Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kGSznoDKHN5MrcC8jqK0HqbSfHY.cer
File: kGSznoDKHN5MrcC8jqK0HqbSfHY.cer (raw, json)
Hash identifier: H7lRGWtZRBenuJW0807qghaIXDs8+FwdiDAqJwyLYys=
Subject key identifier: 90:64:B3:9E:80:CA:1C:DE:4C:AD:C0:BC:8E:A2:B4:1E:A6:D2:7C:76
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC795253B8D96D0B13DCF2B4F5564E885
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:31:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 40985
IP: 195.189.216.0/23
IP: 2001:67c:2860::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:25:3b:8d:96:d0:b1:3d:cf:2b:4f:55:64:e8:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9064b39e80ca1cde4cadc0bc8ea2b41ea6d27c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:b8:58:78:1d:d3:a3:42:0f:46:03:03:58:eb:
bd:37:97:65:62:a8:35:bd:a6:00:98:03:a1:b1:78:
78:5e:11:cb:d8:fe:71:ec:22:67:0f:71:14:4e:93:
2c:72:db:03:76:ac:6c:a3:4a:c8:20:09:9c:1f:34:
64:74:2f:e6:5f:9e:fc:d5:a1:45:6e:ee:1e:d3:75:
e8:90:f7:5c:fb:38:f8:55:f9:1d:14:7f:56:94:1c:
8e:45:0e:f0:09:59:16:de:5a:3e:09:b6:6a:17:d3:
03:cf:6e:5b:e5:4f:54:0f:4f:5c:ba:c6:f2:d4:b9:
d2:27:1f:0d:e2:6d:14:16:25:af:34:3f:69:be:42:
db:20:96:2b:c4:92:11:e5:5f:a2:95:f1:36:4d:84:
ed:b5:ba:82:fa:f7:04:a3:ae:f0:dd:e4:e4:51:83:
78:55:20:9f:3b:2d:5d:dc:c6:0e:1d:9f:d3:e8:db:
30:b9:8f:fc:01:b4:e1:8a:25:5c:92:93:db:ba:d7:
b7:4c:76:bf:a2:9f:74:84:db:b8:06:5d:65:4c:71:
55:9b:dd:bf:c4:65:f0:7c:53:c1:37:2d:92:9f:fa:
ea:3d:de:0a:9c:69:cd:22:44:df:3d:ba:6a:e6:1c:
f5:a1:68:8e:16:8a:82:f6:f1:c7:58:63:af:e2:c9:
e2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:64:B3:9E:80:CA:1C:DE:4C:AD:C0:BC:8E:A2:B4:1E:A6:D2:7C:76
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.189.216.0/23
IPv6:
2001:67c:2860::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
40985
Signature Algorithm: sha256WithRSAEncryption
4c:b7:9a:8f:ae:f3:84:ba:ba:4d:64:53:54:fa:80:39:8c:ee:
9f:36:a9:79:2b:33:94:a3:ce:da:59:06:e9:f4:17:b4:2a:a2:
e5:44:ca:b8:bd:af:f6:7a:28:a7:ff:95:c4:15:9f:bd:2b:12:
6b:54:a3:fe:81:44:d9:af:c3:02:5d:1e:21:c9:3a:c0:fe:93:
d8:f0:d1:97:7a:f4:f9:b0:e8:b2:34:7e:8c:9e:bf:42:42:3d:
a8:c4:ad:92:d9:bc:4b:a1:eb:15:b0:57:47:64:2d:d5:74:c6:
bf:39:1a:f0:fb:83:9a:f5:8f:d1:7f:dd:d9:b5:33:9e:00:e9:
8e:49:d6:6b:cf:fb:76:ad:b5:bc:dd:cc:5c:36:99:9c:d9:10:
55:c9:d0:8a:fb:b2:66:36:02:02:66:82:13:6f:f0:ed:a1:43:
d5:59:f8:93:93:6e:fa:27:92:e8:e2:d5:22:20:01:4f:bd:54:
12:45:98:39:02:df:84:e7:ba:b3:73:e6:c7:a2:ac:fb:cd:cd:
27:02:33:73:89:6a:86:a5:2c:b2:5d:5d:86:d7:6b:0e:53:e6:
03:1f:68:5c:3d:97:7f:fa:c5:d2:39:50:00:af:03:f3:21:62:
d8:95:c1:0d:1c:18:8c:aa:f4:a0:99:a3:32:d1:9c:a3:c7:14:
e7:dc:f5:c9
-----BEGIN CERTIFICATE-----
MIIFpTCCBI2gAwIBAgISAYzHlSU7jZbQsT3PK09VZOiFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDAzMTI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDY0YjM5ZTgwY2ExY2RlNGNhZGMwYmM4ZWEyYjQxZWE2ZDI3Yzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA87hYeB3To0IPRgMDWOu9N5dlYqg1
vaYAmAOhsXh4XhHL2P5x7CJnD3EUTpMsctsDdqxso0rIIAmcHzRkdC/mX5781aFF
bu4e03XokPdc+zj4VfkdFH9WlByORQ7wCVkW3lo+CbZqF9MDz25b5U9UD09cusby
1LnSJx8N4m0UFiWvND9pvkLbIJYrxJIR5V+ilfE2TYTttbqC+vcEo67w3eTkUYN4
VSCfOy1d3MYOHZ/T6NswuY/8AbThiiVckpPbute3THa/op90hNu4Bl1lTHFVm92/
xGXwfFPBNy2Sn/rqPd4KnGnNIkTfPbpq5hz1oWiOFoqC9vHHWGOv4snikwIDAQAB
o4ICsTCCAq0wHQYDVR0OBBYEFJBks56AyhzeTK3AvI6itB6m0nx2MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzliL2U3NzIz
ZC1mZTliLTQyOTQtYmZjYS0zZGRhMjNjYmRlNTkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWIvZTc3MjNk
LWZlOWItNDI5NC1iZmNhLTNkZGEyM2NiZGU1OS8xL2tHU3pub0RLSE41TXJjQzhq
cUswSHFiU2ZIWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF
BwEHAQH/BCEwHzAMBAIAATAGAwQBw73YMA8EAgACMAkDBwAgAQZ8KGAwGgYIKwYB
BQUHAQgBAf8ECzAJoAcwBQIDAKAZMA0GCSqGSIb3DQEBCwUAA4IBAQBMt5qPrvOE
urpNZFNU+oA5jO6fNql5KzOUo87aWQbp9Be0KqLlRMq4va/2eiin/5XEFZ+9KxJr
VKP+gUTZr8MCXR4hyTrA/pPY8NGXevT5sOiyNH6Mnr9CQj2oxK2S2bxLoesVsFdH
ZC3VdMa/ORrw+4Oa9Y/Rf93ZtTOeAOmOSdZrz/t2rbW83cxcNpmc2RBVydCK+7Jm
NgICZoITb/DtoUPVWfiTk276J5Lo4tUiIAFPvVQSRZg5At+E57qzc+bHoqz7zc0n
AjNziWqGpSyyXV2G12sOU+YDH2hcPZd/+sXSOVAArwPzIWLYlcENHBiMqvSgmaMy
0ZyjxxTn3PXJ
-----END CERTIFICATE-----
Generated at Fri May 3 10:54:49 2024 by rpki-client on console-fra.rpki-client.org