Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o8cchkWd50u9NaPMv9iuXZy00tg.cer
File: o8cchkWd50u9NaPMv9iuXZy00tg.cer (raw, json)
Hash identifier: 2THOL1bSFgT7Q0QfTxYG2ehjckx7qENj3zSdDnNRkn0=
Subject key identifier: A3:C7:1C:86:45:9D:E7:4B:BD:35:A3:CC:BF:D8:AE:5D:9C:B4:D2:D8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B6CE60C00B8FA839D5FD65721D2D00
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:46 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211080
IP: 185.182.158.0/24
IP: 2a10:ff40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:ce:60:c0:0b:8f:a8:39:d5:fd:65:72:1d:2d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a3c71c86459de74bbd35a3ccbfd8ae5d9cb4d2d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:be:03:a0:b7:d5:0f:e1:f2:24:e7:0f:30:e6:
cd:7d:a4:7f:a9:9f:f0:96:d8:b7:41:f7:aa:f9:3f:
5f:4c:5d:2f:bc:2e:44:d4:87:36:69:fe:ed:87:ed:
88:82:61:88:d5:b5:a8:92:6d:41:bf:ff:66:9d:fc:
f3:b1:5d:4e:c4:32:c0:7c:fa:76:60:ab:09:a6:43:
c0:21:d5:aa:3b:3a:38:89:79:27:f7:ea:f8:3f:20:
3b:4d:46:fd:09:59:8f:9d:c8:cb:6c:db:a1:a1:95:
c8:52:7d:96:9f:78:f4:f8:71:e9:fc:19:6b:46:09:
1d:2d:bb:6f:fb:f3:f6:23:1e:99:7f:ef:03:89:c9:
75:08:78:f9:be:f0:e5:db:2d:3a:9e:65:17:dc:45:
e1:fd:2a:43:17:3f:39:7d:c7:b3:34:72:b7:df:b9:
ad:d4:cd:88:49:8c:d1:ac:87:52:53:70:85:cf:10:
27:ae:02:dc:69:d1:8f:b7:ce:b1:c0:f3:7d:76:35:
d9:c2:a2:dd:63:db:63:94:97:ce:40:a9:8a:0d:2b:
7f:29:aa:f8:83:39:43:e1:34:b8:e5:d6:74:c5:60:
ee:45:8f:34:c5:a9:f8:02:2e:3e:00:b9:91:cf:1f:
0b:01:a0:d5:7b:4f:a2:f0:0d:5c:37:92:26:8f:07:
63:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C7:1C:86:45:9D:E7:4B:BD:35:A3:CC:BF:D8:AE:5D:9C:B4:D2:D8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.158.0/24
IPv6:
2a10:ff40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211080
Signature Algorithm: sha256WithRSAEncryption
8a:67:30:a8:53:48:78:69:fb:c2:90:be:a6:3d:0b:cd:af:03:
30:85:11:16:d2:e7:b3:d4:80:b1:53:5e:8d:90:77:d7:f1:d5:
d2:71:fd:f0:df:cf:b1:20:8a:c8:af:e6:85:68:ab:52:e1:11:
f5:ba:cf:96:0a:8e:3f:13:52:ff:ad:a0:24:c0:5a:ef:48:78:
06:c4:80:e9:fd:89:ee:47:73:fb:40:32:bd:9d:d7:3b:a0:69:
8e:01:30:f0:ba:05:3c:fb:61:a4:18:af:36:3f:52:8c:29:a9:
c5:a3:65:58:a0:4c:f1:20:b8:00:83:d1:10:b1:16:ea:32:16:
82:3c:e4:1c:db:26:2c:3d:7c:cc:2c:ac:23:b5:73:f2:c2:c2:
c7:ff:66:8f:5a:f6:46:63:80:b6:72:17:6f:f1:50:d3:6c:09:
07:5b:8b:e0:b3:47:fc:57:d5:c4:ad:22:72:3d:c9:87:07:6f:
3a:ae:c3:e1:aa:03:f8:e3:c9:24:d2:2d:61:cb:69:b3:7b:c6:
9c:08:76:55:5b:ef:ce:cb:59:92:b6:f7:1c:2a:5d:2a:46:5e:
ec:4f:d1:4f:16:f6:b6:c4:5c:b1:15:35:ac:ee:67:62:b4:92:
c4:92:34:bb:e4:86:ac:f9:a8:e3:16:c3:7a:f6:b8:1f:85:0c:
1d:0e:fc:fd
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzDts5gwAuPqDnV/WVyHS0AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDYyOTQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhM2M3MWM4NjQ1OWRlNzRiYmQzNWEzY2NiZmQ4YWU1ZDljYjRkMmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb4DoLfVD+HyJOcPMObNfaR/qZ/w
lti3Qfeq+T9fTF0vvC5E1Ic2af7th+2IgmGI1bWokm1Bv/9mnfzzsV1OxDLAfPp2
YKsJpkPAIdWqOzo4iXkn9+r4PyA7TUb9CVmPncjLbNuhoZXIUn2Wn3j0+HHp/Blr
RgkdLbtv+/P2Ix6Zf+8Dicl1CHj5vvDl2y06nmUX3EXh/SpDFz85fcezNHK337mt
1M2ISYzRrIdSU3CFzxAnrgLcadGPt86xwPN9djXZwqLdY9tjlJfOQKmKDSt/Kar4
gzlD4TS45dZ0xWDuRY80xan4Ai4+ALmRzx8LAaDVe0+i8A1cN5Imjwdj1QIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFKPHHIZFnedLvTWjzL/Yrl2ctNLYMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdjL2NjOGU3
YS1lNDEzLTQzZmYtYWE1OS0wOTE0YWQyNGEzZTQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2MvY2M4ZTdh
LWU0MTMtNDNmZi1hYTU5LTA5MTRhZDI0YTNlNC8xL284Y2Noa1dkNTB1OU5hUE12
OWl1WFp5MDB0Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAubaeMA0EAgACMAcDBQMqEP9AMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM4iDANBgkqhkiG9w0BAQsFAAOCAQEAimcwqFNIeGn7
wpC+pj0Lza8DMIURFtLns9SAsVNejZB31/HV0nH98N/PsSCKyK/mhWirUuER9brP
lgqOPxNS/62gJMBa70h4BsSA6f2J7kdz+0AyvZ3XO6BpjgEw8LoFPPthpBivNj9S
jCmpxaNlWKBM8SC4AIPRELEW6jIWgjzkHNsmLD18zCysI7Vz8sLCx/9mj1r2RmOA
tnIXb/FQ02wJB1uL4LNH/FfVxK0icj3JhwdvOq7D4aoD+OPJJNItYctps3vGnAh2
VVvvzstZkrb3HCpdKkZe7E/RTxb2tsRcsRU1rO5nYrSSxJI0u+SGrPmo4xbDeva4
H4UMHQ78/Q==
-----END CERTIFICATE-----
Generated at Fri May 3 10:58:17 2024 by rpki-client on console-fra.rpki-client.org