Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
File: krWsiPLNsUk0gwwawJal73MJjxI.cer (raw, json)
Hash identifier: JSwSAbB62MxlVzqQnEHi66mAjHzHycMmvmnKkDH2cQQ=
Subject key identifier: 92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA96C8D329573EB1057D42027893FC34
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 14:32:08 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 213300
IP: 2.56.170.0/24
IP: 2a10:4040::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:96:c8:d3:29:57:3e:b1:05:7d:42:02:78:93:fc:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 14:32:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=92b5ac88f2cdb14934830c1ac096a5ef73098f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7b:53:6d:a8:70:bf:2f:5c:a3:c7:94:1c:a1:
a2:99:a9:bb:9c:38:c9:ea:64:c0:66:6d:be:70:16:
32:61:06:1e:76:8b:c0:5a:b5:01:77:8d:9e:96:31:
ca:d4:40:cc:4f:97:d7:07:52:0a:17:02:7e:85:94:
1a:97:8a:e4:a2:fb:ea:0c:24:de:81:98:c2:17:44:
f5:af:31:73:c1:9a:34:7d:ea:ff:c5:87:f0:4c:46:
d2:2a:fd:4f:e4:1d:f7:6f:43:ee:1f:a5:1e:83:9c:
46:61:ee:9f:b4:ca:7f:a1:66:1e:d4:c7:5f:9c:34:
4b:91:aa:90:e6:40:8c:dd:33:ba:8f:bc:86:48:8a:
67:4a:af:27:c9:c7:60:e0:3d:a1:bc:76:47:61:56:
9a:f0:4f:83:9f:1f:3c:b7:a4:64:45:6f:06:1d:c6:
c5:a3:3a:e8:1f:21:74:31:90:31:e8:0a:b7:34:b7:
fa:e6:02:f0:b7:89:78:e7:41:66:d3:27:b4:47:0f:
f9:56:2b:8e:3a:48:14:eb:71:59:85:32:f2:a2:5a:
64:54:6e:5f:9c:2f:ae:f4:11:37:0e:17:2c:2d:ca:
9b:9b:cc:f3:cd:15:d8:e9:2b:a7:65:f2:34:90:27:
af:7a:e9:1e:03:e4:f9:5d:85:a1:2d:bf:28:f0:ec:
0e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.170.0/24
IPv6:
2a10:4040::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213300
Signature Algorithm: sha256WithRSAEncryption
02:3c:7c:1e:39:e9:85:d9:a0:33:a3:97:45:3d:79:55:c7:0b:
67:70:c9:c7:dc:9b:db:ea:c4:8a:ed:62:38:e3:1c:70:98:69:
b5:f5:d9:04:c5:5e:e2:5c:fc:6d:db:79:65:b8:01:20:36:f6:
f4:82:16:9a:e5:b2:f6:4d:d7:1d:09:dd:f8:fa:66:f7:ce:53:
57:d0:b3:75:85:ae:c5:27:24:13:49:86:ea:17:8f:92:b5:d7:
d6:b6:62:20:01:43:6a:0c:9f:ea:f7:67:57:f0:a9:d1:63:42:
e3:8e:45:e8:32:b6:66:fb:d3:05:f9:88:df:cd:b7:d7:c7:af:
9a:54:17:8e:60:c2:cb:b8:02:fb:85:7a:a5:1a:f8:e5:71:b7:
4f:35:a5:ed:84:19:90:4b:aa:5e:bf:32:5e:a0:2f:52:74:28:
f9:f1:8e:6c:25:65:82:83:03:6a:89:03:aa:8e:e9:7c:65:cf:
aa:b1:20:8b:72:98:e7:11:56:23:e6:44:5a:8d:25:9a:2b:f7:
82:5a:02:a7:e4:8a:2b:31:73:c3:db:9c:40:cf:6b:1c:ed:f2:
91:d4:dc:ef:66:42:e0:1b:97:fd:35:81:1e:3a:05:ba:6b:c0:
bc:b6:83:cb:eb:55:41:95:36:61:4c:75:fc:d5:a6:0d:22:bc:
25:49:ff:e9
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzKlsjTKVc+sQV9QgJ4k/w0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTQzMjA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MmI1YWM4OGYyY2RiMTQ5MzQ4MzBjMWFjMDk2YTVlZjczMDk4ZjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHtTbahwvy9co8eUHKGimam7nDjJ
6mTAZm2+cBYyYQYedovAWrUBd42eljHK1EDMT5fXB1IKFwJ+hZQal4rkovvqDCTe
gZjCF0T1rzFzwZo0fer/xYfwTEbSKv1P5B33b0PuH6Ueg5xGYe6ftMp/oWYe1Mdf
nDRLkaqQ5kCM3TO6j7yGSIpnSq8nycdg4D2hvHZHYVaa8E+Dnx88t6RkRW8GHcbF
ozroHyF0MZAx6Aq3NLf65gLwt4l450Fm0ye0Rw/5ViuOOkgU63FZhTLyolpkVG5f
nC+u9BE3DhcsLcqbm8zzzRXY6SunZfI0kCeveukeA+T5XYWhLb8o8OwOmQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFJK1rIjyzbFJNIMMGsCWpe9zCY8SMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EzL2U0MTdi
ZC0xNGViLTRjYTUtODBmNy0zNmM0NmY5MGQ5YTUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTMvZTQxN2Jk
LTE0ZWItNGNhNS04MGY3LTM2YzQ2ZjkwZDlhNS8xL2tyV3NpUExOc1VrMGd3d2F3
SmFsNzNNSmp4SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAAjiqMA0EAgACMAcDBQMqEEBAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNBNDANBgkqhkiG9w0BAQsFAAOCAQEAAjx8Hjnphdmg
M6OXRT15VccLZ3DJx9yb2+rEiu1iOOMccJhptfXZBMVe4lz8bdt5ZbgBIDb29IIW
muWy9k3XHQnd+Ppm985TV9CzdYWuxSckE0mG6hePkrXX1rZiIAFDagyf6vdnV/Cp
0WNC445F6DK2ZvvTBfmI382318evmlQXjmDCy7gC+4V6pRr45XG3TzWl7YQZkEuq
Xr8yXqAvUnQo+fGObCVlgoMDaokDqo7pfGXPqrEgi3KY5xFWI+ZEWo0lmiv3gloC
p+SKKzFzw9ucQM9rHO3ykdTc72ZC4BuX/TWBHjoFumvAvLaDy+tVQZU2YUx1/NWm
DSK8JUn/6Q==
-----END CERTIFICATE-----
Generated at Fri May 3 10:55:21 2024 by rpki-client on console-fra.rpki-client.org