Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer
File: inuFwxZYaxmdJr_Ej-JZiTnLb94.cer (raw, json)
Hash identifier: upGn+GW9zloaN4fE3QTTuSqDXFwjHAV6og6DmgdMWUI=
Subject key identifier: 8A:7B:85:C3:16:58:6B:19:9D:26:BF:C4:8F:E2:59:89:39:CB:6F:DE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC34911BBBA1AF2BE47DC1F8BD873EF1A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:54 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.61.152.0/22
IP: 185.141.117.0 -- 185.141.118.255
IP: 2a02:77e0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:11:bb:ba:1a:f2:be:47:dc:1f:8b:d8:73:ef:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a7b85c316586b199d26bfc48fe2598939cb6fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:86:e6:cb:1b:dd:ea:a2:4f:11:76:72:1d:90:
71:ab:9a:14:fc:9b:19:72:6a:01:96:6a:06:fa:c4:
d1:31:02:3c:cf:dd:50:69:e6:8d:f2:db:df:f1:e2:
ff:6f:47:01:77:9d:43:40:ab:d3:ed:88:b0:a0:f2:
bc:be:8c:05:3a:42:3c:61:a1:d7:0b:1b:ef:f4:ae:
25:54:a7:d4:eb:09:28:50:ac:2f:3e:39:3e:23:ca:
58:af:4c:bf:18:1c:ed:b2:f2:b9:bf:e5:a0:77:8f:
01:2d:7f:45:a2:b1:0e:eb:c3:60:e1:ad:66:6f:e1:
35:08:12:7c:fa:75:2c:f5:15:2b:f6:41:4e:84:2e:
47:33:c6:85:b4:97:c2:22:0b:b7:eb:f9:67:96:07:
c7:b3:60:c4:ef:40:56:75:4e:23:9e:94:d2:34:df:
81:2a:9d:22:98:0e:a1:63:10:1c:dc:22:57:27:6b:
db:11:10:6d:31:c3:be:51:f1:db:1c:7f:af:bf:99:
dd:b2:c9:1c:9b:6f:9c:ea:d1:96:94:67:39:19:72:
ab:46:51:a0:8a:9c:27:7c:96:b0:a3:13:bb:dc:eb:
f8:86:03:51:d1:d4:c2:99:fe:01:92:c2:05:54:33:
4f:b4:4d:1f:24:c7:8a:ca:c0:07:6e:ed:62:ab:34:
43:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:7B:85:C3:16:58:6B:19:9D:26:BF:C4:8F:E2:59:89:39:CB:6F:DE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.61.152.0/22
185.141.117.0-185.141.118.255
IPv6:
2a02:77e0::/32
Signature Algorithm: sha256WithRSAEncryption
8f:9d:50:48:b0:14:35:a7:f9:e1:d9:53:89:fe:b7:ec:08:12:
21:b4:17:cb:ae:44:dc:89:68:d1:ee:ff:b3:26:21:b6:89:59:
61:a8:0a:79:61:6b:22:c8:da:ed:f1:30:c3:29:c0:05:cf:bf:
87:66:b9:6a:8e:4a:0c:84:d5:1c:83:0a:c5:62:bc:37:82:5d:
95:1a:9f:c7:e7:a1:ea:6b:fa:f1:9a:57:d4:0f:fb:ba:d3:09:
df:03:95:5e:8f:4d:b9:f4:70:61:e1:2d:d6:4e:2f:d8:13:a6:
91:7c:ed:26:b8:95:df:9a:d9:b9:a1:e4:ff:d1:bb:00:f2:4f:
c7:bd:72:c3:64:1a:39:c8:23:49:1c:1b:e0:e7:db:c6:6c:c0:
2d:fc:c1:c5:98:54:d1:b2:e4:2e:bf:f4:13:b6:71:64:2a:bf:
26:94:8f:44:f5:7f:f7:fd:9c:e9:fc:e1:54:a9:ad:ce:a0:9f:
99:c0:a4:de:13:a9:90:33:e8:a2:e5:00:a5:c4:37:50:b4:bd:
2f:6e:2d:89:98:33:8a:de:c5:42:3d:12:a7:16:c0:9e:98:57:
28:e5:11:9e:c3:4e:3f:94:ca:72:f7:12:47:d7:bc:17:b1:11:
8a:7b:7b:af:69:1e:02:6c:c7:2e:57:ab:2d:f8:61:e4:3d:ac:
98:33:85:b8
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgISAYzDSRG7uhryvkfcH4vYc+8aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDQyOTU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTdiODVjMzE2NTg2YjE5OWQyNmJmYzQ4ZmUyNTk4OTM5Y2I2ZmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlobmyxvd6qJPEXZyHZBxq5oU/JsZ
cmoBlmoG+sTRMQI8z91QaeaN8tvf8eL/b0cBd51DQKvT7YiwoPK8vowFOkI8YaHX
Cxvv9K4lVKfU6wkoUKwvPjk+I8pYr0y/GBztsvK5v+Wgd48BLX9ForEO68Ng4a1m
b+E1CBJ8+nUs9RUr9kFOhC5HM8aFtJfCIgu36/lnlgfHs2DE70BWdU4jnpTSNN+B
Kp0imA6hYxAc3CJXJ2vbERBtMcO+UfHbHH+vv5ndsskcm2+c6tGWlGc5GXKrRlGg
ipwnfJawoxO73Ov4hgNR0dTCmf4BksIFVDNPtE0fJMeKysAHbu1iqzRDpwIDAQAB
o4ICoTCCAp0wHQYDVR0OBBYEFIp7hcMWWGsZnSa/xI/iWYk5y2/eMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ3LzBkYjM0
OC04Y2E4LTQwZGUtODJjZC0yOWYyMGRjOGVhZjQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcvMGRiMzQ4
LThjYTgtNDBkZS04MmNkLTI5ZjIwZGM4ZWFmNC8xL2ludUZ3eFpZYXhtZEpyX0Vq
LUpaaVRuTGI5NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDwGCCsGAQUF
BwEHAQH/BC0wKzAaBAIAATAUAwQCuT2YMAwDBAC5jXUDBAC5jXYwDQQCAAIwBwMF
ACoCd+AwDQYJKoZIhvcNAQELBQADggEBAI+dUEiwFDWn+eHZU4n+t+wIEiG0F8uu
RNyJaNHu/7MmIbaJWWGoCnlhayLI2u3xMMMpwAXPv4dmuWqOSgyE1RyDCsVivDeC
XZUan8fnoepr+vGaV9QP+7rTCd8DlV6PTbn0cGHhLdZOL9gTppF87Sa4ld+a2bmh
5P/RuwDyT8e9csNkGjnII0kcG+Dn28ZswC38wcWYVNGy5C6/9BO2cWQqvyaUj0T1
f/f9nOn84VSprc6gn5nApN4TqZAz6KLlAKXEN1C0vS9uLYmYM4rexUI9EqcWwJ6Y
VyjlEZ7DTj+UynL3EkfXvBexEYp7e69pHgJsxy5Xqy34YeQ9rJgzhbg=
-----END CERTIFICATE-----
Generated at Fri May 3 02:10:44 2024 by rpki-client on console-ams.rpki-client.org