Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.cer
File: lRu0kOCd8UZ-TuxD2PIEhM7oOf4.cer (raw, json)
Hash identifier: WoJwymLc83BlCKO3RRVlsBBKesrQsqhcvAUgn8PjAKU=
Subject key identifier: 95:1B:B4:90:E0:9D:F1:46:7E:4E:EC:43:D8:F2:04:84:CE:E8:39:FE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC72570AFB235CE52AABBC780A49FEE5F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:29:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 21451
IP: 194.149.244.0/24
IP: 213.218.32.0/19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:70:af:b2:35:ce:52:aa:bb:c7:80:a4:9f:ee:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=951bb490e09df1467e4eec43d8f20484cee839fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:09:92:47:28:ae:04:51:dd:08:70:27:11:2d:
83:05:7b:73:0a:c8:32:6d:0f:62:5e:46:76:b0:44:
2f:be:bb:d7:58:4f:62:56:fa:2e:ee:6b:52:f1:79:
9c:c5:f5:9b:88:cc:a2:11:9a:a5:30:c0:14:34:c3:
f9:6b:06:e3:c0:d5:a8:07:b5:31:e4:3a:48:b8:df:
3b:64:21:2d:a4:67:77:b0:1d:84:b2:bd:d6:d8:a5:
1a:c1:83:05:ff:ad:55:38:3c:fb:d2:4a:2e:19:02:
71:b8:d2:cd:02:11:e1:e7:96:ab:5a:71:34:af:e8:
97:f0:74:0f:12:7b:fc:94:7c:36:1d:c5:27:e1:63:
b0:2d:cf:0e:e5:1e:2d:86:7d:7f:b4:1d:28:42:fa:
6f:94:d0:9c:ec:ef:f5:d3:db:6f:fc:b0:24:e7:c3:
4b:a0:51:01:2d:d1:fe:1e:3d:ff:00:02:a8:cd:64:
de:e0:11:18:66:5f:0b:a1:99:f8:3e:59:56:3e:12:
d1:58:b1:40:0f:72:88:24:e9:a0:c8:6d:62:47:8b:
c0:a0:54:57:15:2f:d6:fc:c4:a2:87:e1:27:05:e4:
6f:9a:7a:cb:90:3b:2a:a8:88:3a:d7:b6:a3:f8:bf:
0d:26:09:b4:d4:9d:54:25:0b:ff:17:ce:00:82:1f:
84:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:1B:B4:90:E0:9D:F1:46:7E:4E:EC:43:D8:F2:04:84:CE:E8:39:FE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.149.244.0/24
213.218.32.0/19
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21451
Signature Algorithm: sha256WithRSAEncryption
41:c4:76:e1:99:39:b0:85:dd:aa:7e:d7:06:e7:b5:40:89:25:
fc:5a:99:46:71:a3:1a:e1:01:11:a7:2c:02:90:43:ce:1c:08:
2f:0a:e6:ad:86:1b:69:cd:d6:34:28:79:04:bd:0a:37:31:33:
39:57:7f:91:9d:06:1a:4e:99:aa:4f:92:b2:72:9e:97:fb:b2:
19:00:a3:3a:cf:13:30:93:82:e7:af:fe:e1:bd:87:a0:dc:63:
5d:34:c4:be:b7:e6:05:76:23:a8:03:1f:96:43:29:4b:72:74:
07:f4:c0:71:a5:a8:53:77:08:90:84:04:e5:cf:3a:45:29:18:
fe:87:60:11:f3:c7:6d:38:12:bc:37:ac:41:62:b6:de:c6:bf:
09:a2:dd:0f:79:8d:a3:e9:01:20:3b:19:56:60:21:eb:06:0e:
8e:d5:0e:35:6a:81:59:23:aa:c4:ef:4a:4d:70:6f:7e:d0:a4:
75:35:61:69:2a:2b:36:d6:13:60:5c:b5:fb:53:42:8d:d3:14:
cd:78:bd:82:52:08:81:ef:05:ce:fe:81:46:b2:60:79:a2:2f:
80:48:9e:35:fc:71:c4:12:d8:9f:c3:f4:3d:3c:15:76:b6:58:
b3:88:4e:1a:5f:49:b4:60:3e:f4:f3:b9:29:3d:eb:09:af:1f:
d3:ba:b0:5d
-----BEGIN CERTIFICATE-----
MIIFmTCCBIGgAwIBAgISAYzHJXCvsjXOUqq7x4Ckn+5fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMjIyOTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTFiYjQ5MGUwOWRmMTQ2N2U0ZWVjNDNkOGYyMDQ4NGNlZTgzOWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQmSRyiuBFHdCHAnES2DBXtzCsgy
bQ9iXkZ2sEQvvrvXWE9iVvou7mtS8XmcxfWbiMyiEZqlMMAUNMP5awbjwNWoB7Ux
5DpIuN87ZCEtpGd3sB2Esr3W2KUawYMF/61VODz70kouGQJxuNLNAhHh55arWnE0
r+iX8HQPEnv8lHw2HcUn4WOwLc8O5R4thn1/tB0oQvpvlNCc7O/109tv/LAk58NL
oFEBLdH+Hj3/AAKozWTe4BEYZl8LoZn4PllWPhLRWLFAD3KIJOmgyG1iR4vAoFRX
FS/W/MSih+EnBeRvmnrLkDsqqIg617aj+L8NJgm01J1UJQv/F84Agh+EgQIDAQAB
o4ICpTCCAqEwHQYDVR0OBBYEFJUbtJDgnfFGfk7sQ9jyBITO6Dn+MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA5L2VhNmY2
MS1hOWQyLTRjNmItYjcxNy0xZGI0ZWQxMzFiYzMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkvZWE2ZjYx
LWE5ZDItNGM2Yi1iNzE3LTFkYjRlZDEzMWJjMy8xL2xSdTBrT0NkOFVaLVR1eEQy
UElFaE03b09mNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQAwpX0AwQF1dogMBkGCCsGAQUFBwEIAQH/BAow
CKAGMAQCAlPLMA0GCSqGSIb3DQEBCwUAA4IBAQBBxHbhmTmwhd2qftcG57VAiSX8
WplGcaMa4QERpywCkEPOHAgvCuathhtpzdY0KHkEvQo3MTM5V3+RnQYaTpmqT5Ky
cp6X+7IZAKM6zxMwk4Lnr/7hvYeg3GNdNMS+t+YFdiOoAx+WQylLcnQH9MBxpahT
dwiQhATlzzpFKRj+h2AR88dtOBK8N6xBYrbexr8Jot0PeY2j6QEgOxlWYCHrBg6O
1Q41aoFZI6rE70pNcG9+0KR1NWFpKis21hNgXLX7U0KN0xTNeL2CUgiB7wXO/oFG
smB5oi+ASJ41/HHEEtifw/Q9PBV2tliziE4aX0m0YD7087kpPesJrx/TurBd
-----END CERTIFICATE-----
Generated at Fri May 3 08:15:09 2024 by rpki-client on console-fra.rpki-client.org