Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer
File: kCmtIleaaAXB_4se5dc1KQwBNAs.cer (raw, json)
Hash identifier: eKxU9onJ4n/tlAzqo8jmwuF0wCBgA5Y5D92TTmsfstE=
Subject key identifier: 90:29:AD:22:57:9A:68:05:C1:FF:8B:1E:E5:D7:35:29:0C:01:34:0B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4244AE384734A897646DE6C44EE8699
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210145
IP: 193.168.58.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:4a:e3:84:73:4a:89:76:46:de:6c:44:ee:86:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9029ad22579a6805c1ff8b1ee5d735290c01340b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:08:3a:b6:9f:38:67:f4:4f:d0:35:33:70:30:
db:b0:94:60:39:70:0d:95:1b:60:e0:c5:6f:f8:0c:
2f:24:32:ee:7c:da:ad:97:f2:3f:c4:c0:a5:08:ba:
71:69:35:3d:f5:35:ae:9d:47:a4:89:68:e8:87:cb:
ec:88:33:c0:5c:4a:8d:ff:7f:77:97:48:39:cd:97:
c2:a7:ab:03:a0:72:2f:77:30:ae:c4:c3:33:c1:ea:
b7:64:cf:1f:6e:f8:27:1d:49:e1:b9:13:9c:b0:f6:
5d:f1:98:07:73:ec:8b:9d:7e:02:33:31:84:24:91:
73:f1:74:16:15:b1:ce:00:d3:01:c3:50:03:e7:0d:
44:cc:0e:fa:b1:2b:ea:28:5d:d8:45:66:4f:0b:76:
bb:6c:bb:37:b4:a8:9d:b6:11:d4:99:a9:f3:9c:b4:
f5:11:01:eb:be:14:b0:c0:c7:eb:20:30:9b:37:c5:
09:94:68:56:91:4a:ca:02:a3:94:c6:f7:d0:95:80:
e4:92:44:d3:db:67:1c:cb:91:6f:66:38:ff:70:2b:
a6:0b:ca:09:0d:d9:a9:a2:bf:c6:70:9c:66:eb:15:
28:72:b0:06:39:43:51:33:ce:7e:0e:8c:d7:1c:85:
6b:2e:bd:90:f3:71:6a:46:f1:b0:78:e6:6b:ee:01:
e3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:29:AD:22:57:9A:68:05:C1:FF:8B:1E:E5:D7:35:29:0C:01:34:0B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.58.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210145
Signature Algorithm: sha256WithRSAEncryption
aa:27:de:ab:05:91:67:a2:89:99:50:e6:40:9a:7d:29:6d:51:
c2:99:9e:03:d6:d2:23:da:3e:20:9a:9a:ec:36:fa:40:53:d6:
93:2b:0b:a8:d8:49:b5:ff:04:23:39:41:e8:ca:fd:da:8a:e6:
cf:39:9f:60:a9:26:6a:e1:45:63:2b:37:4e:b8:d2:75:91:1f:
f3:b3:74:c5:55:c2:2d:ca:df:d2:b8:54:85:1b:44:61:7d:71:
7b:5a:5e:e7:1b:29:29:fe:fc:24:72:20:b7:cc:0a:a9:52:e6:
bd:03:84:92:0e:39:87:8d:04:34:e8:d7:dc:5a:cc:b3:ea:c0:
43:bd:9e:f7:b9:70:b3:b0:21:7c:0e:7a:10:71:20:81:73:0b:
28:e0:29:05:5b:c7:36:2a:c8:b3:6e:c5:e9:fe:d9:e1:3e:de:
da:3a:a7:0f:a2:46:b9:35:2c:53:7a:a0:f5:7a:e4:f1:5f:0a:
2d:ae:7b:42:69:dd:2b:0e:db:9f:db:26:f0:bb:c4:e6:7a:dd:
d7:97:ff:22:01:dd:a7:44:14:6d:bd:12:8e:5f:bb:7c:32:ca:
0e:e0:68:6a:5d:4c:80:14:e5:68:bd:d2:4a:ac:a1:d7:91:54:
9d:de:b7:ca:a8:62:40:24:8e:fa:7c:87:2d:ad:58:78:be:eb:
aa:f4:3c:dd
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYzEJErjhHNKiXZG3mxE7oaZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDgyOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDI5YWQyMjU3OWE2ODA1YzFmZjhiMWVlNWQ3MzUyOTBjMDEzNDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgg6tp84Z/RP0DUzcDDbsJRgOXAN
lRtg4MVv+AwvJDLufNqtl/I/xMClCLpxaTU99TWunUekiWjoh8vsiDPAXEqN/393
l0g5zZfCp6sDoHIvdzCuxMMzweq3ZM8fbvgnHUnhuROcsPZd8ZgHc+yLnX4CMzGE
JJFz8XQWFbHOANMBw1AD5w1EzA76sSvqKF3YRWZPC3a7bLs3tKidthHUmanznLT1
EQHrvhSwwMfrIDCbN8UJlGhWkUrKAqOUxvfQlYDkkkTT22ccy5FvZjj/cCumC8oJ
Ddmpor/GcJxm6xUocrAGOUNRM85+DozXHIVrLr2Q83FqRvGweOZr7gHjxwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFJAprSJXmmgFwf+LHuXXNSkMATQLMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NhL2VkYWVm
ZS1jODcwLTQxNDctOWUzYi1jNzk5ZDZkNjE0NGEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2EvZWRhZWZl
LWM4NzAtNDE0Ny05ZTNiLWM3OTlkNmQ2MTQ0YS8xL2tDbXRJbGVhYUFYQl80c2U1
ZGMxS1F3Qk5Bcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQBwag6MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwM04TANBgkqhkiG9w0BAQsFAAOCAQEAqifeqwWRZ6KJmVDmQJp9KW1RwpmeA9bS
I9o+IJqa7Db6QFPWkysLqNhJtf8EIzlB6Mr92ormzzmfYKkmauFFYys3TrjSdZEf
87N0xVXCLcrf0rhUhRtEYX1xe1pe5xspKf78JHIgt8wKqVLmvQOEkg45h40ENOjX
3FrMs+rAQ72e97lws7AhfA56EHEggXMLKOApBVvHNirIs27F6f7Z4T7e2jqnD6JG
uTUsU3qg9Xrk8V8KLa57QmndKw7bn9sm8LvE5nrd15f/IgHdp0QUbb0Sjl+7fDLK
DuBoal1MgBTlaL3SSqyh15FUnd63yqhiQCSO+nyHLa1YeL7rqvQ83Q==
-----END CERTIFICATE-----
Generated at Fri May 3 12:00:01 2024 by rpki-client on console-ams.rpki-client.org