Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ih8K1VcrribjnIdAxoqPu0buSGQ.cer
File: ih8K1VcrribjnIdAxoqPu0buSGQ.cer (raw, json)
Hash identifier: deAe5ahKvhvXnOmtCKP6pu64jWmkoY+VGqdDZj+2hNo=
Subject key identifier: 8A:1F:0A:D5:57:2B:AE:26:E3:9C:87:40:C6:8A:8F:BB:46:EE:48:64
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CF91A4AA13E95FB89B28334760D2FDA16
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 11 Jan 2024 15:18:19 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 201634
IP: 185.130.50.0/24
IP: 2a05:c180::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f9:1a:4a:a1:3e:95:fb:89:b2:83:34:76:0d:2f:da:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 11 15:18:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a1f0ad5572bae26e39c8740c68a8fbb46ee4864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e8:ea:c2:08:2d:92:10:6b:d3:52:0e:0f:25:
24:06:31:35:d5:da:7c:68:21:e5:45:8f:ab:63:a8:
53:4f:02:d7:06:c0:35:30:10:09:f0:29:80:06:03:
0f:09:a1:af:a5:5f:06:1c:a7:b0:06:57:9c:0f:11:
aa:da:e1:28:31:6f:e6:d4:f0:7b:5d:6a:2f:a5:6f:
46:db:26:9a:19:09:1c:50:1b:fb:a0:f8:05:14:f4:
ea:1a:71:e5:91:fa:96:56:bd:cc:1d:cf:68:3b:8e:
8b:a8:44:bb:df:6c:35:5d:f0:a4:9a:c8:05:2e:44:
87:33:1e:d2:c3:d9:dc:0c:31:d1:8e:b1:d3:7b:4d:
f3:76:90:23:d3:c5:71:bc:28:70:10:98:f0:f7:54:
21:a9:52:05:c3:17:03:0d:3e:66:6f:a4:8c:a0:41:
a0:3d:01:01:7a:00:27:7b:d7:aa:04:f9:74:9d:ad:
49:bf:16:14:ed:5a:68:2f:e2:c4:72:74:9e:9f:7d:
91:e5:10:be:cf:a9:99:d9:fa:3b:cd:f2:bb:a4:57:
a0:ce:1a:e3:f0:96:91:c4:d8:4f:75:f5:b5:13:c5:
ee:13:58:c6:ab:85:fc:56:04:d6:32:7c:aa:74:4f:
e3:03:e6:5b:0b:83:2e:f9:71:fc:89:77:d7:b3:3f:
31:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:1F:0A:D5:57:2B:AE:26:E3:9C:87:40:C6:8A:8F:BB:46:EE:48:64
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.50.0/24
IPv6:
2a05:c180::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201634
Signature Algorithm: sha256WithRSAEncryption
1c:d7:9e:35:40:40:e2:ef:8c:d9:18:2e:61:a8:9b:4d:1f:e2:
0e:9f:6f:63:1e:b4:ff:06:50:65:27:9c:2a:bf:45:b8:49:b7:
6f:e4:57:e9:d9:80:9d:54:88:6a:1e:28:da:98:74:84:61:db:
94:47:cb:9f:c0:9c:a2:16:a0:b3:cc:16:18:32:1d:e2:4b:e1:
56:0e:4f:38:a2:89:7f:ae:cd:83:92:15:2b:df:0a:b4:d3:8a:
e0:fa:04:15:fa:58:59:24:e9:ce:87:ea:44:68:31:31:f5:be:
4a:d6:77:f5:3e:f9:b9:3c:f8:b4:a7:ea:da:36:3f:02:4a:db:
99:3f:f7:c6:65:01:22:63:4e:46:28:d7:cc:97:90:fd:7d:21:
fc:87:14:43:6b:b0:bd:37:2c:62:41:3f:d3:54:17:26:af:c4:
65:ec:2d:e5:dc:d1:34:b2:24:cd:93:bc:af:e4:bb:90:ad:5d:
96:d8:03:be:30:1d:27:fd:f6:78:b6:43:d2:d8:0b:17:d5:fe:
61:cf:8e:a7:5d:f5:6e:2d:b9:2c:b9:17:cc:59:2e:f0:df:b6:
9e:5a:b5:b6:24:fd:ac:9d:f1:56:4a:b8:d2:11:6a:9f:02:14:
e3:2f:54:da:aa:9d:e8:ab:b3:cb:54:dd:c0:81:4f:90:ce:3d:
13:f1:3b:8a
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYz5GkqhPpX7ibKDNHYNL9oWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTExMTUxODE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTFmMGFkNTU3MmJhZTI2ZTM5Yzg3NDBjNjhhOGZiYjQ2ZWU0ODY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzejqwggtkhBr01IODyUkBjE11dp8
aCHlRY+rY6hTTwLXBsA1MBAJ8CmABgMPCaGvpV8GHKewBlecDxGq2uEoMW/m1PB7
XWovpW9G2yaaGQkcUBv7oPgFFPTqGnHlkfqWVr3MHc9oO46LqES732w1XfCkmsgF
LkSHMx7Sw9ncDDHRjrHTe03zdpAj08VxvChwEJjw91QhqVIFwxcDDT5mb6SMoEGg
PQEBegAne9eqBPl0na1JvxYU7VpoL+LEcnSen32R5RC+z6mZ2fo7zfK7pFegzhrj
8JaRxNhPdfW1E8XuE1jGq4X8VgTWMnyqdE/jA+ZbC4Mu+XH8iXfXsz8x6QIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFIofCtVXK64m45yHQMaKj7tG7khkMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IxLzJmZDIw
YS01M2FlLTRiZWEtODBjOS0wM2YyM2E3Mzk0MWQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEvMmZkMjBh
LTUzYWUtNGJlYS04MGM5LTAzZjIzYTczOTQxZC8xL2loOEsxVmNycmliam5JZEF4
b3FQdTBidVNHUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAuYIyMA0EAgACMAcDBQMqBcGAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMTojANBgkqhkiG9w0BAQsFAAOCAQEAHNeeNUBA4u+M
2RguYaibTR/iDp9vYx60/wZQZSecKr9FuEm3b+RX6dmAnVSIah4o2ph0hGHblEfL
n8Ccohags8wWGDId4kvhVg5POKKJf67Ng5IVK98KtNOK4PoEFfpYWSTpzofqRGgx
MfW+StZ39T75uTz4tKfq2jY/AkrbmT/3xmUBImNORijXzJeQ/X0h/IcUQ2uwvTcs
YkE/01QXJq/EZewt5dzRNLIkzZO8r+S7kK1dltgDvjAdJ/32eLZD0tgLF9X+Yc+O
p131bi25LLkXzFku8N+2nlq1tiT9rJ3xVkq40hFqnwIU4y9U2qqd6Kuzy1TdwIFP
kM49E/E7ig==
-----END CERTIFICATE-----
Generated at Fri May 3 13:55:27 2024 by rpki-client on console-fra.rpki-client.org