Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/imcGszlg4dFf0XcKKY4KVVpBqAk.cer
File: imcGszlg4dFf0XcKKY4KVVpBqAk.cer (raw, json)
Hash identifier: HEzmqkyzDp3tPnK4qw6wLuvC9e51AQrazrR2dey0Sas=
Subject key identifier: 8A:67:06:B3:39:60:E1:D1:5F:D1:77:0A:29:8E:0A:55:5A:41:A8:09
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA96C7B23EF7AF77532FA38CB89E14F1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/a4d97c-214f-4e58-8a1b-9b7ba2515607/1/imcGszlg4dFf0XcKKY4KVVpBqAk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/a4d97c-214f-4e58-8a1b-9b7ba2515607/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 14:32:08 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.33.6.0/23
IP: 193.33.40.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:96:c7:b2:3e:f7:af:77:53:2f:a3:8c:b8:9e:14:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 14:32:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a6706b33960e1d15fd1770a298e0a555a41a809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bf:b8:1d:a8:56:37:bb:bf:d3:07:ee:43:f8:
68:2c:a2:8c:36:c9:75:c6:08:74:49:3e:93:b8:d0:
88:21:d9:be:b0:d1:21:7f:61:74:fd:92:2f:dd:50:
ec:99:c4:df:59:87:be:b5:24:e7:33:4e:c1:62:c3:
01:cb:cc:5a:e1:d2:c6:ab:cb:0b:f5:38:4a:41:9b:
89:77:a2:50:ab:54:b6:e0:30:c8:33:72:77:ab:06:
cb:7c:56:22:0b:2d:e4:ca:47:29:fe:b1:50:81:dc:
19:b3:c3:bd:02:30:95:05:9e:3f:c8:c0:98:f7:3f:
56:60:79:18:db:00:d1:58:67:fe:19:c5:fe:22:ae:
7a:8b:7f:5c:fe:a1:dd:0d:dc:46:03:f6:61:8b:ca:
1f:02:cf:3f:5e:92:10:92:5e:90:6d:52:e1:69:8a:
ef:c1:4c:ed:60:4d:a8:ed:cf:8d:3c:f7:54:04:3b:
83:4f:eb:de:46:32:76:59:bd:f6:6f:6b:6f:38:23:
b8:bb:71:98:49:f1:51:81:cb:ca:7d:7f:a8:97:cd:
cd:3d:f6:22:65:0f:d4:e7:9e:d0:fe:50:89:49:9b:
d6:3c:dd:1e:16:26:3a:50:d8:83:f3:2d:b3:67:7a:
60:5e:34:3c:1b:0b:86:c2:d0:80:cc:58:f8:74:82:
6a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:67:06:B3:39:60:E1:D1:5F:D1:77:0A:29:8E:0A:55:5A:41:A8:09
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a4d97c-214f-4e58-8a1b-9b7ba2515607/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a4d97c-214f-4e58-8a1b-9b7ba2515607/1/imcGszlg4dFf0XcKKY4KVVpBqAk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.6.0/23
193.33.40.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:d4:9c:77:91:0e:dd:de:79:a5:0a:c6:73:d2:64:df:03:70:
7e:12:5e:9c:9b:65:b5:dd:7a:df:54:95:aa:06:bb:d3:b7:29:
f8:26:e0:b2:84:01:dd:50:c0:52:a3:fb:b3:bc:6c:25:5b:1c:
8a:75:0b:7c:4f:fa:65:67:e5:f2:a9:c2:eb:2e:73:a8:76:09:
ca:6b:35:2d:93:28:28:08:f0:8a:b6:e8:f4:cf:73:e8:42:ff:
6b:ec:60:e2:be:53:f7:9a:35:27:e0:39:26:b7:d8:e7:74:9f:
b7:8b:c1:79:24:64:e8:6a:0a:38:72:a6:d2:0d:7c:0e:8a:be:
2a:a4:46:e2:b3:33:79:9c:a7:3e:73:ca:72:dc:42:0b:9b:b2:
17:dc:7d:41:dc:a0:9c:33:4c:e3:d0:6f:64:c4:10:e6:4a:bb:
15:f3:81:ba:e9:08:8f:3e:48:e5:09:da:2a:6d:81:45:11:16:
7f:e8:ad:48:b5:e6:0a:58:2e:34:ea:b0:a5:a8:96:2e:e6:3a:
4a:c0:12:35:ff:da:24:eb:5b:5d:17:3e:ca:31:f5:fb:23:c0:
e2:62:51:32:f7:41:0d:d4:69:2a:c3:48:ab:4b:12:0a:72:d3:
c7:b0:f3:cc:07:f8:c8:4e:eb:56:0c:50:35:29:22:58:a2:8d:
d5:c0:cf:80
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgISAYzKlseyPvevd1Mvo4y4nhTxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTQzMjA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTY3MDZiMzM5NjBlMWQxNWZkMTc3MGEyOThlMGE1NTVhNDFhODA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoL+4HahWN7u/0wfuQ/hoLKKMNsl1
xgh0ST6TuNCIIdm+sNEhf2F0/ZIv3VDsmcTfWYe+tSTnM07BYsMBy8xa4dLGq8sL
9ThKQZuJd6JQq1S24DDIM3J3qwbLfFYiCy3kykcp/rFQgdwZs8O9AjCVBZ4/yMCY
9z9WYHkY2wDRWGf+GcX+Iq56i39c/qHdDdxGA/Zhi8ofAs8/XpIQkl6QbVLhaYrv
wUztYE2o7c+NPPdUBDuDT+veRjJ2Wb32b2tvOCO4u3GYSfFRgcvKfX+ol83NPfYi
ZQ/U557Q/lCJSZvWPN0eFiY6UNiD8y2zZ3pgXjQ8GwuGwtCAzFj4dIJqpQIDAQAB
o4ICijCCAoYwHQYDVR0OBBYEFIpnBrM5YOHRX9F3CimOClVaQagJMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FiL2E0ZDk3
Yy0yMTRmLTRlNTgtOGExYi05YjdiYTI1MTU2MDcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWIvYTRkOTdj
LTIxNGYtNGU1OC04YTFiLTliN2JhMjUxNTYwNy8xL2ltY0dzemxnNGRGZjBYY0tL
WTRLVlZwQnFBay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQBwSEGAwQBwSEoMA0GCSqGSIb3DQEBCwUAA4IB
AQCw1Jx3kQ7d3nmlCsZz0mTfA3B+El6cm2W13XrfVJWqBrvTtyn4JuCyhAHdUMBS
o/uzvGwlWxyKdQt8T/plZ+XyqcLrLnOodgnKazUtkygoCPCKtuj0z3PoQv9r7GDi
vlP3mjUn4Dkmt9jndJ+3i8F5JGToago4cqbSDXwOir4qpEbiszN5nKc+c8py3EIL
m7IX3H1B3KCcM0zj0G9kxBDmSrsV84G66QiPPkjlCdoqbYFFERZ/6K1IteYKWC40
6rClqJYu5jpKwBI1/9ok61tdFz7KMfX7I8DiYlEy90EN1Gkqw0irSxIKctPHsPPM
B/jITutWDFA1KSJYoo3VwM+A
-----END CERTIFICATE-----
Generated at Fri May 3 10:53:27 2024 by rpki-client on console-fra.rpki-client.org