Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/j8Yziy6SHZEmxTYwPweMnruah1I.cer
File: j8Yziy6SHZEmxTYwPweMnruah1I.cer (raw, json)
Hash identifier: p4FAtkr+nII/j5Bg/EZNh+f86V7gpMNlczy1oJMUsqk=
Subject key identifier: 8F:C6:33:8B:2E:92:1D:91:26:C5:36:30:3F:07:8C:9E:BB:9A:87:52
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC801C7B14B86D14AAC7298518365D48B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:30:09 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 60145
IP: 185.55.184.0/22
IP: 2a02:4d60::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:c7:b1:4b:86:d1:4a:ac:72:98:51:83:65:d4:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8fc6338b2e921d9126c536303f078c9ebb9a8752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c7:4b:87:7f:98:df:72:6b:d7:bb:be:14:4f:
50:b4:74:68:61:a2:e8:4f:1b:a1:14:c3:5a:e7:23:
6a:58:43:2b:99:4e:b7:02:71:24:44:4f:25:af:3f:
c4:c6:a0:f8:b2:a7:ae:f3:f7:b8:5f:7c:38:b5:55:
ff:63:ea:d9:68:ee:6c:d7:fe:16:58:ed:ae:00:a1:
dc:84:17:6e:36:4e:31:3e:1a:a9:82:e7:9f:ac:d0:
e0:0d:7f:35:d7:8f:84:14:26:82:8d:c1:a8:00:12:
0d:fa:5e:0b:fa:29:1d:1c:bc:cf:f3:0f:18:fd:85:
c1:ad:22:d6:41:16:ee:df:62:3e:21:4a:33:cb:a7:
a2:b8:87:2d:a4:de:92:a3:45:08:f6:80:be:ef:94:
96:33:0d:2c:05:9a:09:2b:16:b2:ed:5a:0d:c8:a0:
89:83:94:14:96:58:79:60:0b:61:48:5c:a0:ba:7c:
33:f5:2e:7b:c5:9d:1f:2a:85:25:50:38:ca:e2:ca:
57:7f:69:74:f8:e6:4c:9f:f6:bb:f6:51:46:c8:66:
c2:f9:c4:f3:c6:9b:99:2b:e0:f8:79:69:28:5c:6b:
b7:ba:19:04:ba:4a:74:0a:98:55:dd:fd:70:32:58:
17:58:4c:a1:ea:9f:02:21:33:fe:e6:aa:84:d7:20:
1b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C6:33:8B:2E:92:1D:91:26:C5:36:30:3F:07:8C:9E:BB:9A:87:52
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.184.0/22
IPv6:
2a02:4d60::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60145
Signature Algorithm: sha256WithRSAEncryption
83:d1:3f:cb:8c:8f:33:51:37:70:bc:23:f4:39:0d:b2:ef:cc:
f1:03:94:bc:21:94:b7:84:7f:c8:1f:12:76:81:e2:11:56:e2:
a6:a3:e1:8c:d3:be:db:27:d8:bb:51:03:a5:8a:bd:46:b2:ef:
07:51:fb:5b:c2:01:c1:73:66:4e:de:12:35:ef:b2:f8:44:35:
88:3e:bb:9c:e4:d9:cc:c3:e8:28:a1:11:0e:73:34:5d:3c:c2:
e3:8d:b0:96:41:c2:31:dc:ad:6c:d1:c4:92:20:f2:c2:22:8e:
e1:e4:44:d7:f9:d7:57:f2:f2:a9:ca:0a:e6:d9:d8:b9:11:a5:
d6:4b:5c:c1:1b:b8:94:b5:c4:c6:ee:e5:fc:ff:e9:2d:84:b0:
68:38:c1:cf:36:40:d2:00:b8:b8:90:e2:b2:ae:e1:23:15:0b:
00:5b:8b:58:40:6c:e3:14:dc:0d:45:f8:ba:19:ee:cd:50:93:
c5:d5:82:cf:9d:6c:69:27:8a:79:c1:dd:09:e0:62:5d:56:8f:
6a:9b:22:a2:bc:22:cf:cb:93:3c:bc:5b:09:3a:0f:6a:0f:fe:
91:0d:eb:ec:6d:55:aa:45:d5:74:75:15:f0:69:d2:bc:eb:64:
3c:4c:b8:f5:cc:51:7b:6b:4a:fc:5d:6d:4b:40:39:43:3d:1b:
23:db:45:c5
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzIAcexS4bRSqxymFGDZdSLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDIzMDA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmM2MzM4YjJlOTIxZDkxMjZjNTM2MzAzZjA3OGM5ZWJiOWE4NzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMdLh3+Y33Jr17u+FE9QtHRoYaLo
TxuhFMNa5yNqWEMrmU63AnEkRE8lrz/ExqD4sqeu8/e4X3w4tVX/Y+rZaO5s1/4W
WO2uAKHchBduNk4xPhqpguefrNDgDX8114+EFCaCjcGoABIN+l4L+ikdHLzP8w8Y
/YXBrSLWQRbu32I+IUozy6eiuIctpN6So0UI9oC+75SWMw0sBZoJKxay7VoNyKCJ
g5QUllh5YAthSFygunwz9S57xZ0fKoUlUDjK4spXf2l0+OZMn/a79lFGyGbC+cTz
xpuZK+D4eWkoXGu3uhkEukp0CphV3f1wMlgXWEyh6p8CITP+5qqE1yAbSwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFI/GM4sukh2RJsU2MD8HjJ67modSMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M4L2NmY2I5
My1kOGY0LTQ2OWEtOTBmOS04ZjM0ZGYzMDQ5MjcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgvY2ZjYjkz
LWQ4ZjQtNDY5YS05MGY5LThmMzRkZjMwNDkyNy8xL2o4WXppeTZTSFpFbXhUWXdQ
d2VNbnJ1YWgxSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuTe4MA0EAgACMAcDBQAqAk1gMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDq8TANBgkqhkiG9w0BAQsFAAOCAQEAg9E/y4yPM1E3
cLwj9DkNsu/M8QOUvCGUt4R/yB8SdoHiEVbipqPhjNO+2yfYu1EDpYq9RrLvB1H7
W8IBwXNmTt4SNe+y+EQ1iD67nOTZzMPoKKERDnM0XTzC442wlkHCMdytbNHEkiDy
wiKO4eRE1/nXV/LyqcoK5tnYuRGl1ktcwRu4lLXExu7l/P/pLYSwaDjBzzZA0gC4
uJDisq7hIxULAFuLWEBs4xTcDUX4uhnuzVCTxdWCz51saSeKecHdCeBiXVaPapsi
orwiz8uTPLxbCToPag/+kQ3r7G1VqkXVdHUV8GnSvOtkPEy49cxRe2tK/F1tS0A5
Qz0bI9tFxQ==
-----END CERTIFICATE-----
Generated at Fri May 3 02:10:56 2024 by rpki-client on console-ams.rpki-client.org