Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iQxJg-4YvF4CX6r94xxkE0pGIKw.cer
File: iQxJg-4YvF4CX6r94xxkE0pGIKw.cer (raw, json)
Hash identifier: e2rL9PJJBBGZ6PjnK3ofn8PC/ehK9OpNVMz8jidNaBs=
Subject key identifier: 89:0C:49:83:EE:18:BC:5E:02:5F:AA:FD:E3:1C:64:13:4A:46:20:AC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BC9D48ECB1228E76D84079A311F250
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:50 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 56634
IP: 192.162.212.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:9d:48:ec:b1:22:8e:76:d8:40:79:a3:11:f2:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=890c4983ee18bc5e025faafde31c64134a4620ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f2:2f:ae:f8:fb:0a:24:66:b5:c8:55:41:f2:
a7:10:07:c5:18:08:41:95:97:cb:f5:82:85:c5:8f:
ae:98:d5:cb:ca:b0:8c:5b:2d:1e:20:a2:67:e7:32:
75:7d:7f:ce:e6:1a:b0:1f:06:cf:a7:b4:a4:fe:ec:
ac:bf:a0:f2:27:f4:03:f6:a6:95:81:2f:95:48:24:
7d:69:7c:85:32:2c:6a:2e:27:02:bf:3c:cb:a2:4c:
41:6f:bd:25:2e:b5:e6:2e:2f:85:9f:94:67:77:7d:
8e:b5:3b:71:a1:04:79:12:7f:a5:f1:9d:dc:c1:ee:
4c:ec:0f:a3:df:79:fd:32:db:11:da:0a:80:66:ec:
a8:99:b4:ed:0a:08:f0:76:dc:0f:60:da:fa:cb:f0:
f0:0c:02:67:9c:1f:f1:ff:f2:f7:a9:d2:7d:1b:79:
12:4a:9b:4a:d7:c5:1b:16:cb:44:49:dc:7c:45:e7:
d6:86:03:c5:db:1d:62:ac:ea:db:f4:9c:f4:c0:a5:
21:96:01:4e:ff:cc:97:a2:08:4b:65:bc:0c:f7:a3:
9b:c0:13:7e:13:21:54:a8:8d:0d:e2:4b:a6:44:a6:
eb:ab:4d:d7:53:00:ec:e0:7a:d9:ae:16:08:87:51:
29:14:29:62:b0:ef:b1:d0:81:da:cb:6d:9b:0a:3e:
2d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:0C:49:83:EE:18:BC:5E:02:5F:AA:FD:E3:1C:64:13:4A:46:20:AC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.162.212.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56634
Signature Algorithm: sha256WithRSAEncryption
2c:33:01:5d:06:e0:70:80:5d:e8:51:b3:e1:6c:39:94:b4:9e:
24:c9:a0:72:81:89:48:85:ed:60:0a:0e:91:1e:5e:28:8f:2d:
6a:ff:1e:81:5e:87:15:10:73:b4:03:c0:df:00:9c:e9:38:57:
e9:e3:0b:27:6b:13:18:8d:88:5f:09:2a:3b:3d:4f:3b:e8:02:
79:17:89:2d:64:6c:00:a9:c1:ee:91:aa:98:01:1c:10:ba:1f:
39:11:8a:79:67:0c:68:21:ba:12:3c:19:f3:cd:d5:92:08:a0:
79:a2:cc:d6:a7:79:27:dc:49:ef:cc:87:8d:7b:da:8a:b7:6f:
55:45:13:93:04:2a:00:fd:74:06:fe:54:e2:d2:e4:e3:be:3f:
26:f2:35:15:cb:95:d4:31:27:9b:aa:cf:8d:26:a1:d1:ae:7b:
6b:41:85:71:19:e7:0c:3b:76:48:97:77:a8:56:5d:83:75:da:
95:8f:44:f5:f4:d6:e0:31:0f:dc:3e:ea:43:2a:00:8a:1b:c2:
42:10:81:7b:3e:5e:7e:88:ff:5f:da:a1:62:be:2c:4f:47:d6:
e1:05:8c:66:ac:3f:8e:26:ac:a1:ad:1f:0b:a3:27:9f:2c:4d:
2f:92:eb:f3:49:56:a4:e3:d5:35:1a:f8:26:85:40:2f:df:ba:
3e:10:c8:23
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYzJvJ1I7LEijnbYQHmjEfJQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTAzMzUwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTBjNDk4M2VlMThiYzVlMDI1ZmFhZmRlMzFjNjQxMzRhNDYyMGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvIvrvj7CiRmtchVQfKnEAfFGAhB
lZfL9YKFxY+umNXLyrCMWy0eIKJn5zJ1fX/O5hqwHwbPp7Sk/uysv6DyJ/QD9qaV
gS+VSCR9aXyFMixqLicCvzzLokxBb70lLrXmLi+Fn5Rnd32OtTtxoQR5En+l8Z3c
we5M7A+j33n9MtsR2gqAZuyombTtCgjwdtwPYNr6y/DwDAJnnB/x//L3qdJ9G3kS
SptK18UbFstESdx8RefWhgPF2x1irOrb9Jz0wKUhlgFO/8yXoghLZbwM96ObwBN+
EyFUqI0N4kumRKbrq03XUwDs4HrZrhYIh1EpFClisO+x0IHay22bCj4t+wIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFIkMSYPuGLxeAl+q/eMcZBNKRiCsMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkzLzQxMWM0
Yi0xNTZhLTRjYzAtYTM0ZS1lYzE5Y2QzOGYyNDUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTMvNDExYzRi
LTE1NmEtNGNjMC1hMzRlLWVjMTljZDM4ZjI0NS8xL2lReEpnLTRZdkY0Q1g2cjk0
eHhrRTBwR0lLdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCwKLUMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwDdOjANBgkqhkiG9w0BAQsFAAOCAQEALDMBXQbgcIBd6FGz4Ww5lLSeJMmgcoGJ
SIXtYAoOkR5eKI8tav8egV6HFRBztAPA3wCc6ThX6eMLJ2sTGI2IXwkqOz1PO+gC
eReJLWRsAKnB7pGqmAEcELofORGKeWcMaCG6EjwZ883VkgigeaLM1qd5J9xJ78yH
jXvairdvVUUTkwQqAP10Bv5U4tLk474/JvI1FcuV1DEnm6rPjSah0a57a0GFcRnn
DDt2SJd3qFZdg3XalY9E9fTW4DEP3D7qQyoAihvCQhCBez5efoj/X9qhYr4sT0fW
4QWMZqw/jiasoa0fC6MnnyxNL5Lr80lWpOPVNRr4JoVAL9+6PhDIIw==
-----END CERTIFICATE-----
Generated at Fri May 3 03:37:08 2024 by rpki-client on console-fra.rpki-client.org