Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
File: j0znci-ZB12Uc4t-YQcEASaes9Y.cer (raw, json)
Hash identifier: LG3g5Uw9ld9sKkSP6VpYg52PpZ3uZkN1waxc9X+XTU8=
Subject key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018FEC6C13352F60D4082BBC9FE980403C5D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 06 Jun 2024 07:20:56 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 62.192.172.0/22
IP: 77.83.252.0/22
IP: 85.209.16.0/22
IP: 185.181.0.0/22
IP: 193.163.127.0/24
IP: 212.102.114.0/24
IP: 2a06:fe00::/29
IP: 2a09:9f80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ec:6c:13:35:2f:60:d4:08:2b:bc:9f:e9:80:40:3c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 6 07:20:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ad:3c:58:db:88:1a:11:91:33:e7:cd:55:8e:
2d:88:5c:67:14:00:28:1d:c1:25:8b:37:39:c3:c3:
fd:6f:64:54:90:7e:9d:b7:a8:b2:9f:70:9d:7d:1e:
fe:fd:3c:ac:17:1c:b1:1a:c6:d4:61:07:19:b3:45:
99:1f:e9:9f:f1:2d:41:5e:ba:37:e7:82:83:15:8e:
b0:bf:0d:ca:8b:b7:4b:06:ff:46:94:b3:36:57:a9:
97:f5:51:d9:76:11:6d:93:61:70:fc:92:c7:c5:e3:
45:d6:bf:3a:ea:94:6d:6b:6d:56:44:b4:58:21:dd:
a9:af:ba:5a:13:44:e2:08:3d:0d:07:af:92:81:7d:
12:fe:42:d2:b5:86:8f:57:ec:b3:e5:9d:1f:c2:69:
e4:43:24:45:69:66:a1:bb:ff:28:8f:3d:63:74:1b:
ef:c1:f0:e6:64:3c:dd:21:75:97:90:4d:a5:98:f3:
ca:31:73:8c:2c:02:82:b3:85:d7:a5:a0:d8:1d:79:
a7:72:56:9d:f6:75:b7:fa:a0:81:cb:a9:da:1c:a8:
aa:74:64:0f:e0:88:6f:f0:4f:76:41:5b:c3:96:87:
a9:7e:64:b1:0c:72:72:75:c3:24:a7:56:3d:e6:0c:
13:9d:f3:be:cb:a0:52:30:57:0d:d2:fc:cc:20:41:
c7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.172.0/22
77.83.252.0/22
85.209.16.0/22
185.181.0.0/22
193.163.127.0/24
212.102.114.0/24
IPv6:
2a06:fe00::/29
2a09:9f80::/29
Signature Algorithm: sha256WithRSAEncryption
10:5e:50:1e:87:a0:0c:35:05:a6:15:67:fe:f1:e9:f6:5a:be:
96:0b:ee:80:72:bc:a2:14:e4:8a:c9:df:57:5e:49:c5:e8:78:
9e:e8:ef:58:b6:12:66:75:24:3c:34:f8:ed:32:99:89:63:19:
66:8b:c8:bd:f9:b7:3e:a7:2c:71:81:32:8f:b1:75:1e:22:ef:
27:1d:ef:8c:7c:18:20:73:01:40:c8:8c:26:7e:6e:c1:77:a4:
7a:3a:42:a2:7c:fd:d5:84:c7:40:eb:fb:50:78:81:60:49:11:
d1:f1:fb:1b:54:1b:d9:07:da:41:2b:3b:08:2c:97:ad:39:06:
85:e1:bd:1b:c5:b5:1f:b3:cc:3b:b0:29:bf:27:ab:83:af:4b:
17:ce:7b:33:68:0c:01:60:36:28:54:ae:94:07:58:79:2a:51:
c0:98:62:9c:8d:79:4e:75:ee:dd:db:c1:5d:b7:36:9e:1e:ad:
dd:f7:36:f2:e8:23:20:9f:9e:3b:c5:d7:5e:60:c3:24:f6:1e:
ba:7f:79:08:4c:0b:b3:06:de:64:48:cc:09:19:d4:8d:57:fc:
51:ff:c1:0c:e1:ff:e6:e3:77:fd:56:e8:42:2c:af:7d:ac:91:
b2:42:12:b5:bc:1f:72:c8:d9:02:97:4b:94:7e:74:c5:bd:0f:
3d:3c:7d:dd
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgISAY/sbBM1L2DUCCu8n+mAQDxdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNjA2MDcyMDU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjRjZTc3MjJmOTkwNzVkOTQ3MzhiN2U2MTA3MDQwMTI2OWViM2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0a08WNuIGhGRM+fNVY4tiFxnFAAo
HcElizc5w8P9b2RUkH6dt6iyn3CdfR7+/TysFxyxGsbUYQcZs0WZH+mf8S1BXro3
54KDFY6wvw3Ki7dLBv9GlLM2V6mX9VHZdhFtk2Fw/JLHxeNF1r866pRta21WRLRY
Id2pr7paE0TiCD0NB6+SgX0S/kLStYaPV+yz5Z0fwmnkQyRFaWahu/8ojz1jdBvv
wfDmZDzdIXWXkE2lmPPKMXOMLAKCs4XXpaDYHXmnclad9nW3+qCBy6naHKiqdGQP
4Ihv8E92QVvDloepfmSxDHJydcMkp1Y95gwTnfO+y6BSMFcN0vzMIEHHxQIDAQAB
o4IC1DCCAtAwHQYDVR0OBBYEFI9M53IvmQddlHOLfmEHBAEmnrPWMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhOTc3
MTE1LTUxMTAtNDI1Ny05NGVmLTRkMmI0Mzg4NDA0MC8wLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWE5
NzcxMTUtNTExMC00MjU3LTk0ZWYtNGQyYjQzODg0MDQwLzAvOEY0Q0U3NzIyRjk5
MDc1RDk0NzM4QjdFNjEwNzA0MDEyNjlFQjNENi5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjBTBggrBgEFBQcBBwEB/wREMEIwKgQCAAEwJAME
Aj7ArAMEAk1T/AMEAlXREAMEArm1AAMEAMGjfwMEANRmcjAUBAIAAjAOAwUDKgb+
AAMFAyoJn4AwDQYJKoZIhvcNAQELBQADggEBABBeUB6HoAw1BaYVZ/7x6fZavpYL
7oByvKIU5IrJ31deScXoeJ7o71i2EmZ1JDw0+O0ymYljGWaLyL35tz6nLHGBMo+x
dR4i7ycd74x8GCBzAUDIjCZ+bsF3pHo6QqJ8/dWEx0Dr+1B4gWBJEdHx+xtUG9kH
2kErOwgsl605BoXhvRvFtR+zzDuwKb8nq4OvSxfOezNoDAFgNihUrpQHWHkqUcCY
YpyNeU517t3bwV23Np4erd33NvLoIyCfnjvF115gwyT2Hrp/eQhMC7MG3mRIzAkZ
1I1X/FH/wQzh/+bjd/1W6EIsr32skbJCErW8H3LI2QKXS5R+dMW9Dz08fd0=
-----END CERTIFICATE-----
Generated at Fri Nov 22 10:13:01 2024 by rpki-client on console-ams.rpki-client.org