Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kp8HacY4g1c_JwPXZkYlcK9VkPM.cer
File: kp8HacY4g1c_JwPXZkYlcK9VkPM.cer (raw, json)
Hash identifier: 4nDb6p5nKVxiy2IwgwqZfA1NVOTTeZFaZW7Opp/jSIo=
Subject key identifier: 92:9F:07:69:C6:38:83:57:3F:27:03:D7:66:46:25:70:AF:55:90:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC493787725CF599A30C6D313CAB60AAB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:48 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 204811
IP: 185.239.72.0/22
IP: 2a0c:4e80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:78:77:25:cf:59:9a:30:c6:d3:13:ca:b6:0a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=929f0769c63883573f2703d766462570af5590f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b1:ac:d3:f4:94:6e:61:19:5f:28:56:48:d7:
c1:a0:19:3e:c2:77:65:56:04:26:6f:d0:cd:bb:5f:
25:8d:ce:8d:75:ac:3a:cb:9d:1c:fa:1e:ad:b4:c1:
25:f4:8d:49:b1:ad:f3:5f:ae:ee:a4:a2:8b:97:38:
30:0a:eb:5c:80:d6:de:0c:40:d4:8a:96:07:3f:3b:
8c:15:f2:62:7a:d0:e9:1e:72:1d:05:c0:df:dc:2d:
13:10:ad:69:d6:00:1d:5a:cd:4d:dc:a4:e4:9a:c7:
ff:6f:25:da:38:40:7d:dd:d0:50:d8:b2:06:74:24:
22:86:a1:c8:53:87:15:21:af:91:6b:8b:bf:1f:89:
3f:aa:eb:98:5f:8a:80:bf:77:ac:0a:50:e5:02:35:
ea:35:a2:bd:80:b6:da:22:45:33:9c:ae:20:a6:af:
ef:eb:34:ad:ca:2d:c9:7b:c9:73:81:e6:67:6f:4c:
33:84:24:4d:c2:31:1d:0c:ed:f2:78:9a:94:1e:39:
4f:e6:a4:f6:fc:11:67:49:5c:0e:c6:34:33:79:ac:
1b:9b:cc:cf:12:45:33:3b:ef:fa:e9:3e:68:36:92:
75:7c:01:19:cc:7f:13:61:7a:ce:73:fb:1a:f0:6f:
6d:94:95:d6:a7:10:49:0a:68:1c:5a:70:db:6f:a8:
e8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9F:07:69:C6:38:83:57:3F:27:03:D7:66:46:25:70:AF:55:90:F3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.72.0/22
IPv6:
2a0c:4e80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204811
Signature Algorithm: sha256WithRSAEncryption
1a:02:cd:0c:76:3c:64:40:fd:e6:97:1f:c9:aa:93:0b:06:75:
9b:9c:00:21:79:c7:8a:e9:88:17:1b:7a:af:e6:69:1a:37:8b:
d7:89:ac:3e:20:ed:0f:68:52:1b:a1:bb:7c:3a:19:e6:28:34:
d4:20:94:61:77:1b:8e:69:ba:8a:ca:2b:ea:65:67:6a:87:ef:
22:29:6d:27:66:d6:ad:18:00:bb:41:36:92:61:3a:ee:28:47:
c4:64:6a:af:02:9e:9c:58:44:cd:38:ec:4f:aa:85:cb:ca:b1:
f3:27:1f:24:84:07:6b:28:04:6e:dc:8a:6f:f3:33:c4:74:4d:
e4:d5:ce:0a:6a:3f:e0:1b:27:6e:a3:11:48:c0:2b:bc:89:60:
c0:d6:7e:a5:fc:1f:6b:ea:f7:58:58:ef:a0:c7:9a:fc:d5:34:
79:b1:27:00:6e:8e:0f:68:1f:8b:ae:90:e6:b6:30:9b:f1:a0:
c7:df:b0:c8:11:26:e4:24:7a:f7:55:0f:dd:0e:56:76:ad:86:
fa:90:b6:61:88:0a:f0:83:3d:26:c4:2e:e1:64:a1:4d:bd:2c:
13:54:f1:74:33:f3:7c:6e:d0:65:83:c2:26:17:a8:70:8d:63:
4b:f9:33:01:ec:6f:c7:93:80:0d:17:cb:27:34:7d:f0:c3:80:
d0:52:d9:15
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzEk3h3Jc9ZmjDG0xPKtgqrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTAzMDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjlmMDc2OWM2Mzg4MzU3M2YyNzAzZDc2NjQ2MjU3MGFmNTU5MGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLGs0/SUbmEZXyhWSNfBoBk+wndl
VgQmb9DNu18ljc6Ndaw6y50c+h6ttMEl9I1Jsa3zX67upKKLlzgwCutcgNbeDEDU
ipYHPzuMFfJietDpHnIdBcDf3C0TEK1p1gAdWs1N3KTkmsf/byXaOEB93dBQ2LIG
dCQihqHIU4cVIa+Ra4u/H4k/quuYX4qAv3esClDlAjXqNaK9gLbaIkUznK4gpq/v
6zStyi3Je8lzgeZnb0wzhCRNwjEdDO3yeJqUHjlP5qT2/BFnSVwOxjQzeawbm8zP
EkUzO+/66T5oNpJ1fAEZzH8TYXrOc/sa8G9tlJXWpxBJCmgcWnDbb6joGwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFJKfB2nGOINXPycD12ZGJXCvVZDzMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZhLzg2MWQz
OS1mOGQ0LTRhYTMtOWQ0Yi01ZDgwNjljNGE2NTcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEvODYxZDM5
LWY4ZDQtNGFhMy05ZDRiLTVkODA2OWM0YTY1Ny8xL2twOEhhY1k0ZzFjX0p3UFha
a1lsY0s5VmtQTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCue9IMA0EAgACMAcDBQMqDE6AMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMgCzANBgkqhkiG9w0BAQsFAAOCAQEAGgLNDHY8ZED9
5pcfyaqTCwZ1m5wAIXnHiumIFxt6r+ZpGjeL14msPiDtD2hSG6G7fDoZ5ig01CCU
YXcbjmm6isor6mVnaofvIiltJ2bWrRgAu0E2kmE67ihHxGRqrwKenFhEzTjsT6qF
y8qx8ycfJIQHaygEbtyKb/MzxHRN5NXOCmo/4BsnbqMRSMArvIlgwNZ+pfwfa+r3
WFjvoMea/NU0ebEnAG6OD2gfi66Q5rYwm/Ggx9+wyBEm5CR691UP3Q5Wdq2G+pC2
YYgK8IM9JsQu4WShTb0sE1TxdDPzfG7QZYPCJheocI1jS/kzAexvx5OADRfLJzR9
8MOA0FLZFQ==
-----END CERTIFICATE-----
Generated at Fri May 3 07:27:35 2024 by rpki-client on console-ams.rpki-client.org