI9+PFGKbekrCSLUwsYMPXwuHz/Xf
HTp7dragHBqeAJRSrr1H+AvItH4lNXQxv/b0klP2Oazep3BuD6ot0RGeGQIDAQAB
o4ICtjCCArIwHQYDVR0OBBYEFItRGGWTApl2Pg5fLYJWfcWh1T55MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNkL2E4ZjAy
Yi02NTYzLTQwYTktYTM1YS0xZjA5YmI2ZGIxYjYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2QvYThmMDJi
LTY1NjMtNDBhOS1hMzVhLTFmMDliYjZkYjFiNi8xL2kxRVlaWk1DbVhZLURsOHRn
bFo5eGFIVlBuay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUF
BwEHAQH/BCcwJTASBAIAATAMAwQCW9vcAwQCwV0MMA8EAgACMAkDBwAgAQZ8D4Qw
GQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICPGUwDQYJKoZIhvcNAQELBQADggEBAD+7
qs8kOd4v53R70m/3GV9NKJkSTrevRWfwuUgM/AbXHVgXAU/bAYMKP61FDNFzoHsE
DvOs7aAVp95Ur1Eqedi2QvoaW3EbpV3dTvETwFIhoBoRfrHcSm0wAEbkFjK3r2II
QTGmOG1tazsinNT45PSAhdXh98haPuvxZu/nw++LB94iZfXI+GnpkDXNhN3D02O7
TGIcjibDf5UeC7bYAvDpnNQUNYtajGN3GH8uyMsaMwqtpRIkJgsV8+vBxvQ7n93m
JrSCfoEpr7YrB5XByASE2ifBdQfoZY2BVEwB3FGUML7bU2r7k80Oh2prhs22L0dX
gXFYa0SsFrr2ENyqZh8=
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:20:00 2024 by rpki-client on console-fra.rpki-client.org