Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kc1MbBJg_Jp8iUv2q-d6buz-wG4.cer
File: kc1MbBJg_Jp8iUv2q-d6buz-wG4.cer (raw, json)
Hash identifier: gIy4UnHH/z2XeyNNm27hz9lcMQZdVhN84D649yK2zGE=
Subject key identifier: 91:CD:4C:6C:12:60:FC:9A:7C:89:4B:F6:AB:E7:7A:6E:EC:FE:C0:6E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DE734181D750F0E3857A0A7089DE5E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:31:10 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 59740
IP: 185.58.252.0/22
IP: 2a02:6660::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:73:41:81:d7:50:f0:e3:85:7a:0a:70:89:de:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:31:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=91cd4c6c1260fc9a7c894bf6abe77a6eecfec06e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9b:cd:5e:5c:69:f6:b4:2e:93:87:15:ce:bf:
a5:3b:d1:8c:d2:21:0b:e1:c4:6c:c3:aa:d0:82:6d:
b3:1c:cb:0c:e3:6e:72:98:80:d8:ff:88:ab:05:ce:
7d:5c:5a:f5:81:80:61:11:40:fb:b1:e3:ef:02:64:
c6:88:b4:5c:84:b1:93:c5:92:9b:86:59:a2:e8:47:
3d:36:b4:ab:06:62:f7:53:5b:78:e3:56:46:74:e5:
f5:24:6d:8c:1c:f9:74:50:01:32:80:62:44:11:f9:
64:ce:8e:81:ba:d0:37:11:19:94:51:0e:2a:85:44:
e6:e1:f8:b8:66:10:cc:c7:6c:df:67:e9:3b:bc:cf:
26:31:15:04:62:3e:01:b7:f0:6e:ac:3a:c6:cc:31:
48:fb:e6:bc:df:05:81:c7:b6:a2:0f:a8:0e:f1:58:
87:e8:df:0b:57:04:1f:25:dc:56:85:8b:5d:d6:1f:
b6:08:32:15:1d:f7:ad:02:07:ea:66:0b:19:05:61:
f6:30:53:7f:5a:b7:0b:d4:07:75:39:f0:a3:7f:eb:
ca:d0:69:b1:4b:0a:e7:d8:dd:b6:6c:ed:98:a1:2d:
bb:f0:d5:0f:8b:d5:e6:42:7b:a6:9b:6a:66:fc:6b:
7d:8b:e3:17:cd:37:01:a3:cf:d3:66:bd:5d:33:12:
c5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CD:4C:6C:12:60:FC:9A:7C:89:4B:F6:AB:E7:7A:6E:EC:FE:C0:6E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.58.252.0/22
IPv6:
2a02:6660::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59740
Signature Algorithm: sha256WithRSAEncryption
5c:dc:0a:17:8c:20:41:0f:2b:d9:71:b1:70:40:5e:f1:e9:53:
4f:16:c8:24:49:73:7c:55:b6:3b:84:ec:e7:a6:24:2d:ae:e0:
44:5d:80:66:94:29:78:f1:39:ba:9d:03:8a:a0:1e:97:b2:0d:
7f:f5:65:7a:39:09:82:1e:c9:ca:35:1e:34:71:e5:81:e4:bf:
2b:85:a3:37:1b:1d:f5:60:05:f4:50:4e:c1:34:21:09:16:6e:
3a:e2:0c:fd:fb:b2:45:54:dd:12:a9:bf:da:2d:f4:29:bb:cf:
4d:38:56:b7:68:92:09:6a:74:95:28:1d:b2:7b:a6:d0:c7:7e:
30:b1:a0:24:a3:c7:09:d2:8b:86:94:5a:bc:b3:88:ed:7e:92:
36:3e:8e:42:e5:0d:36:5f:12:d7:e0:b5:87:61:3b:bc:a5:81:
43:ab:09:6a:57:d3:bb:84:0c:df:03:ea:dd:ca:e0:81:c2:87:
1c:d1:9c:26:47:21:57:d1:b5:81:a0:d3:54:75:a8:06:06:ba:
46:34:17:e1:b8:e7:18:8f:07:e4:1f:d1:1b:eb:f3:68:17:90:
0e:d6:94:60:0b:c7:42:63:44:a7:93:dc:a6:99:91:22:97:0e:
61:6d:ac:b5:26:a4:05:65:d5:01:a0:2f:17:16:6f:da:e2:8d:
2e:3c:76:d5
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzI3nNBgddQ8OOFegpwid5eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDYzMTEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MWNkNGM2YzEyNjBmYzlhN2M4OTRiZjZhYmU3N2E2ZWVjZmVjMDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZvNXlxp9rQuk4cVzr+lO9GM0iEL
4cRsw6rQgm2zHMsM425ymIDY/4irBc59XFr1gYBhEUD7sePvAmTGiLRchLGTxZKb
hlmi6Ec9NrSrBmL3U1t441ZGdOX1JG2MHPl0UAEygGJEEflkzo6ButA3ERmUUQ4q
hUTm4fi4ZhDMx2zfZ+k7vM8mMRUEYj4Bt/BurDrGzDFI++a83wWBx7aiD6gO8ViH
6N8LVwQfJdxWhYtd1h+2CDIVHfetAgfqZgsZBWH2MFN/WrcL1Ad1OfCjf+vK0Gmx
Swrn2N22bO2YoS278NUPi9XmQnumm2pm/Gt9i+MXzTcBo8/TZr1dMxLF5QIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFJHNTGwSYPyafIlL9qvnem7s/sBuMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc2L2U1YjMw
MS0wYzMzLTQ4YjQtODQ3Yi1lOThlZTIzODExNDYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzYvZTViMzAx
LTBjMzMtNDhiNC04NDdiLWU5OGVlMjM4MTE0Ni8xL2tjMU1iQkpnX0pwOGlVdjJx
LWQ2YnV6LXdHNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuTr8MA0EAgACMAcDBQAqAmZgMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDpXDANBgkqhkiG9w0BAQsFAAOCAQEAXNwKF4wgQQ8r
2XGxcEBe8elTTxbIJElzfFW2O4Ts56YkLa7gRF2AZpQpePE5up0DiqAel7INf/Vl
ejkJgh7JyjUeNHHlgeS/K4WjNxsd9WAF9FBOwTQhCRZuOuIM/fuyRVTdEqm/2i30
KbvPTThWt2iSCWp0lSgdsnum0Md+MLGgJKPHCdKLhpRavLOI7X6SNj6OQuUNNl8S
1+C1h2E7vKWBQ6sJalfTu4QM3wPq3crggcKHHNGcJkchV9G1gaDTVHWoBga6RjQX
4bjnGI8H5B/RG+vzaBeQDtaUYAvHQmNEp5PcppmRIpcOYW2stSakBWXVAaAvFxZv
2uKNLjx21Q==
-----END CERTIFICATE-----
Generated at Fri May 3 07:27:27 2024 by rpki-client on console-ams.rpki-client.org