Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jlVrUrjk5wn6Vpta43LG4oJm8jI.cer
File: jlVrUrjk5wn6Vpta43LG4oJm8jI.cer (raw, json)
Hash identifier: 5cIwq5AukQJvW5IEANgiKK7a+icRZW/YusjWSsLinIY=
Subject key identifier: 8E:55:6B:52:B8:E4:E7:09:FA:56:9B:5A:E3:72:C6:E2:82:66:F2:32
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94AC25244C2821F7407E9EBAD98177A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:29:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 48149
IP: 46.254.216.0/21
IP: 109.207.80.0/20
IP: 185.130.232.0/22
IP: 185.220.36.0/22
IP: 2001:678:1bc::/48
IP: 2a0b:ec40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:c2:52:44:c2:82:1f:74:07:e9:eb:ad:98:17:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e556b52b8e4e709fa569b5ae372c6e28266f232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ea:00:93:97:9e:32:65:f6:1f:88:e8:75:47:
ba:44:b0:b4:b0:18:4c:38:a5:53:2f:ea:31:70:60:
bf:18:7f:62:b8:a9:76:49:8b:3c:db:91:b7:4b:33:
a4:05:99:ad:f8:f7:ae:77:87:db:6a:6d:38:da:9c:
99:8a:55:00:1b:e9:a0:c1:84:73:58:2b:86:07:32:
28:b2:07:5e:fe:2d:c1:53:42:e8:36:c8:90:fd:6f:
9f:2b:da:2b:17:fc:26:4c:72:8f:b4:ec:2f:b8:02:
bb:cf:64:e2:0e:4f:19:d4:47:d2:de:ea:3c:01:2e:
bb:d5:55:c6:a1:0e:72:86:0d:8d:a9:40:db:63:c3:
69:c9:c0:39:75:60:09:a0:fd:08:1c:76:70:d9:63:
b7:90:ee:f3:76:9c:cf:f6:92:4c:b3:74:8c:ec:8f:
43:df:f5:1b:32:58:fb:03:42:21:6c:d3:ea:d0:e0:
73:f2:eb:71:71:b3:83:67:48:13:e3:90:1a:2f:30:
a9:7c:e3:bb:91:25:3e:5b:23:ac:8b:c4:98:94:85:
39:83:86:94:33:97:be:88:1a:42:1e:80:c7:a2:6d:
bf:fb:28:c5:6e:87:46:1f:2a:28:81:f3:42:a3:75:
ca:b0:76:ae:87:f0:c4:06:13:15:8c:b1:af:7c:40:
b4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:55:6B:52:B8:E4:E7:09:FA:56:9B:5A:E3:72:C6:E2:82:66:F2:32
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.216.0/21
109.207.80.0/20
185.130.232.0/22
185.220.36.0/22
IPv6:
2001:678:1bc::/48
2a0b:ec40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48149
Signature Algorithm: sha256WithRSAEncryption
1a:92:69:aa:bd:93:aa:29:6c:2e:10:c6:4f:0b:16:ac:ad:e2:
20:42:54:97:7b:fe:a7:9d:df:01:92:af:33:36:9e:56:f9:74:
07:c3:04:56:87:6b:55:59:47:81:67:b7:4b:0e:a9:6c:69:6d:
16:bf:db:6a:32:33:03:95:03:7f:2e:a9:f4:5e:15:87:21:42:
75:8e:33:56:49:4d:c4:74:36:13:95:6a:b5:39:fa:65:c6:8d:
44:0c:93:ab:2e:d3:d0:85:64:24:7a:35:1f:14:55:bd:64:ac:
80:cb:22:fb:04:35:c2:32:15:ad:87:11:60:b9:af:97:b5:8a:
fa:df:28:8a:7b:42:a2:41:40:58:3c:ff:cc:d3:03:11:f2:87:
93:f9:96:82:90:7f:67:30:93:c8:47:6b:d9:26:46:ff:d3:6d:
e7:aa:86:ed:d5:87:04:72:6f:aa:b5:fc:34:93:58:cd:2d:1c:
0a:0b:2c:15:10:85:8d:8c:2a:55:a7:c4:9d:1a:93:a6:d3:7e:
fa:43:2b:6f:8b:a1:f5:4b:18:f5:d2:bc:69:7e:0c:d2:7f:df:
a7:24:aa:bb:b9:8a:f3:2b:de:42:a6:0c:65:2d:a7:7a:9d:31:
77:c3:72:97:29:13:b6:7e:ac:50:ca:a2:1d:9d:1d:0e:3e:e7:
57:47:9f:46
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgISAYzJSsJSRMKCH3QH6eutmBd6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDgyOTI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTU1NmI1MmI4ZTRlNzA5ZmE1NjliNWFlMzcyYzZlMjgyNjZmMjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uoAk5eeMmX2H4jodUe6RLC0sBhM
OKVTL+oxcGC/GH9iuKl2SYs825G3SzOkBZmt+Peud4fbam042pyZilUAG+mgwYRz
WCuGBzIosgde/i3BU0LoNsiQ/W+fK9orF/wmTHKPtOwvuAK7z2TiDk8Z1EfS3uo8
AS671VXGoQ5yhg2NqUDbY8NpycA5dWAJoP0IHHZw2WO3kO7zdpzP9pJMs3SM7I9D
3/UbMlj7A0IhbNPq0OBz8utxcbODZ0gT45AaLzCpfOO7kSU+WyOsi8SYlIU5g4aU
M5e+iBpCHoDHom2/+yjFbodGHyoogfNCo3XKsHauh/DEBhMVjLGvfEC0VQIDAQAB
o4ICyjCCAsYwHQYDVR0OBBYEFI5Va1K45OcJ+labWuNyxuKCZvIyMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyLzg4ZjJh
NS0yN2U4LTQ2NzEtYThkMy1jZGU3MDJjMGVjOGIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTIvODhmMmE1
LTI3ZTgtNDY3MS1hOGQzLWNkZTcwMmMwZWM4Yi8xL2psVnJVcmprNXduNlZwdGE0
M0xHNG9KbThqSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEkGCCsGAQUF
BwEHAQH/BDowODAeBAIAATAYAwQDLv7YAwQEbc9QAwQCuYLoAwQCudwkMBYEAgAC
MBADBwAgAQZ4AbwDBQMqC+xAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwC8FTAN
BgkqhkiG9w0BAQsFAAOCAQEAGpJpqr2TqilsLhDGTwsWrK3iIEJUl3v+p53fAZKv
MzaeVvl0B8MEVodrVVlHgWe3Sw6pbGltFr/bajIzA5UDfy6p9F4VhyFCdY4zVklN
xHQ2E5VqtTn6ZcaNRAyTqy7T0IVkJHo1HxRVvWSsgMsi+wQ1wjIVrYcRYLmvl7WK
+t8ointCokFAWDz/zNMDEfKHk/mWgpB/ZzCTyEdr2SZG/9Nt56qG7dWHBHJvqrX8
NJNYzS0cCgssFRCFjYwqVafEnRqTptN++kMrb4uh9UsY9dK8aX4M0n/fpySqu7mK
8yveQqYMZS2nep0xd8NylykTtn6sUMqiHZ0dDj7nV0efRg==
-----END CERTIFICATE-----
Generated at Fri May 3 13:56:24 2024 by rpki-client on console-fra.rpki-client.org