Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ksccIHipHnbA5abTAJaHLJIsnNw.cer
File: ksccIHipHnbA5abTAJaHLJIsnNw.cer (raw, json)
Hash identifier: tT52d1aQqwqkZYS8dVI2ibrSU5G43C3Xhz1/LRc07V0=
Subject key identifier: 92:C7:1C:20:78:A9:1E:76:C0:E5:A6:D3:00:96:87:2C:92:2C:9C:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2661CC84B6DFFB1DE60F6EA72D8D04
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3b/c17237-a134-4b11-ab12-9fb6b60bd69a/1/ksccIHipHnbA5abTAJaHLJIsnNw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3b/c17237-a134-4b11-ab12-9fb6b60bd69a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:29:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.131.28.0/22
IP: 94.158.252.0/22
IP: 185.44.24.0/22
IP: 185.95.124.0/22
IP: 185.104.236.0/22
IP: 185.143.136.0/22
IP: 185.182.124.0/22
IP: 185.184.0.0/22
IP: 185.208.20.0/22
IP: 185.213.48.0/22
IP: 2a04:9900::/29
IP: 2a07:3580::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:26:61:cc:84:b6:df:fb:1d:e6:0f:6e:a7:2d:8d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=92c71c2078a91e76c0e5a6d30096872c922c9cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:db:f0:8a:2b:73:89:99:aa:ba:25:4e:00:20:
6c:0e:4c:c9:fe:42:c3:65:af:90:2c:8c:41:f3:86:
95:7c:40:21:80:7d:24:d3:f4:f3:e1:8e:4b:f2:e3:
2c:a2:66:04:f7:13:42:1f:b2:cb:72:f1:84:2f:46:
9c:ed:8a:db:76:04:bb:2e:c4:49:a1:90:68:27:66:
7f:d0:73:e3:08:00:cb:13:d7:3e:66:df:a2:eb:fe:
d9:17:0d:4f:23:e6:62:ac:eb:52:87:42:b1:f0:62:
9d:17:d7:54:f3:99:06:58:3b:65:ea:57:50:f8:65:
60:86:26:4e:2f:17:d8:2b:66:9f:cd:ea:6d:89:ec:
5a:af:89:88:4c:6f:43:3c:09:66:1e:3a:38:d6:02:
7a:aa:60:a7:4a:e3:8f:51:ec:c5:37:55:c8:88:01:
a5:91:68:2f:77:ab:65:f0:47:49:2d:e9:fb:19:25:
b8:32:a6:ab:05:1a:ec:74:61:00:21:63:6f:f6:21:
40:63:b0:40:0c:c9:17:a7:0c:c3:73:36:bc:2b:0b:
3f:7b:bc:6f:2e:de:89:fa:ac:59:19:46:4e:9d:2d:
65:4a:46:e7:ac:e2:a0:66:e4:65:ed:a1:10:a5:a1:
df:23:02:ee:d5:1d:a8:e3:77:d8:22:a1:d7:44:d3:
83:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C7:1C:20:78:A9:1E:76:C0:E5:A6:D3:00:96:87:2C:92:2C:9C:DC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c17237-a134-4b11-ab12-9fb6b60bd69a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c17237-a134-4b11-ab12-9fb6b60bd69a/1/ksccIHipHnbA5abTAJaHLJIsnNw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.28.0/22
94.158.252.0/22
185.44.24.0/22
185.95.124.0/22
185.104.236.0/22
185.143.136.0/22
185.182.124.0/22
185.184.0.0/22
185.208.20.0/22
185.213.48.0/22
IPv6:
2a04:9900::/29
