Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.cer
File: kiFKkNQJX9JnZcwOTfiZ6MRsBt8.cer (raw, json)
Hash identifier: U3HWBs0H82rf7UhIJs52mmy0cfIOAaCKB+GUnR4cpmk=
Subject key identifier: 92:21:4A:90:D4:09:5F:D2:67:65:CC:0E:4D:F8:99:E8:C4:6C:06:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC649D6CC2A094735D9A4ED5A0501AA40
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:29:37 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 206978
IP: 149.249.12.0/22
IP: 185.196.29.0/24
IP: 2a03:e440::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:d6:cc:2a:09:47:35:d9:a4:ed:5a:05:01:aa:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=92214a90d4095fd26765cc0e4df899e8c46c06df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2f:3e:c3:f2:80:63:49:1c:cf:5a:a9:b0:c7:
5b:dd:9d:52:a0:67:f4:0c:22:61:ed:dc:67:f2:c5:
6c:93:e8:e4:44:fd:ec:38:7a:e2:d9:b5:2a:94:44:
ac:c3:19:c6:a2:37:cd:cc:ac:61:e7:f2:12:68:b7:
05:8f:84:9a:81:62:b6:cb:1c:fd:be:e8:b0:3d:ec:
4c:06:b7:d8:db:e9:ae:6c:c9:32:49:ad:9e:d2:75:
2b:d5:75:12:8a:66:cf:ea:ef:22:99:f2:34:a5:5b:
00:03:02:e3:7b:66:a0:ec:c5:ab:73:1c:d2:02:60:
c2:60:f9:5e:b8:bd:49:20:5d:5a:34:1c:4a:2a:33:
f9:4c:d6:0c:77:37:81:89:99:91:f7:52:dd:ce:b7:
63:4b:03:c2:a8:50:bb:1a:04:da:7a:b3:d8:41:39:
28:1f:c3:73:61:08:53:a6:12:f6:62:55:e0:de:ea:
8a:a6:e8:70:e2:39:c2:09:d5:8b:9a:d2:45:cf:48:
c5:96:76:dc:69:f3:ab:5c:41:4e:90:f0:bf:9f:c4:
8f:6c:05:c5:f2:09:c3:88:e6:1f:e5:1e:47:16:b1:
0c:53:76:67:ab:9a:67:a3:c2:2a:82:55:66:96:c2:
98:50:c2:4e:49:27:55:fb:48:54:8d:00:97:42:90:
3e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:21:4A:90:D4:09:5F:D2:67:65:CC:0E:4D:F8:99:E8:C4:6C:06:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.249.12.0/22
185.196.29.0/24
IPv6:
2a03:e440::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206978
Signature Algorithm: sha256WithRSAEncryption
89:c1:cb:9a:ce:1c:df:20:27:ab:55:3b:21:55:69:5f:24:3a:
f2:09:55:76:0c:f4:87:7a:49:15:c4:aa:4d:bb:1b:6a:6e:3b:
88:f3:aa:22:b3:ce:6f:d0:c2:0d:b7:d6:bb:e6:90:7a:94:05:
51:57:5d:be:89:15:df:b6:f0:99:39:05:21:45:7a:a3:f5:d5:
00:6b:e8:c9:cb:e0:03:35:35:34:4c:75:cc:31:2b:b2:fa:a9:
94:12:67:46:f3:65:73:3e:04:b1:83:e7:05:14:f4:e9:06:16:
c9:e8:dd:78:8c:21:94:5c:b5:2f:05:2e:8d:dc:e4:59:b6:c7:
b6:54:7f:17:8e:0d:0d:8a:77:69:60:bb:05:df:5c:ae:12:95:
3f:8e:b3:74:e4:1e:75:df:07:fc:c9:53:8f:cd:e2:77:47:24:
fa:10:f4:82:08:2b:92:0d:d2:1e:e8:87:a0:48:91:63:93:cd:
a1:f4:b7:c2:53:a4:59:28:ef:1c:41:8d:6c:8a:0c:41:85:11:
b1:c9:b2:64:ba:2a:d0:30:fd:b5:85:6b:c8:74:22:d2:6f:db:
92:f3:e1:61:d0:1c:77:26:1d:42:54:93:0f:53:50:85:e3:98:
ba:33:47:1b:c4:85:5e:55:45:58:1f:23:c6:73:6d:83:e6:50:
fa:fd:1e:79
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAYzGSdbMKglHNdmk7VoFAapAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTgyOTM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjIxNGE5MGQ0MDk1ZmQyNjc2NWNjMGU0ZGY4OTllOGM0NmMwNmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzy8+w/KAY0kcz1qpsMdb3Z1SoGf0
DCJh7dxn8sVsk+jkRP3sOHri2bUqlESswxnGojfNzKxh5/ISaLcFj4SagWK2yxz9
vuiwPexMBrfY2+mubMkySa2e0nUr1XUSimbP6u8imfI0pVsAAwLje2ag7MWrcxzS
AmDCYPleuL1JIF1aNBxKKjP5TNYMdzeBiZmR91LdzrdjSwPCqFC7GgTaerPYQTko
H8NzYQhTphL2YlXg3uqKpuhw4jnCCdWLmtJFz0jFlnbcafOrXEFOkPC/n8SPbAXF
8gnDiOYf5R5HFrEMU3Znq5pno8IqglVmlsKYUMJOSSdV+0hUjQCXQpA+KwIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFJIhSpDUCV/SZ2XMDk34mejEbAbfMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M2LzlhZTlh
ZC02YThjLTQ3Y2ItYmRkMS01N2Q4MDMwYjYxZTEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzYvOWFlOWFk
LTZhOGMtNDdjYi1iZGQxLTU3ZDgwMzBiNjFlMS8xL2tpRktrTlFKWDlKblpjd09U
ZmlaNk1Sc0J0OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQClfkMAwQAucQdMA0EAgACMAcDBQMqA+RAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMogjANBgkqhkiG9w0BAQsFAAOCAQEAicHL
ms4c3yAnq1U7IVVpXyQ68glVdgz0h3pJFcSqTbsbam47iPOqIrPOb9DCDbfWu+aQ
epQFUVddvokV37bwmTkFIUV6o/XVAGvoycvgAzU1NEx1zDErsvqplBJnRvNlcz4E
sYPnBRT06QYWyejdeIwhlFy1LwUujdzkWbbHtlR/F44NDYp3aWC7Bd9crhKVP46z
dOQedd8H/MlTj83id0ck+hD0gggrkg3SHuiHoEiRY5PNofS3wlOkWSjvHEGNbIoM
QYURscmyZLoq0DD9tYVryHQi0m/bkvPhYdAcdyYdQlSTD1NQheOYujNHG8SFXlVF
WB8jxnNtg+ZQ+v0eeQ==
-----END CERTIFICATE-----
Generated at Fri May 3 12:00:20 2024 by rpki-client on console-ams.rpki-client.org