Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/j6yFHZmCiWp2WHbTEbl7UJNX7DI.cer
File: j6yFHZmCiWp2WHbTEbl7UJNX7DI.cer (raw, json)
Hash identifier: c/GgC7OprOyGusjteN5Q8o6hdGPjM4dTihL2cfD+S20=
Subject key identifier: 8F:AC:85:1D:99:82:89:6A:76:58:76:D3:11:B9:7B:50:93:57:EC:32
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DCB9A4EC5B50F90298747DE0B9AC3E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:30:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 52113
IP: 195.20.133.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:b9:a4:ec:5b:50:f9:02:98:74:7d:e0:b9:ac:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8fac851d9982896a765876d311b97b509357ec32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9d:f9:e6:e7:12:85:db:fc:14:10:93:bc:80:
e2:34:c8:54:9d:4f:c3:97:cc:53:be:04:38:f6:9d:
bf:d8:c7:09:ad:07:1f:30:94:d7:2a:7d:d1:e8:20:
51:07:e1:42:f3:74:6a:66:cf:fc:03:76:75:a6:24:
e8:dc:4c:be:2b:06:1f:3a:2d:b7:c6:ac:64:34:f5:
af:45:9a:ec:4b:b1:13:23:ed:e6:b9:e7:05:eb:f2:
25:19:d0:9e:d3:ec:bd:28:65:a2:43:03:3c:bf:34:
f7:01:1f:fa:cf:46:5a:1b:a8:e7:25:02:e8:49:23:
64:cb:11:18:7e:9e:f9:d2:9e:66:57:fa:04:86:b4:
e8:80:33:b5:3b:6b:2c:51:df:44:a1:3f:d3:3e:88:
59:94:b7:b1:4a:8e:7b:d4:52:b3:6d:b1:42:6c:ab:
5a:bf:cd:d2:a9:7d:0e:8e:03:90:34:a7:c7:c9:21:
af:02:6d:5f:85:c0:ae:73:a8:dc:a9:75:b3:b5:a7:
52:80:fe:57:bc:f8:ab:61:aa:5c:a7:7f:a0:42:dd:
12:3e:23:f1:72:5d:2e:73:53:a0:93:a9:c6:12:3c:
33:2a:6b:b8:0e:54:1e:4c:6c:96:8d:7d:7f:dd:74:
6d:78:a3:cf:53:bc:bd:e8:7f:13:0a:40:ea:1e:cd:
03:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AC:85:1D:99:82:89:6A:76:58:76:D3:11:B9:7B:50:93:57:EC:32
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.20.133.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52113
Signature Algorithm: sha256WithRSAEncryption
92:33:83:fe:6f:de:33:10:db:30:b7:eb:24:0a:e7:07:85:f3:
f6:4a:52:99:61:23:42:78:97:13:9f:d5:e4:bf:46:f4:fd:62:
f4:0e:fc:b3:cb:7f:77:af:9d:ab:60:e3:5b:f5:26:99:81:54:
23:31:c7:eb:42:fa:71:2c:da:3d:db:b6:80:c3:99:7a:8d:9b:
4b:db:d2:11:02:7e:36:e1:0e:d1:14:2d:a8:56:c4:70:b7:54:
d1:6a:c6:b0:97:d6:82:a3:de:19:1d:99:2e:a0:f3:1f:d7:b8:
7b:19:26:6e:35:df:d5:65:01:56:e1:38:dd:02:0b:40:77:cc:
4a:d5:66:32:db:36:a9:4e:69:06:94:18:4d:c5:cc:15:e4:6b:
4d:75:f3:77:69:e6:a2:2b:4a:1b:60:46:b5:53:7e:e8:89:52:
f1:8e:cb:b6:10:4f:35:84:ff:65:e0:c4:c4:44:41:71:dd:0f:
72:2b:ef:bf:65:ca:a4:38:0c:69:f8:59:0f:e6:27:8c:ec:50:
1e:d3:7f:82:c9:2f:6c:71:1d:69:f3:1c:5e:40:e6:14:58:63:
55:65:85:0b:73:68:6c:d4:c5:1e:31:95:48:d9:81:91:3e:dc:
9c:d3:84:b8:10:95:0c:95:ef:ba:c1:37:cd:89:c0:3e:65:fb:
9c:b5:5d:1c
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYzF3Lmk7FtQ+QKYdH3guaw+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTYzMDI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmFjODUxZDk5ODI4OTZhNzY1ODc2ZDMxMWI5N2I1MDkzNTdlYzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3J355ucShdv8FBCTvIDiNMhUnU/D
l8xTvgQ49p2/2McJrQcfMJTXKn3R6CBRB+FC83RqZs/8A3Z1piTo3Ey+KwYfOi23
xqxkNPWvRZrsS7ETI+3muecF6/IlGdCe0+y9KGWiQwM8vzT3AR/6z0ZaG6jnJQLo
SSNkyxEYfp750p5mV/oEhrTogDO1O2ssUd9EoT/TPohZlLexSo571FKzbbFCbKta
v83SqX0OjgOQNKfHySGvAm1fhcCuc6jcqXWztadSgP5XvPirYapcp3+gQt0SPiPx
cl0uc1Ogk6nGEjwzKmu4DlQeTGyWjX1/3XRteKPPU7y96H8TCkDqHs0DFQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFI+shR2Zgolqdlh20xG5e1CTV+wyMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QzLzkyYzlk
NS01NDYyLTQxOTAtYTMzMC0yZGZjNGE2ZjVkMGQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDMvOTJjOWQ1
LTU0NjItNDE5MC1hMzMwLTJkZmM0YTZmNWQwZC8xL2o2eUZIWm1DaVdwMldIYlRF
Ymw3VUpOWDdESS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwxSFMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwDLkTANBgkqhkiG9w0BAQsFAAOCAQEAkjOD/m/eMxDbMLfrJArnB4Xz9kpSmWEj
QniXE5/V5L9G9P1i9A78s8t/d6+dq2DjW/UmmYFUIzHH60L6cSzaPdu2gMOZeo2b
S9vSEQJ+NuEO0RQtqFbEcLdU0WrGsJfWgqPeGR2ZLqDzH9e4exkmbjXf1WUBVuE4
3QILQHfMStVmMts2qU5pBpQYTcXMFeRrTXXzd2nmoitKG2BGtVN+6IlS8Y7LthBP
NYT/ZeDExERBcd0Pcivvv2XKpDgMafhZD+YnjOxQHtN/gskvbHEdafMcXkDmFFhj
VWWFC3NobNTFHjGVSNmBkT7cnNOEuBCVDJXvusE3zYnAPmX7nLVdHA==
-----END CERTIFICATE-----
Generated at Fri May 3 14:10:49 2024 by rpki-client on console-ams.rpki-client.org