Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/itdinBG2gCDXPZtlxU5QQ8NBQZQ.cer
File: itdinBG2gCDXPZtlxU5QQ8NBQZQ.cer (raw, json)
Hash identifier: bSwPMHooE3pcFyJzOc7aXI266tTCbpi4FfP0HPnawXk=
Subject key identifier: 8A:D7:62:9C:11:B6:80:20:D7:3D:9B:65:C5:4E:50:43:C3:41:41:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA29AE822BEE954E9165547B184A10FF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/ee97b4-feca-4d3d-82d3-1538e2a3ad22/1/itdinBG2gCDXPZtlxU5QQ8NBQZQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/ee97b4-feca-4d3d-82d3-1538e2a3ad22/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:32:58 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.229.248.0/24
IP: 2a10:b680::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:ae:82:2b:ee:95:4e:91:65:54:7b:18:4a:10:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:32:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ad7629c11b68020d73d9b65c54e5043c3414194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c6:34:a4:a2:f7:91:7f:9e:02:1f:38:2f:f1:
a7:57:7f:31:19:53:da:5e:7b:b1:0b:91:34:53:b6:
62:ad:fb:34:22:28:36:d5:76:25:24:14:4c:26:5e:
ab:72:ad:90:0e:e6:d4:20:0f:5a:67:11:b3:6e:15:
d7:d8:f8:36:38:ff:f0:2a:35:cb:0c:26:5f:27:2b:
17:99:df:78:6c:cf:39:d3:c1:65:09:79:63:0c:a8:
b4:ef:a7:51:6a:31:78:f7:ff:54:2e:50:46:6c:33:
a1:f0:40:71:5d:cc:7b:d3:c6:3f:55:6c:76:ee:c9:
a8:55:d1:05:ba:13:ba:26:ae:36:a0:79:6b:1f:5c:
05:1c:96:08:ec:53:f5:e5:3d:95:14:50:aa:43:31:
26:8b:32:e2:69:f7:a9:7a:ed:45:e9:31:fb:fc:01:
4a:89:bf:a7:9f:d8:31:74:92:18:85:10:c0:ba:b6:
aa:49:d8:21:d3:fe:52:1c:52:db:2c:b4:93:44:c8:
eb:8f:b5:a3:e9:90:d5:e4:9d:6c:c5:1d:db:3e:c4:
bd:e4:0b:43:17:06:6a:ac:6f:09:d6:af:fd:09:1d:
67:18:98:bd:64:5e:7f:c8:b3:64:1e:20:c5:bc:48:
96:c9:94:44:70:35:a2:c0:ae:c9:16:a1:a2:d4:b4:
84:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D7:62:9C:11:B6:80:20:D7:3D:9B:65:C5:4E:50:43:C3:41:41:94
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ee97b4-feca-4d3d-82d3-1538e2a3ad22/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ee97b4-feca-4d3d-82d3-1538e2a3ad22/1/itdinBG2gCDXPZtlxU5QQ8NBQZQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.248.0/24
IPv6:
2a10:b680::/32
Signature Algorithm: sha256WithRSAEncryption
54:64:b8:00:57:7d:0d:78:97:bc:d9:b0:0d:5a:a5:82:68:c4:
31:4d:ec:9e:f2:c4:a3:9b:50:37:d5:9b:d7:19:64:35:04:19:
68:b1:84:aa:4f:fa:f8:d8:d5:1b:b8:65:53:38:59:c8:cc:a8:
83:d5:a3:85:00:9b:37:f4:a8:05:6d:34:c1:32:78:07:d1:44:
66:fb:54:dc:06:9c:e8:57:6a:af:c8:b3:4f:39:e9:d1:95:af:
44:9d:dd:16:18:53:f9:fb:4b:9c:92:7c:67:cd:fd:22:01:fe:
50:77:5d:d5:e9:17:c8:b7:0c:8d:02:21:6f:cc:70:cd:f9:8d:
a5:4e:d7:08:09:b0:1d:35:1a:a4:4b:5a:0a:e8:6b:5b:16:57:
dd:ec:29:fb:02:c4:b2:d2:96:ac:63:33:bc:ee:3a:36:c4:b2:
23:d8:a6:c4:34:7c:46:c4:2f:06:ca:13:21:7c:f5:f1:fb:07:
5c:5b:a2:19:11:59:14:3c:34:cb:95:00:4a:12:e7:b8:08:05:
2a:10:e7:09:3c:3d:52:d9:0f:16:e6:64:f7:68:8a:89:35:ab:
8f:ef:4e:b0:f1:91:6d:35:4e:df:d5:26:12:18:81:8f:5e:7c:
d3:67:9c:ec:c7:ba:ce:c5:d6:97:cc:84:e8:63:d7:24:c1:05:
b7:93:50:aa
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzKKa6CK+6VTpFlVHsYShD/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTIzMjU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YWQ3NjI5YzExYjY4MDIwZDczZDliNjVjNTRlNTA0M2MzNDE0MTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8Y0pKL3kX+eAh84L/GnV38xGVPa
XnuxC5E0U7Zirfs0Iig21XYlJBRMJl6rcq2QDubUIA9aZxGzbhXX2Pg2OP/wKjXL
DCZfJysXmd94bM8508FlCXljDKi076dRajF49/9ULlBGbDOh8EBxXcx708Y/VWx2
7smoVdEFuhO6Jq42oHlrH1wFHJYI7FP15T2VFFCqQzEmizLiafepeu1F6TH7/AFK
ib+nn9gxdJIYhRDAuraqSdgh0/5SHFLbLLSTRMjrj7Wj6ZDV5J1sxR3bPsS95AtD
FwZqrG8J1q/9CR1nGJi9ZF5/yLNkHiDFvEiWyZREcDWiwK7JFqGi1LSEDQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFIrXYpwRtoAg1z2bZcVOUEPDQUGUMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhmL2VlOTdi
NC1mZWNhLTRkM2QtODJkMy0xNTM4ZTJhM2FkMjIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGYvZWU5N2I0
LWZlY2EtNGQzZC04MmQzLTE1MzhlMmEzYWQyMi8xL2l0ZGluQkcyZ0NEWFBadGx4
VTVRUThOQlFaUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAueX4MA0EAgACMAcDBQAqELaAMA0GCSqGSIb3
DQEBCwUAA4IBAQBUZLgAV30NeJe82bANWqWCaMQxTeye8sSjm1A31ZvXGWQ1BBlo
sYSqT/r42NUbuGVTOFnIzKiD1aOFAJs39KgFbTTBMngH0URm+1TcBpzoV2qvyLNP
OenRla9End0WGFP5+0ucknxnzf0iAf5Qd13V6RfItwyNAiFvzHDN+Y2lTtcICbAd
NRqkS1oK6GtbFlfd7Cn7AsSy0pasYzO87jo2xLIj2KbENHxGxC8GyhMhfPXx+wdc
W6IZEVkUPDTLlQBKEue4CAUqEOcJPD1S2Q8W5mT3aIqJNauP706w8ZFtNU7f1SYS
GIGPXnzTZ5zsx7rOxdaXzIToY9ckwQW3k1Cq
-----END CERTIFICATE-----
Generated at Fri May 3 10:53:33 2024 by rpki-client on console-fra.rpki-client.org