Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mH3M9QaIKTKc2sUdXRkP4Qic3p4.cer
File: mH3M9QaIKTKc2sUdXRkP4Qic3p4.cer (raw, json)
Hash identifier: FcavTvrSK8EWlKHqfTYpVcFcLWXA7xXqAMX0ntffZrI=
Subject key identifier: 98:7D:CC:F5:06:88:29:32:9C:DA:C5:1D:5D:19:0F:E1:08:9C:DE:9E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BC33B57E9911BCF8B64A83F591D336
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 60789
IP: 185.26.36.0/22
IP: 2a00:8460::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:33:b5:7e:99:11:bc:f8:b6:4a:83:f5:91:d3:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=987dccf5068829329cdac51d5d190fe1089cde9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:28:62:c0:b0:85:62:1d:9a:a2:0c:d7:2b:f3:
36:20:c7:7d:c0:fb:62:9f:c2:57:4d:fe:97:27:c8:
e2:2e:20:9a:ee:b3:85:de:a2:e0:c7:3b:4a:c9:a4:
d9:24:8b:f2:89:d7:b4:5d:fb:3e:c1:51:60:31:4b:
a6:ed:fc:42:ac:62:d1:44:d4:7f:f0:cc:4d:51:1e:
5a:ef:58:c7:44:8b:d0:38:30:2a:e3:c5:cc:43:16:
4f:3d:82:39:06:6c:31:5d:38:fc:e3:e7:10:6f:25:
16:70:3a:44:f1:1e:16:ef:c3:c5:ac:3a:0d:23:89:
1f:ef:7b:44:31:c8:60:5c:0c:ed:42:1f:9d:d6:ff:
dd:0f:b2:12:93:30:8e:9d:67:3e:c3:09:58:eb:0c:
a9:1e:63:9d:a5:55:13:f2:93:d4:21:6a:a2:af:93:
df:84:a4:65:64:06:25:20:94:5d:5f:4d:05:fb:11:
f9:04:61:79:25:0b:00:13:b2:f9:e1:ac:dd:a5:43:
2a:b4:8e:e2:2a:e0:33:79:d9:a1:8e:8a:e9:ff:ba:
c5:73:d5:56:d3:b8:0c:3d:39:f2:bd:bf:84:be:48:
a2:75:26:05:69:e4:2d:26:ee:21:66:0a:b2:a9:2f:
f1:87:76:04:64:75:c1:16:3f:68:c3:df:81:8b:02:
86:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7D:CC:F5:06:88:29:32:9C:DA:C5:1D:5D:19:0F:E1:08:9C:DE:9E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.26.36.0/22
IPv6:
2a00:8460::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60789
Signature Algorithm: sha256WithRSAEncryption
48:28:e3:8f:fe:0a:96:d2:62:16:9d:b2:fb:bb:4e:37:79:9f:
49:fe:a1:e1:0d:de:9b:57:47:84:f2:48:55:18:12:8f:c5:45:
1a:12:e8:b4:e1:87:9d:8b:50:b5:c4:67:c1:d8:83:68:48:1a:
4c:99:ab:38:d2:3a:cf:6b:39:41:e9:4d:eb:c4:11:e6:f9:ff:
13:92:f1:b4:67:0a:f2:57:7a:70:a6:06:14:6b:6e:fd:5e:5e:
d1:96:73:10:3b:26:dc:3b:e6:b6:2e:c3:b5:f9:a4:be:28:a2:
90:17:ce:06:f0:6a:8f:d7:21:b9:5f:86:f2:ae:54:eb:39:40:
08:54:95:9d:13:e9:8a:f3:10:61:05:fe:32:15:c3:4d:77:ea:
55:da:cf:84:4a:5d:c7:86:7b:33:f4:cc:d4:a9:ed:db:d1:ec:
ea:80:b0:0b:65:34:90:bc:af:53:35:54:70:50:44:e1:51:48:
45:ce:c0:d6:95:24:40:f7:7c:7b:68:8c:96:18:8e:7d:e3:87:
23:0c:0b:5a:cb:95:2f:83:76:c6:6a:71:3a:71:f1:77:37:79:
7e:05:60:ff:a0:0f:eb:7a:a4:2a:30:cc:21:3d:6f:66:7d:8b:
1a:2a:12:3e:89:ab:d4:51:a3:ab:06:77:88:ba:82:87:e9:7e:
64:88:a2:71
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzJvDO1fpkRvPi2SoP1kdM2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTAzMzIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODdkY2NmNTA2ODgyOTMyOWNkYWM1MWQ1ZDE5MGZlMTA4OWNkZTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArShiwLCFYh2aogzXK/M2IMd9wPti
n8JXTf6XJ8jiLiCa7rOF3qLgxztKyaTZJIvyide0Xfs+wVFgMUum7fxCrGLRRNR/
8MxNUR5a71jHRIvQODAq48XMQxZPPYI5BmwxXTj84+cQbyUWcDpE8R4W78PFrDoN
I4kf73tEMchgXAztQh+d1v/dD7ISkzCOnWc+wwlY6wypHmOdpVUT8pPUIWqir5Pf
hKRlZAYlIJRdX00F+xH5BGF5JQsAE7L54azdpUMqtI7iKuAzedmhjorp/7rFc9VW
07gMPTnyvb+EvkiidSYFaeQtJu4hZgqyqS/xh3YEZHXBFj9ow9+BiwKGGwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFJh9zPUGiCkynNrFHV0ZD+EInN6eMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZlLzMzZTUz
ZC1iY2VlLTQyM2ItYWE4NC0xMzViYWIwOTA5NDAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmUvMzNlNTNk
LWJjZWUtNDIzYi1hYTg0LTEzNWJhYjA5MDk0MC8xL21IM005UWFJS1RLYzJzVWRY
UmtQNFFpYzNwNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuRokMA0EAgACMAcDBQAqAIRgMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDtdTANBgkqhkiG9w0BAQsFAAOCAQEASCjjj/4KltJi
Fp2y+7tON3mfSf6h4Q3em1dHhPJIVRgSj8VFGhLotOGHnYtQtcRnwdiDaEgaTJmr
ONI6z2s5QelN68QR5vn/E5LxtGcK8ld6cKYGFGtu/V5e0ZZzEDsm3Dvmti7Dtfmk
viiikBfOBvBqj9chuV+G8q5U6zlACFSVnRPpivMQYQX+MhXDTXfqVdrPhEpdx4Z7
M/TM1Knt29Hs6oCwC2U0kLyvUzVUcFBE4VFIRc7A1pUkQPd8e2iMlhiOfeOHIwwL
WsuVL4N2xmpxOnHxdzd5fgVg/6AP63qkKjDMIT1vZn2LGioSPomr1FGjqwZ3iLqC
h+l+ZIiicQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 19:25:31 2024 by rpki-client on console-fra.rpki-client.org