Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer
File: nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer (raw, json)
Hash identifier: eA4fDQYhgbx50LX5gbhS4z6wVjfzShMzWDHnUOywwcU=
Subject key identifier: 9D:23:C3:30:EB:E8:53:E1:25:B0:C1:AD:2B:16:D7:9D:25:E4:F3:F8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4922875A0814A5955543831499BA942
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:29:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 3331
IP: 185.106.164.0/22
IP: 2a04:ea40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:28:75:a0:81:4a:59:55:54:38:31:49:9b:a9:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9d23c330ebe853e125b0c1ad2b16d79d25e4f3f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:29:34:da:1e:7b:bc:1e:02:a0:12:b9:3a:9d:
8b:b0:4b:f9:12:4b:28:70:eb:d4:79:d9:1c:e7:50:
3a:c1:27:3a:6b:db:ce:ae:00:6a:66:96:53:e9:96:
2c:65:5c:e8:5f:c9:89:e2:5f:6f:2e:e7:99:72:44:
24:24:ff:e1:c0:fc:94:eb:5d:8c:e5:2b:d0:9c:74:
d3:db:36:af:54:a3:9b:ac:43:48:7f:ac:6e:31:d9:
ec:be:e1:aa:3e:6f:c3:dd:1b:eb:5b:cd:02:74:61:
39:f6:b5:55:90:b9:e3:e2:c6:23:4f:95:30:da:f9:
b5:1c:46:93:d9:d4:95:6b:90:72:44:8a:20:70:08:
fe:d8:a7:a3:ab:5c:31:13:c3:b1:75:2a:92:f7:d1:
d2:f5:71:4c:c8:d0:c0:62:1c:53:46:5a:ab:a7:d9:
5f:c3:a7:ec:18:fa:94:3c:7a:d4:18:03:7a:20:99:
63:ac:63:0a:e4:b4:c0:c7:dc:b3:2f:0a:45:55:cb:
e8:b7:78:24:51:90:0e:66:7b:f2:39:2c:19:9d:ab:
ac:a9:c9:5c:9e:7f:95:71:a4:46:81:72:ef:cb:84:
a0:fc:35:62:f9:d2:41:8f:bc:06:47:77:5d:94:5f:
be:d3:1b:68:d4:6e:70:ba:a1:13:e8:9a:95:57:95:
10:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:23:C3:30:EB:E8:53:E1:25:B0:C1:AD:2B:16:D7:9D:25:E4:F3:F8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.164.0/22
IPv6:
2a04:ea40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
3331
Signature Algorithm: sha256WithRSAEncryption
0b:8e:29:86:4c:ca:e3:10:6a:79:1c:68:9b:0b:32:98:77:68:
e5:0d:eb:75:58:4e:6f:cc:a0:7a:4c:44:bd:60:6b:e5:fe:67:
1d:78:60:35:1f:e1:5f:16:28:da:05:90:16:f8:99:1d:30:75:
92:cb:57:8c:31:bd:f8:b6:c9:02:bd:aa:72:b3:d1:3b:1d:fe:
7e:a4:cd:74:c3:5a:cd:99:24:97:6c:97:cd:c8:4e:72:25:1e:
9b:78:fb:6e:ee:2d:15:83:8b:32:12:e1:73:94:ad:8e:39:b6:
a6:2d:f8:57:1f:72:bc:84:f7:de:9c:df:08:39:7d:29:33:76:
d4:0b:e6:b7:8a:e4:6c:b3:56:fb:55:89:72:8a:97:2f:cd:64:
63:07:c0:9e:45:85:3d:2e:cf:73:7a:28:74:6b:41:99:56:5d:
dd:15:56:8a:a1:c9:c3:27:e2:2f:3c:fe:cc:e3:9a:86:65:0c:
9d:05:73:c3:cc:43:77:bf:71:9d:81:51:38:f3:fe:43:55:17:
7e:db:72:6a:8f:cb:cb:f8:22:21:c6:71:e0:2a:b2:cb:14:c6:
02:a0:98:40:78:02:a0:cb:3e:18:af:59:30:35:3f:be:17:81:
81:bf:5c:5b:b8:4c:b6:25:aa:0b:a2:85:83:ec:eb:3d:c4:6e:
7a:75:f6:38
-----BEGIN CERTIFICATE-----
MIIFojCCBIqgAwIBAgISAYzEkih1oIFKWVVUODFJm6lCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTAyOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDIzYzMzMGViZTg1M2UxMjViMGMxYWQyYjE2ZDc5ZDI1ZTRmM2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ik02h57vB4CoBK5Op2LsEv5Ekso
cOvUedkc51A6wSc6a9vOrgBqZpZT6ZYsZVzoX8mJ4l9vLueZckQkJP/hwPyU612M
5SvQnHTT2zavVKObrENIf6xuMdnsvuGqPm/D3RvrW80CdGE59rVVkLnj4sYjT5Uw
2vm1HEaT2dSVa5ByRIogcAj+2Kejq1wxE8OxdSqS99HS9XFMyNDAYhxTRlqrp9lf
w6fsGPqUPHrUGAN6IJljrGMK5LTAx9yzLwpFVcvot3gkUZAOZnvyOSwZnausqclc
nn+VcaRGgXLvy4Sg/DVi+dJBj7wGR3ddlF++0xto1G5wuqET6JqVV5UQUwIDAQAB
o4ICrjCCAqowHQYDVR0OBBYEFJ0jwzDr6FPhJbDBrSsW150l5PP4MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NhLzBhOTRl
NC0wMDFjLTRkMTUtOTFlOS00N2E0MTI4MTVmYjQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2EvMGE5NGU0
LTAwMWMtNGQxNS05MWU5LTQ3YTQxMjgxNWZiNC8xL25TUERNT3ZvVS1FbHNNR3RL
eGJYblNYazhfZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuWqkMA0EAgACMAcDBQMqBOpAMBkGCCsGAQUF
BwEIAQH/BAowCKAGMAQCAg0DMA0GCSqGSIb3DQEBCwUAA4IBAQALjimGTMrjEGp5
HGibCzKYd2jlDet1WE5vzKB6TES9YGvl/mcdeGA1H+FfFijaBZAW+JkdMHWSy1eM
Mb34tskCvapys9E7Hf5+pM10w1rNmSSXbJfNyE5yJR6bePtu7i0Vg4syEuFzlK2O
ObamLfhXH3K8hPfenN8IOX0pM3bUC+a3iuRss1b7VYlyipcvzWRjB8CeRYU9Ls9z
eih0a0GZVl3dFVaKocnDJ+IvPP7M45qGZQydBXPDzEN3v3GdgVE48/5DVRd+23Jq
j8vL+CIhxnHgKrLLFMYCoJhAeAKgyz4Yr1kwNT++F4GBv1xbuEy2JaoLooWD7Os9
xG56dfY4
-----END CERTIFICATE-----
Generated at Fri May 3 10:57:34 2024 by rpki-client on console-fra.rpki-client.org