Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
File: j0znci-ZB12Uc4t-YQcEASaes9Y.cer (raw, json)
Hash identifier: oMadPANuRpvUHE/i2YvFOveOOUPAHN4mQ1egzS+EMSo=
Subject key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018EC85B5FD25B761328186E42F4B25527AC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 10 Apr 2024 14:13:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2.58.84.0/22
IP: 45.8.172.0/22
IP: 45.13.148.0/22
IP: 45.66.148.0/22
IP: 62.192.172.0/22
IP: 77.83.252.0/22
IP: 85.209.16.0/22
IP: 185.181.0.0/22
IP: 193.163.127.0/24
IP: 212.102.114.0/24
IP: 2a06:fe00::/29
IP: 2a09:9f80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c8:5b:5f:d2:5b:76:13:28:18:6e:42:f4:b2:55:27:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 10 14:13:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ad:3c:58:db:88:1a:11:91:33:e7:cd:55:8e:
2d:88:5c:67:14:00:28:1d:c1:25:8b:37:39:c3:c3:
fd:6f:64:54:90:7e:9d:b7:a8:b2:9f:70:9d:7d:1e:
fe:fd:3c:ac:17:1c:b1:1a:c6:d4:61:07:19:b3:45:
99:1f:e9:9f:f1:2d:41:5e:ba:37:e7:82:83:15:8e:
b0:bf:0d:ca:8b:b7:4b:06:ff:46:94:b3:36:57:a9:
97:f5:51:d9:76:11:6d:93:61:70:fc:92:c7:c5:e3:
45:d6:bf:3a:ea:94:6d:6b:6d:56:44:b4:58:21:dd:
a9:af:ba:5a:13:44:e2:08:3d:0d:07:af:92:81:7d:
12:fe:42:d2:b5:86:8f:57:ec:b3:e5:9d:1f:c2:69:
e4:43:24:45:69:66:a1:bb:ff:28:8f:3d:63:74:1b:
ef:c1:f0:e6:64:3c:dd:21:75:97:90:4d:a5:98:f3:
ca:31:73:8c:2c:02:82:b3:85:d7:a5:a0:d8:1d:79:
a7:72:56:9d:f6:75:b7:fa:a0:81:cb:a9:da:1c:a8:
aa:74:64:0f:e0:88:6f:f0:4f:76:41:5b:c3:96:87:
a9:7e:64:b1:0c:72:72:75:c3:24:a7:56:3d:e6:0c:
13:9d:f3:be:cb:a0:52:30:57:0d:d2:fc:cc:20:41:
c7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.84.0/22
45.8.172.0/22
45.13.148.0/22
45.66.148.0/22
62.192.172.0/22
77.83.252.0/22
85.209.16.0/22
185.181.0.0/22
193.163.127.0/24
212.102.114.0/24
IPv6:
2a06:fe00::/29
2a09:9f80::/29
Signature Algorithm: sha256WithRSAEncryption
6c:83:43:df:3c:e0:c6:a9:df:69:df:2a:66:9f:70:fb:9e:30:
85:cb:89:b0:da:c8:be:c7:07:99:05:27:1b:1a:6e:16:5f:ff:
78:72:a3:41:61:05:66:ca:72:e8:fb:1d:b2:33:f9:5c:be:e1:
84:8e:4d:63:51:45:1f:57:21:d3:a3:35:a8:2a:2d:62:4a:65:
d7:f4:48:44:34:d5:9d:a2:4c:93:0f:c2:70:65:b5:f4:23:f9:
5d:b3:b8:75:1d:17:15:a0:5c:e0:09:21:89:57:2f:c4:0c:92:
7e:50:64:3a:b8:6b:03:67:70:60:01:f9:d1:5f:4f:b1:af:a4:
e1:f8:e3:dd:3c:61:5f:40:da:47:8a:c2:68:c3:e2:a6:7c:84:
4f:1f:28:a1:ae:9c:65:37:c5:8e:c7:20:09:8d:4b:2f:8e:35:
5a:4d:19:86:38:2a:35:2f:a2:60:ad:27:2f:06:9b:75:5f:24:
28:dd:8a:ee:12:b1:1e:28:e3:30:34:31:86:db:e9:29:fd:be:
09:30:6e:32:7c:ba:ee:fa:03:ec:fd:10:9f:cf:b8:b2:6c:27:
3b:d9:cc:ec:6c:d1:0e:9f:1a:99:db:83:5d:7e:ae:f4:41:bf:
a6:d1:cd:b1:67:b1:b9:f9:90:43:37:ed:87:fe:2b:b9:11:a5:
ee:f7:30:ba
-----BEGIN CERTIFICATE-----
MIIF4DCCBMigAwIBAgISAY7IW1/SW3YTKBhuQvSyVSesMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNDEwMTQxMzM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjRjZTc3MjJmOTkwNzVkOTQ3MzhiN2U2MTA3MDQwMTI2OWViM2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0a08WNuIGhGRM+fNVY4tiFxnFAAo
HcElizc5w8P9b2RUkH6dt6iyn3CdfR7+/TysFxyxGsbUYQcZs0WZH+mf8S1BXro3
54KDFY6wvw3Ki7dLBv9GlLM2V6mX9VHZdhFtk2Fw/JLHxeNF1r866pRta21WRLRY
Id2pr7paE0TiCD0NB6+SgX0S/kLStYaPV+yz5Z0fwmnkQyRFaWahu/8ojz1jdBvv
wfDmZDzdIXWXkE2lmPPKMXOMLAKCs4XXpaDYHXmnclad9nW3+qCBy6naHKiqdGQP
4Ihv8E92QVvDloepfmSxDHJydcMkp1Y95gwTnfO+y6BSMFcN0vzMIEHHxQIDAQAB
o4IC7DCCAugwHQYDVR0OBBYEFI9M53IvmQddlHOLfmEHBAEmnrPWMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhOTc3
MTE1LTUxMTAtNDI1Ny05NGVmLTRkMmI0Mzg4NDA0MC8wLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWE5
NzcxMTUtNTExMC00MjU3LTk0ZWYtNGQyYjQzODg0MDQwLzAvOEY0Q0U3NzIyRjk5
MDc1RDk0NzM4QjdFNjEwNzA0MDEyNjlFQjNENi5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjBrBggrBgEFBQcBBwEB/wRcMFowQgQCAAEwPAME
AgI6VAMEAi0IrAMEAi0NlAMEAi1ClAMEAj7ArAMEAk1T/AMEAlXREAMEArm1AAME
AMGjfwMEANRmcjAUBAIAAjAOAwUDKgb+AAMFAyoJn4AwDQYJKoZIhvcNAQELBQAD
ggEBAGyDQ9884Map32nfKmafcPueMIXLibDayL7HB5kFJxsabhZf/3hyo0FhBWbK
cuj7HbIz+Vy+4YSOTWNRRR9XIdOjNagqLWJKZdf0SEQ01Z2iTJMPwnBltfQj+V2z
uHUdFxWgXOAJIYlXL8QMkn5QZDq4awNncGAB+dFfT7GvpOH44908YV9A2keKwmjD
4qZ8hE8fKKGunGU3xY7HIAmNSy+ONVpNGYY4KjUvomCtJy8Gm3VfJCjdiu4SsR4o
4zA0MYbb6Sn9vgkwbjJ8uu76A+z9EJ/PuLJsJzvZzOxs0Q6fGpnbg11+rvRBv6bR
zbFnsbn5kEM37Yf+K7kRpe73MLo=
-----END CERTIFICATE-----
Generated at Sat Apr 27 16:47:15 2024 by rpki-client on console-ams.rpki-client.org