Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer
File: idvHFWpO58Z9nmhHZ6L0uvijW6s.cer (raw, json)
Hash identifier: u6luuQPi3Ku9ii4OHV4iSNk78I2OXCbHTo6nVQfSz+8=
Subject key identifier: 89:DB:C7:15:6A:4E:E7:C6:7D:9E:68:47:67:A2:F4:BA:F8:A3:5B:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA28418A7C74D1F1D6E156E8D0FF6659
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:31:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208059
IP: 46.149.109.0/24
IP: 2a10:200::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:28:41:8a:7c:74:d1:f1:d6:e1:56:e8:d0:ff:66:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=89dbc7156a4ee7c67d9e684767a2f4baf8a35bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:64:f2:83:24:34:96:97:3d:7a:2d:31:62:86:
04:6b:be:4e:87:51:49:f5:9c:d7:65:0a:e4:f0:81:
18:01:73:fd:7a:7d:3b:1b:5d:9a:05:3a:f4:9e:d0:
5a:f3:0d:3e:a2:a7:9d:e8:b9:36:1c:53:c5:ae:a6:
e5:90:ae:79:ce:5e:ec:86:ab:a0:0d:b2:29:eb:9f:
f7:1a:9c:41:7e:12:05:a8:47:48:eb:ef:2b:a0:17:
9b:69:de:82:ae:e7:7b:44:54:6b:81:af:68:2f:b0:
1c:8f:0c:1e:06:4a:13:4c:de:c4:ca:5a:f2:5d:5b:
cc:72:c0:15:7d:0f:af:13:43:3e:67:79:51:35:d6:
59:37:fa:86:b0:9c:9e:5a:17:d9:24:38:f7:10:01:
a0:fc:95:18:f8:47:a8:3c:9e:e0:ae:89:05:f2:13:
83:1c:2c:12:a2:34:4b:4b:8a:62:7f:5b:1a:f9:f8:
e7:b8:51:bb:4a:4b:a8:37:c6:54:fe:d7:be:1c:ac:
0e:27:36:83:0e:33:97:1e:54:12:0e:e9:49:1f:bb:
e6:b5:5c:0d:55:87:25:64:a8:e2:96:44:b6:25:3f:
74:6f:3e:b4:dd:7c:32:72:86:74:97:6b:b3:ce:a8:
af:2a:40:1c:38:9d:9a:6e:ee:4b:48:4b:76:f3:76:
c7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:DB:C7:15:6A:4E:E7:C6:7D:9E:68:47:67:A2:F4:BA:F8:A3:5B:AB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.149.109.0/24
IPv6:
2a10:200::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208059
Signature Algorithm: sha256WithRSAEncryption
3d:38:f5:9c:4c:f9:42:67:c5:05:cb:f3:f2:de:95:71:29:ec:
5b:9d:94:0c:3c:01:f5:01:e5:58:e4:ba:a9:c7:94:43:de:28:
35:2a:df:a4:f0:43:09:e0:43:85:94:08:ef:ce:59:c1:28:31:
ab:0b:2d:ef:3f:ff:51:24:29:bc:a1:6f:d3:65:7e:e7:a4:5a:
3a:df:09:8f:d7:a8:eb:1b:bb:b9:66:97:26:25:79:10:6d:62:
81:21:da:21:b7:a5:69:3a:25:be:65:ef:f6:54:6f:cf:83:83:
74:86:45:2f:3a:1c:36:fe:44:b2:27:24:40:4a:27:de:06:ef:
1f:13:62:2d:9e:a2:71:a4:72:d0:c6:db:ac:78:db:53:1d:a4:
dc:05:ee:81:9f:ac:c9:43:f7:7f:85:18:c8:a0:45:16:36:3c:
8a:99:70:91:da:ee:82:a4:c3:cb:0d:6d:67:7e:f9:db:21:d6:
0c:41:54:2b:6b:b7:d8:98:79:49:e6:e4:d7:bd:70:86:ad:a7:
b5:bc:4e:f6:66:51:21:3c:bf:b5:ce:b4:5e:71:ca:04:ac:f3:
3c:b8:60:74:db:64:3d:66:e4:2b:59:24:2b:e3:6e:59:ff:73:
6c:54:66:36:be:a2:76:7e:8c:00:26:9b:14:25:8c:8a:89:35:
d9:e3:3c:0e
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzKKEGKfHTR8dbhVujQ/2ZZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTIzMTI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OWRiYzcxNTZhNGVlN2M2N2Q5ZTY4NDc2N2EyZjRiYWY4YTM1YmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGTygyQ0lpc9ei0xYoYEa75Oh1FJ
9ZzXZQrk8IEYAXP9en07G12aBTr0ntBa8w0+oqed6Lk2HFPFrqblkK55zl7shqug
DbIp65/3GpxBfhIFqEdI6+8roBebad6Crud7RFRrga9oL7AcjwweBkoTTN7Eylry
XVvMcsAVfQ+vE0M+Z3lRNdZZN/qGsJyeWhfZJDj3EAGg/JUY+EeoPJ7grokF8hOD
HCwSojRLS4pif1sa+fjnuFG7SkuoN8ZU/te+HKwOJzaDDjOXHlQSDulJH7vmtVwN
VYclZKjilkS2JT90bz603XwycoZ0l2uzzqivKkAcOJ2abu5LSEt283bHUwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFInbxxVqTufGfZ5oR2ei9Lr4o1urMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNjLzVhOWE5
OS00M2MyLTRjYzgtYTM3Yi00OTUwMWE3Njk0YzQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvNWE5YTk5
LTQzYzItNGNjOC1hMzdiLTQ5NTAxYTc2OTRjNC8xL2lkdkhGV3BPNThaOW5taEha
NkwwdXZpalc2cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQALpVtMA0EAgACMAcDBQAqEAIAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMsuzANBgkqhkiG9w0BAQsFAAOCAQEAPTj1nEz5QmfF
Bcvz8t6VcSnsW52UDDwB9QHlWOS6qceUQ94oNSrfpPBDCeBDhZQI785ZwSgxqwst
7z//USQpvKFv02V+56RaOt8Jj9eo6xu7uWaXJiV5EG1igSHaIbelaTolvmXv9lRv
z4ODdIZFLzocNv5EsickQEon3gbvHxNiLZ6icaRy0MbbrHjbUx2k3AXugZ+syUP3
f4UYyKBFFjY8iplwkdrugqTDyw1tZ3752yHWDEFUK2u32Jh5Sebk171whq2ntbxO
9mZRITy/tc60XnHKBKzzPLhgdNtkPWbkK1kkK+NuWf9zbFRmNr6idn6MACabFCWM
iok12eM8Dg==
-----END CERTIFICATE-----
Generated at Fri May 3 09:33:15 2024 by rpki-client on console-ams.rpki-client.org