Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i4-7JMKLohFyEvDTJzo8KkwnzBI.cer
File: i4-7JMKLohFyEvDTJzo8KkwnzBI.cer (raw, json)
Hash identifier: Qg/MUAGv7yeExeB5G8MeIkGLjvMRAmGfUiDGL4gxz4U=
Subject key identifier: 8B:8F:BB:24:C2:8B:A2:11:72:12:F0:D3:27:3A:3C:2A:4C:27:CC:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC870A36EA25A3B447E606ECC81AFC18B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:31:14 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 197287
IP: 78.31.176.0/24
IP: 178.213.104.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:a3:6e:a2:5a:3b:44:7e:60:6e:cc:81:af:c1:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b8fbb24c28ba2117212f0d3273a3c2a4c27cc12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:38:9c:88:23:6d:0c:8b:93:e6:53:1f:6e:6b:
09:f1:35:91:45:51:bb:a4:a2:c5:c7:c9:2f:43:db:
9e:bf:d2:1f:d7:59:cf:d0:8a:ab:26:dd:d7:16:ed:
fc:78:78:92:7a:43:ff:2b:f9:40:dd:79:54:8e:da:
ee:44:cc:e4:4b:d1:61:2e:70:1c:11:83:0c:ff:32:
79:6b:fd:01:42:5c:53:1e:96:6a:21:a0:35:6b:51:
e9:c8:0a:a3:d4:41:84:6f:84:96:c5:a2:9e:07:6b:
bf:fb:b2:75:df:a0:a1:86:6f:f5:f5:c4:1c:6a:f6:
c2:d3:ca:a2:0e:66:71:91:88:f7:59:5c:42:d1:3c:
7f:0e:7d:4e:5b:cc:11:23:85:39:07:42:9d:45:ad:
b5:f7:1a:3d:5a:8e:b8:fb:71:b8:1e:0e:3d:b8:0d:
77:34:cd:a7:ec:ae:ea:a6:46:e5:03:7b:4b:d7:c4:
f5:41:46:db:3f:7e:0f:45:5a:ad:6b:9e:90:2b:0b:
f4:7d:d2:ea:a6:30:7d:ae:47:95:bf:6d:b2:b6:5f:
e4:b6:d2:fa:ee:ab:35:f6:5b:f8:26:22:7e:b4:ca:
ce:a1:7d:57:68:4b:69:2e:f9:e3:cd:b1:06:1a:12:
20:67:ad:db:50:a2:bb:95:28:93:3d:dc:8a:82:01:
94:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:8F:BB:24:C2:8B:A2:11:72:12:F0:D3:27:3A:3C:2A:4C:27:CC:12
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.31.176.0/24
178.213.104.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197287
Signature Algorithm: sha256WithRSAEncryption
40:f3:84:c5:85:4b:56:d6:09:fe:f4:5b:a4:31:3c:c5:87:dd:
d7:76:cb:ed:7d:63:77:f2:fc:eb:e1:d1:a0:f6:5d:d2:52:65:
f9:6b:21:ac:3f:b9:8b:3c:e5:db:0f:57:4a:ca:3e:ca:9c:0e:
00:20:62:e7:26:62:d9:50:26:3d:22:ff:dc:72:e1:15:df:3b:
c7:8d:7f:b7:a8:de:aa:8e:a8:43:f7:0e:3f:80:e7:2d:36:d3:
98:63:3a:c2:d2:e3:5a:dc:0c:2a:ee:e1:99:6c:ea:5e:f2:b6:
87:31:7f:95:d6:e1:32:db:5f:59:1e:3c:d4:a4:e3:80:1d:a6:
4f:0e:06:0d:b8:c5:20:70:6c:0b:77:ac:6b:1d:60:ed:e2:38:
a3:d2:5d:aa:0e:9c:41:cf:b6:75:af:3d:25:04:64:3e:42:03:
14:68:d3:7a:b3:4d:4e:fd:4a:48:3d:10:fb:f8:63:b3:71:f9:
84:66:d9:17:01:51:2b:d7:01:b1:df:f6:67:da:1a:ab:7e:93:
62:66:bb:3f:f8:64:5d:48:f2:08:34:10:20:9a:41:bd:30:63:
32:b0:db:2a:1b:66:57:fe:42:a0:eb:a2:9d:1e:e3:b8:97:aa:
21:33:9c:88:8e:88:52:2a:58:be:8a:2c:15:93:3c:de:62:af:
08:74:21:41
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAYzIcKNuolo7RH5gbsyBr8GLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDQzMTE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjhmYmIyNGMyOGJhMjExNzIxMmYwZDMyNzNhM2MyYTRjMjdjYzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jiciCNtDIuT5lMfbmsJ8TWRRVG7
pKLFx8kvQ9uev9If11nP0IqrJt3XFu38eHiSekP/K/lA3XlUjtruRMzkS9FhLnAc
EYMM/zJ5a/0BQlxTHpZqIaA1a1HpyAqj1EGEb4SWxaKeB2u/+7J136Chhm/19cQc
avbC08qiDmZxkYj3WVxC0Tx/Dn1OW8wRI4U5B0KdRa219xo9Wo64+3G4Hg49uA13
NM2n7K7qpkblA3tL18T1QUbbP34PRVqta56QKwv0fdLqpjB9rkeVv22ytl/kttL6
7qs19lv4JiJ+tMrOoX1XaEtpLvnjzbEGGhIgZ63bUKK7lSiTPdyKggGUbwIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFIuPuyTCi6IRchLw0yc6PCpMJ8wSMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg0LzVmMjE2
Ny02YTVkLTRkNDEtODI5Ny1jMmU5ZDE3ZDhkNGEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQvNWYyMTY3
LTZhNWQtNGQ0MS04Mjk3LWMyZTlkMTdkOGQ0YS8xL2k0LTdKTUtMb2hGeUV2RFRK
em84S2t3bnpCSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQATh+wAwQDstVoMBoGCCsGAQUFBwEIAQH/BAsw
CaAHMAUCAwMCpzANBgkqhkiG9w0BAQsFAAOCAQEAQPOExYVLVtYJ/vRbpDE8xYfd
13bL7X1jd/L86+HRoPZd0lJl+WshrD+5izzl2w9XSso+ypwOACBi5yZi2VAmPSL/
3HLhFd87x41/t6jeqo6oQ/cOP4DnLTbTmGM6wtLjWtwMKu7hmWzqXvK2hzF/ldbh
MttfWR481KTjgB2mTw4GDbjFIHBsC3esax1g7eI4o9Jdqg6cQc+2da89JQRkPkID
FGjTerNNTv1KSD0Q+/hjs3H5hGbZFwFRK9cBsd/2Z9oaq36TYma7P/hkXUjyCDQQ
IJpBvTBjMrDbKhtmV/5CoOuinR7juJeqITOciI6IUipYvoosFZM83mKvCHQhQQ==
-----END CERTIFICATE-----
Generated at Fri May 3 09:32:53 2024 by rpki-client on console-ams.rpki-client.org