Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
File: lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer (raw, json)
Hash identifier: 7fSQWMBMfs5VvUhYGhn805hTtUUwOLK3oDVZBpE5WE4=
Subject key identifier: 94:8D:45:CF:E3:48:2B:8F:61:DA:E0:00:B0:07:A4:67:EC:DD:4E:E6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DFA79CFA46A118396C217A2B4648D7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:32:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212745
IP: 45.81.228.0/22
IP: 2a0e:6080::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:a7:9c:fa:46:a1:18:39:6c:21:7a:2b:46:48:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:32:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=948d45cfe3482b8f61dae000b007a467ecdd4ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a0:e7:31:83:f1:fd:f3:dc:e3:9a:2b:c4:32:
f0:9f:3d:9a:78:3b:3c:17:1f:34:a2:d0:73:af:d2:
ff:3e:93:74:34:39:c1:80:8b:96:e9:57:90:28:7b:
22:50:15:5b:52:8c:f0:b9:8e:71:d4:5f:69:e4:65:
f7:b8:58:df:d9:c9:d5:d9:0e:16:a5:2f:ea:9b:b2:
25:1b:41:5b:98:74:3d:c4:fc:56:05:93:3d:33:ac:
b6:3f:37:d0:d5:48:8a:d7:e9:f2:d2:94:74:74:ff:
c1:e6:36:3f:92:eb:c9:06:7a:98:5b:7d:7b:cc:d9:
13:9a:26:bf:22:7e:75:d3:24:0d:3e:22:4b:f6:90:
a5:57:04:ca:73:36:e0:92:24:c3:37:f4:1e:03:08:
91:7c:ca:30:67:14:11:49:5b:ed:d4:06:33:dd:a1:
47:34:6d:36:90:96:a8:e5:d6:e5:39:0f:54:44:0a:
c2:da:cb:88:62:fa:ed:9e:5c:4e:a2:b5:32:87:73:
e4:7e:65:1b:bf:b1:27:9c:15:6b:ea:38:15:83:93:
7a:4a:89:72:17:ca:d0:3a:f3:e2:ad:81:53:8f:7a:
3d:5d:42:cc:9a:e4:b9:a8:a1:a1:0a:5d:a5:96:96:
e6:e6:c6:55:c3:47:71:21:dc:a7:9b:3d:f3:64:a0:
8b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8D:45:CF:E3:48:2B:8F:61:DA:E0:00:B0:07:A4:67:EC:DD:4E:E6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.228.0/22
IPv6:
2a0e:6080::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212745
Signature Algorithm: sha256WithRSAEncryption
00:12:a9:70:6b:43:47:cb:d9:96:c2:1c:16:36:c4:d6:a3:7e:
ff:d5:3c:87:35:31:6a:27:0e:1c:f4:bc:17:98:46:9d:d0:db:
42:3c:bb:9d:e9:cc:d1:b8:43:7f:38:c6:2d:77:33:f9:71:e6:
ea:25:f4:6a:d9:21:8c:05:2c:b1:f4:e6:34:3b:97:73:59:1c:
7b:f4:65:ed:74:5f:cb:02:61:09:00:2c:6a:db:05:3c:2f:e4:
75:1c:96:7d:6b:73:46:93:3d:7e:45:60:f9:c0:81:7e:f4:a7:
9c:52:50:ac:54:74:8a:b5:2e:c7:6a:86:5b:fc:bf:df:7a:10:
8b:c1:8c:ec:13:2d:75:b7:21:5e:67:59:e5:84:7f:9b:ae:45:
af:aa:55:aa:44:cc:63:ea:65:60:ee:9a:82:4e:e1:ba:8f:02:
64:cc:31:8c:7e:dd:c3:fc:2d:fb:1c:d1:70:41:60:74:11:33:
39:2a:02:6d:88:d8:70:45:e3:15:03:a7:14:01:5c:d6:9b:94:
10:8e:7f:60:bd:b4:fb:f1:7a:1c:19:cd:00:4c:95:b9:f6:4a:
27:88:e4:4b:1e:08:3d:b5:2c:67:e6:4b:df:a0:16:7a:7c:76:
62:49:dd:01:07:f1:05:a8:8d:e7:12:01:7d:31:48:7d:e1:19:
64:76:01:34
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzI36ec+kahGDlsIXorRkjXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDYzMjI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDhkNDVjZmUzNDgyYjhmNjFkYWUwMDBiMDA3YTQ2N2VjZGQ0ZWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqDnMYPx/fPc45orxDLwnz2aeDs8
Fx80otBzr9L/PpN0NDnBgIuW6VeQKHsiUBVbUozwuY5x1F9p5GX3uFjf2cnV2Q4W
pS/qm7IlG0FbmHQ9xPxWBZM9M6y2PzfQ1UiK1+ny0pR0dP/B5jY/kuvJBnqYW317
zNkTmia/In510yQNPiJL9pClVwTKczbgkiTDN/QeAwiRfMowZxQRSVvt1AYz3aFH
NG02kJao5dblOQ9URArC2suIYvrtnlxOorUyh3PkfmUbv7EnnBVr6jgVg5N6Soly
F8rQOvPirYFTj3o9XULMmuS5qKGhCl2llpbm5sZVw0dxIdynmz3zZKCLDwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFJSNRc/jSCuPYdrgALAHpGfs3U7mMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRhL2Y4OWIy
ZS01M2EzLTQxNTctYTk2MC00MmRhZmI0YjUxZDIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEvZjg5YjJl
LTUzYTMtNDE1Ny1hOTYwLTQyZGFmYjRiNTFkMi8xL2xJMUZ6LU5JSzQ5aDJ1QUFz
QWVrWi16ZFR1WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCLVHkMA0EAgACMAcDBQMqDmCAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM/CTANBgkqhkiG9w0BAQsFAAOCAQEAABKpcGtDR8vZ
lsIcFjbE1qN+/9U8hzUxaicOHPS8F5hGndDbQjy7nenM0bhDfzjGLXcz+XHm6iX0
atkhjAUssfTmNDuXc1kce/Rl7XRfywJhCQAsatsFPC/kdRyWfWtzRpM9fkVg+cCB
fvSnnFJQrFR0irUux2qGW/y/33oQi8GM7BMtdbchXmdZ5YR/m65Fr6pVqkTMY+pl
YO6agk7huo8CZMwxjH7dw/wt+xzRcEFgdBEzOSoCbYjYcEXjFQOnFAFc1puUEI5/
YL20+/F6HBnNAEyVufZKJ4jkSx4IPbUsZ+ZL36AWenx2YkndAQfxBaiN5xIBfTFI
feEZZHYBNA==
-----END CERTIFICATE-----
Generated at Fri May 3 10:55:45 2024 by rpki-client on console-fra.rpki-client.org