2a07:3580::/29
Signature Algorithm: sha256WithRSAEncryption
82:61:2e:6d:d9:86:b4:a7:c9:05:23:4b:6e:07:17:e1:2a:43:
b6:78:e5:7e:02:15:93:6e:7f:cf:a2:1e:2c:5d:73:c6:91:b7:
25:62:8a:0a:df:b2:7f:58:c1:aa:8b:8c:93:27:b7:ad:bf:65:
15:1e:71:7b:66:5a:71:55:b1:9e:ad:f7:09:31:8d:04:74:e5:
f8:6e:0c:98:e9:20:6e:75:ae:c9:f7:ba:9c:55:f2:e7:e7:d6:
07:81:df:47:4b:99:6e:ad:09:6e:06:3a:06:8d:01:59:59:a1:
a8:54:78:e4:f9:bb:d5:1a:8e:ef:a3:39:2a:f5:39:b0:3c:a4:
ae:9f:32:d1:06:68:2d:4b:f8:64:50:db:1a:e2:7c:56:f1:10:
6b:50:80:8d:f1:77:00:71:b1:82:f6:37:f5:b6:be:04:b5:36:
a2:d0:97:ab:5d:65:75:d4:38:3d:36:a7:7a:49:5b:4f:d9:5f:
48:fe:79:98:ef:33:5d:03:41:2d:2f:9f:ac:0d:c9:b7:83:fa:
82:c6:fd:db:05:8b:30:83:b2:00:3b:45:2b:23:3b:73:87:d1:
6e:3c:b3:6c:f1:58:a6:1a:0f:3a:a1:41:84:b3:33:06:43:cf:
8c:c9:47:53:e6:26:3e:4b:dc:e7:1f:90:88:fd:ed:84:87:45:
14:17:6d:4c
-----BEGIN CERTIFICATE-----
MIIFxDCCBKygAwIBAgISAYzKJmHMhLbf+x3mD26nLY0EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTIyOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MmM3MWMyMDc4YTkxZTc2YzBlNWE2ZDMwMDk2ODcyYzkyMmM5Y2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNvwiitziZmquiVOACBsDkzJ/kLD
Za+QLIxB84aVfEAhgH0k0/Tz4Y5L8uMsomYE9xNCH7LLcvGEL0ac7YrbdgS7LsRJ
oZBoJ2Z/0HPjCADLE9c+Zt+i6/7ZFw1PI+ZirOtSh0Kx8GKdF9dU85kGWDtl6ldQ
+GVghiZOLxfYK2afzeptiexar4mITG9DPAlmHjo41gJ6qmCnSuOPUezFN1XIiAGl
kWgvd6tl8EdJLen7GSW4MqarBRrsdGEAIWNv9iFAY7BADMkXpwzDcza8Kws/e7xv
Lt6J+qxZGUZOnS1lSkbnrOKgZuRl7aEQpaHfIwLu1R2o43fYIqHXRNOD3wIDAQAB
o4IC0DCCAswwHQYDVR0OBBYEFJLHHCB4qR52wOWm0wCWhyySLJzcMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNiL2MxNzIz
Ny1hMTM0LTRiMTEtYWIxMi05ZmI2YjYwYmQ2OWEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2IvYzE3MjM3
LWExMzQtNGIxMS1hYjEyLTlmYjZiNjBiZDY5YS8xL2tzY2NJSGlwSG5iQTVhYlRB
SmFITEpJc25Ody5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGsGCCsGAQUF
BwEHAQH/BFwwWjBCBAIAATA8AwQCLYMcAwQCXp78AwQCuSwYAwQCuV98AwQCuWjs
AwQCuY+IAwQCubZ8AwQCubgAAwQCudAUAwQCudUwMBQEAgACMA4DBQMqBJkAAwUD
Kgc1gDANBgkqhkiG9w0BAQsFAAOCAQEAgmEubdmGtKfJBSNLbgcX4SpDtnjlfgIV
k25/z6IeLF1zxpG3JWKKCt+yf1jBqouMkye3rb9lFR5xe2ZacVWxnq33CTGNBHTl
+G4MmOkgbnWuyfe6nFXy5+fWB4HfR0uZbq0JbgY6Bo0BWVmhqFR45Pm71RqO76M5
KvU5sDykrp8y0QZoLUv4ZFDbGuJ8VvEQa1CAjfF3AHGxgvY39ba+BLU2otCXq11l
ddQ4PTaneklbT9lfSP55mO8zXQNBLS+frA3Jt4P6gsb92wWLMIOyADtFKyM7c4fR
bjyzbPFYphoPOqFBhLMzBkPPjMlHU+YmPkvc5x+QiP3thIdFFBdtTA==
-----END CERTIFICATE-----
Generated at Fri May 3 07:27:37 2024 by rpki-client on console-ams.rpki-client.org