Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
File: itpL9fGQ85mLgMYUmhRjJw-77hU.cer (raw, json)
Hash identifier: 50/tG0iTlVbKin4m1tX0BdNeRdfoV6dZ1Y3e7IcrRhM=
Subject key identifier: 8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC42555862E4404345155EDD689BCA72E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 50463
IP: 5.22.128.0/21
IP: 5.144.48.0/20
IP: 37.19.112.0/20
IP: 109.226.0.0/18
IP: 141.226.192.0/19
IP: 185.3.144.0/22
IP: 2a00:c280::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:55:86:2e:44:04:34:51:55:ed:d6:89:bc:a7:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:53:40:fd:3c:45:9a:b0:10:5b:8d:99:48:99:
ca:53:75:01:e6:1b:14:5b:d8:c3:d0:47:24:bf:74:
f8:de:a3:b9:f8:a3:4b:32:ba:85:31:3e:32:ca:bf:
bc:d3:d2:33:f4:85:b8:5c:f1:68:ff:0e:22:c8:af:
53:83:45:cf:af:91:1c:f2:20:00:30:1f:61:85:4e:
ad:f3:b3:f7:88:7f:82:b0:7d:95:19:eb:5c:ae:ad:
ee:39:a4:d0:7c:a0:ee:51:61:30:69:6e:f2:d2:a9:
5a:79:19:82:43:77:05:43:65:e6:2f:6c:71:55:97:
d8:78:b1:09:e9:7f:8b:ce:cc:f0:10:9a:9c:3b:ee:
6a:e3:5f:1a:d6:d9:03:df:48:63:7b:36:fa:39:8b:
3c:0b:ca:69:7b:c2:0e:63:22:74:d3:59:c9:4d:bf:
0b:4a:3a:b5:c5:eb:09:41:e9:39:18:39:05:19:8a:
e3:b9:6f:6d:91:f4:c2:31:a2:b4:06:46:51:7f:3e:
90:e7:54:12:36:f6:49:a4:45:bc:8e:d2:56:28:79:
94:cb:fb:fd:ad:50:d9:b1:91:5e:5c:ac:2c:bd:05:
a5:26:66:df:db:bf:b3:b1:87:5f:21:e5:aa:a5:c2:
00:d9:00:ba:09:35:df:8e:3a:31:56:02:20:10:06:
b4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.128.0/21
5.144.48.0/20
37.19.112.0/20
109.226.0.0/18
141.226.192.0/19
185.3.144.0/22
IPv6:
2a00:c280::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50463
Signature Algorithm: sha256WithRSAEncryption
34:f2:38:9b:45:e2:38:bf:95:50:6b:e6:35:50:56:f7:66:0f:
ca:96:5f:a3:61:d8:67:96:2f:3d:65:6d:60:51:68:56:06:26:
3b:6c:a8:e7:c9:23:ba:d8:4e:53:14:2a:8b:da:a1:8b:70:34:
c9:f3:7b:98:f6:17:e1:83:b4:38:b0:5d:2f:f9:21:e9:2f:f8:
b6:9a:8d:f2:31:dc:8f:77:dc:bb:ee:6b:ee:f9:bf:8e:ce:e2:
45:7f:d1:68:9b:76:9e:66:d7:d2:87:7b:6d:d0:e9:a3:b8:98:
82:97:4c:f1:a2:8b:ca:17:6f:89:21:70:18:24:86:84:46:28:
a2:8c:86:7c:dd:14:6a:6e:6c:29:4c:60:0e:1d:d5:1c:f5:c0:
9e:0f:34:33:00:0e:5f:36:79:a4:2b:cc:bc:d0:b2:0c:cc:f0:
ed:f8:e5:fa:20:83:79:90:33:19:11:36:ed:26:10:84:13:02:
c4:43:f0:4e:fc:8e:ea:f8:a2:e6:50:cf:0f:b0:87:17:72:be:
63:24:2f:96:8e:e6:de:b4:88:a4:3b:16:dd:1c:af:53:16:13:
02:56:11:f8:78:6d:b1:13:36:1b:29:b3:b9:30:68:2e:b1:02:
b3:36:54:3a:64:d0:2d:55:af:01:0b:4a:f5:d1:8e:ca:b5:94:
d4:19:20:89
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgISAYzEJVWGLkQENFFV7daJvKcuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDgzMDMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YWRhNGJmNWYxOTBmMzk5OGI4MGM2MTQ5YTE0NjMyNzBmYmJlZTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplNA/TxFmrAQW42ZSJnKU3UB5hsU
W9jD0Eckv3T43qO5+KNLMrqFMT4yyr+809Iz9IW4XPFo/w4iyK9Tg0XPr5Ec8iAA
MB9hhU6t87P3iH+CsH2VGetcrq3uOaTQfKDuUWEwaW7y0qlaeRmCQ3cFQ2XmL2xx
VZfYeLEJ6X+LzszwEJqcO+5q418a1tkD30hjezb6OYs8C8ppe8IOYyJ001nJTb8L
Sjq1xesJQek5GDkFGYrjuW9tkfTCMaK0BkZRfz6Q51QSNvZJpEW8jtJWKHmUy/v9
rVDZsZFeXKwsvQWlJmbf27+zsYdfIeWqpcIA2QC6CTXfjjoxVgIgEAa02QIDAQAB
o4ICzTCCAskwHQYDVR0OBBYEFIraS/XxkPOZi4DGFJoUYycPu+4VMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdmL2NhNWUy
NC02ZTkyLTRkM2EtOWFkNS04OTM1ZTkwNzk3OTYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2YvY2E1ZTI0
LTZlOTItNGQzYS05YWQ1LTg5MzVlOTA3OTc5Ni8xL2l0cEw5ZkdRODVtTGdNWVVt
aFJqSnctNzdoVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF
BwEHAQH/BD0wOzAqBAIAATAkAwQDBRaAAwQEBZAwAwQEJRNwAwQGbeIAAwQFjeLA
AwQCuQOQMA0EAgACMAcDBQMqAMKAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDF
HzANBgkqhkiG9w0BAQsFAAOCAQEANPI4m0XiOL+VUGvmNVBW92YPypZfo2HYZ5Yv
PWVtYFFoVgYmO2yo58kjuthOUxQqi9qhi3A0yfN7mPYX4YO0OLBdL/kh6S/4tpqN
8jHcj3fcu+5r7vm/js7iRX/RaJt2nmbX0od7bdDpo7iYgpdM8aKLyhdviSFwGCSG
hEYoooyGfN0Uam5sKUxgDh3VHPXAng80MwAOXzZ5pCvMvNCyDMzw7fjl+iCDeZAz
GRE27SYQhBMCxEPwTvyO6vii5lDPD7CHF3K+YyQvlo7m3rSIpDsW3RyvUxYTAlYR
+HhtsRM2GymzuTBoLrECszZUOmTQLVWvAQtK9dGOyrWU1BkgiQ==
-----END CERTIFICATE-----
Generated at Fri May 3 02:10:47 2024 by rpki-client on console-ams.rpki-client.org