Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer
File: ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer (raw, json)
Hash identifier: i/EqhwhQFukA9xuEjwjpvTfti1Y7TLDWN3o4FrTAsJM=
Subject key identifier: 8B:1E:DF:52:6B:1C:A5:FF:0E:68:2F:F4:8A:EC:E1:21:D2:7B:C0:C3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E0FF924E39AA50610A82E417BC8894C29
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 05 Mar 2024 18:56:09 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208410
IP: 212.102.123.0/24
IP: 2a12:8bc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0f:f9:24:e3:9a:a5:06:10:a8:2e:41:7b:c8:89:4c:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 5 18:56:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b1edf526b1ca5ff0e682ff48aece121d27bc0c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:04:4f:26:08:d1:dd:4a:92:a2:1c:d1:2f:9f:
18:f1:d6:a3:89:da:c4:fc:69:30:02:f1:c8:8d:d9:
01:d7:b7:8d:cd:ed:2e:a7:57:c5:16:b6:a4:85:3b:
58:d0:5f:c2:e3:5f:4d:9e:39:f9:d5:30:b1:c3:89:
b4:7f:c5:20:6f:ed:4f:06:26:2b:7c:77:f4:f0:91:
81:b4:27:46:5b:ab:c6:47:fe:b3:ef:ae:fd:6b:9e:
70:61:9b:df:35:4e:bc:ca:04:af:8a:bc:32:1c:68:
55:71:df:73:7f:86:6c:2a:d8:f5:f7:aa:09:ab:ec:
e5:74:72:29:43:9e:19:8d:f2:30:7e:ed:d1:73:74:
f2:7a:e2:5f:18:b7:c0:42:d8:24:69:93:bb:d5:f2:
c4:9d:c5:0e:40:08:07:f5:aa:73:49:d3:5c:ab:9a:
82:d9:4c:0a:a6:fb:32:db:dc:22:c0:d3:79:b6:fd:
3f:9e:58:e6:d0:99:2a:0a:d1:62:08:8e:df:0b:d9:
0e:95:64:40:a6:52:fd:f1:6b:c3:ff:ef:6c:f9:cf:
db:49:8b:9f:d3:a7:5d:8f:d9:52:a0:04:70:72:79:
b7:d3:5d:55:89:24:bc:ea:1b:de:9d:cf:fb:e9:67:
b6:a6:81:b4:76:e3:43:b4:0d:ad:5d:50:d4:13:0f:
d0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:1E:DF:52:6B:1C:A5:FF:0E:68:2F:F4:8A:EC:E1:21:D2:7B:C0:C3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.102.123.0/24
IPv6:
2a12:8bc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208410
Signature Algorithm: sha256WithRSAEncryption
65:38:77:d3:cb:05:87:71:fb:ad:84:87:99:86:50:f8:24:88:
b1:3a:50:35:21:da:d6:c8:f8:63:64:b6:2e:5b:c5:ea:0c:20:
95:8e:94:f9:1e:50:f8:27:d6:f8:3a:c2:66:85:2c:4d:66:5e:
0c:6c:f5:d4:d5:4e:1a:90:91:f6:c0:80:80:e5:45:b4:08:9d:
59:15:d4:2e:65:7e:60:33:6f:c0:34:ad:08:ac:f1:e8:0a:2f:
c5:4f:87:fb:fe:db:5f:f0:0a:f4:fa:be:58:08:bd:5d:75:a0:
8c:a0:ba:b1:21:c8:da:e9:ac:9f:b6:f4:28:82:71:57:61:88:
e7:d3:46:d8:b9:3a:ca:6c:7a:6c:bf:de:5b:2e:96:d6:6c:78:
1f:b8:92:28:14:0d:0d:ee:37:54:69:9f:56:3b:0e:96:dd:c3:
25:c4:77:98:7d:cc:f1:3d:c6:14:15:1a:f2:01:da:c1:ad:29:
5b:80:4d:e2:a8:74:fa:a9:28:6f:8d:ae:d5:c9:db:7a:f8:b3:
38:7e:68:49:64:42:25:4a:9d:d5:ef:85:2c:f9:01:d8:b7:90:
da:fb:28:dd:e9:db:fe:74:7a:fc:c5:e5:05:eb:ca:d0:73:3a:
89:f4:1b:3b:f1:cd:4a:0b:f9:35:a3:1e:8f:eb:7f:a2:76:7a:
78:b4:2b:2b
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAY4P+STjmqUGEKguQXvIiUwpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMzA1MTg1NjA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjFlZGY1MjZiMWNhNWZmMGU2ODJmZjQ4YWVjZTEyMWQyN2JjMGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnARPJgjR3UqSohzRL58Y8dajidrE
/GkwAvHIjdkB17eNze0up1fFFrakhTtY0F/C419Nnjn51TCxw4m0f8Ugb+1PBiYr
fHf08JGBtCdGW6vGR/6z7679a55wYZvfNU68ygSvirwyHGhVcd9zf4ZsKtj196oJ
q+zldHIpQ54ZjfIwfu3Rc3TyeuJfGLfAQtgkaZO71fLEncUOQAgH9apzSdNcq5qC
2UwKpvsy29wiwNN5tv0/nljm0JkqCtFiCI7fC9kOlWRAplL98WvD/+9s+c/bSYuf
06ddj9lSoARwcnm3011ViSS86hvenc/76We2poG0duNDtA2tXVDUEw/Q2QIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFIse31JrHKX/Dmgv9Irs4SHSe8DDMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM5L2NiNWFi
Yi1iM2Y3LTRkNDAtYWQzNi0yNTExNjhlZGQzZTQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzkvY2I1YWJi
LWIzZjctNGQ0MC1hZDM2LTI1MTE2OGVkZDNlNC8xL2l4N2ZVbXNjcGY4T2FDXzBp
dXpoSWRKN3dNTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQA1GZ7MA0EAgACMAcDBQMqEovAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMuGjANBgkqhkiG9w0BAQsFAAOCAQEAZTh308sFh3H7
rYSHmYZQ+CSIsTpQNSHa1sj4Y2S2LlvF6gwglY6U+R5Q+CfW+DrCZoUsTWZeDGz1
1NVOGpCR9sCAgOVFtAidWRXULmV+YDNvwDStCKzx6AovxU+H+/7bX/AK9Pq+WAi9
XXWgjKC6sSHI2umsn7b0KIJxV2GI59NG2Lk6ymx6bL/eWy6W1mx4H7iSKBQNDe43
VGmfVjsOlt3DJcR3mH3M8T3GFBUa8gHawa0pW4BN4qh0+qkob42u1cnbevizOH5o
SWRCJUqd1e+FLPkB2LeQ2vso3enb/nR6/MXlBevK0HM6ifQbO/HNSgv5NaMej+t/
onZ6eLQrKw==
-----END CERTIFICATE-----
Generated at Fri May 3 11:59:00 2024 by rpki-client on console-ams.rpki-client.org