Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pal1I5_dRDt9PYLjkqnkrjkhjvY.cer
File: pal1I5_dRDt9PYLjkqnkrjkhjvY.cer (raw, json)
Hash identifier: hFTiOB8KQVbR9xAnFYUBQd9udX2HS4Pyh7LGUVOeH4Q=
Subject key identifier: A5:A9:75:23:9F:DD:44:3B:7D:3D:82:E3:92:A9:E4:AE:39:21:8E:F6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64A77CD38E8D7337F841FEB632073EA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/f2700b-9853-4172-9a61-a691448b2ec4/1/pal1I5_dRDt9PYLjkqnkrjkhjvY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/f2700b-9853-4172-9a61-a691448b2ec4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:30:18 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.36.64.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:77:cd:38:e8:d7:33:7f:84:1f:eb:63:20:73:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5a975239fdd443b7d3d82e392a9e4ae39218ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0f:23:8a:69:48:bf:72:f5:7a:d4:84:98:c6:
59:6f:68:39:e1:ad:15:72:15:b3:71:4d:3a:77:cf:
46:71:9c:5f:9f:16:b7:a3:82:74:97:42:7d:83:93:
2c:4d:25:b5:6c:cd:fa:77:34:bc:28:74:cc:c1:5c:
17:57:97:82:49:38:1b:d3:d4:2e:cc:9a:ab:54:ca:
ab:fd:79:0e:1f:ff:3c:63:7e:cf:9c:03:10:66:87:
8f:09:6c:8d:40:a5:b9:65:b0:68:0e:de:ff:21:ee:
d2:34:81:47:e1:9b:13:aa:34:99:5a:77:1a:1f:53:
b3:e9:b3:bb:5d:57:5e:3d:70:25:9a:d0:99:93:5f:
42:43:b7:9b:9d:0e:7c:bd:30:64:73:fc:9e:b2:1b:
05:37:f2:38:63:a4:f7:0e:4e:23:24:ff:c8:d0:45:
7d:4f:cd:d7:ff:a6:dc:22:90:57:74:71:1c:db:11:
92:f5:02:d9:c2:be:48:e2:59:d8:99:04:c3:22:7d:
f8:86:0d:e5:22:64:9a:db:f2:1d:2a:4a:86:cf:f8:
14:ed:77:b4:9d:f5:9d:14:01:fa:f3:bf:d4:29:00:
a1:31:24:e8:2a:05:09:a3:2a:d5:2c:7e:7c:3d:ba:
3f:10:2c:ee:e4:76:e9:7f:fd:d4:e8:8d:a1:d9:d7:
06:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A9:75:23:9F:DD:44:3B:7D:3D:82:E3:92:A9:E4:AE:39:21:8E:F6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f2700b-9853-4172-9a61-a691448b2ec4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f2700b-9853-4172-9a61-a691448b2ec4/1/pal1I5_dRDt9PYLjkqnkrjkhjvY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.64.0/21
Signature Algorithm: sha256WithRSAEncryption
7a:95:73:4d:9b:44:87:94:1d:05:8d:64:65:9f:0d:b0:4c:8a:
f5:1e:52:6b:6a:13:c3:29:b6:b0:ba:7c:2f:ab:64:3e:c3:2c:
cf:89:d7:6c:9b:ec:e2:94:c3:58:9c:d0:89:81:b2:c9:05:4e:
34:95:18:7c:bf:72:d6:b6:98:a2:d2:ba:12:09:4e:bd:1e:e9:
2b:ad:58:25:88:3e:61:47:38:7a:d9:ae:26:e8:5c:e2:2f:fe:
7e:88:00:36:13:1b:9f:01:ff:1b:a3:03:2c:44:c6:ef:67:1c:
f9:d9:f6:4a:a4:cb:41:ef:6a:41:cb:2c:be:4c:64:4b:14:c5:
de:e5:c7:39:d1:f8:e8:6e:dd:0f:56:7c:c1:86:e4:46:34:4a:
33:d8:58:69:b3:b1:ca:42:f1:45:b7:8d:8e:c4:73:de:96:af:
e9:ae:6c:f5:34:f5:0b:1d:7f:07:e9:20:da:63:15:ac:c5:72:
1f:9a:7d:ff:3f:f5:e9:10:a8:f6:d4:d0:95:93:65:82:7d:f9:
78:79:20:44:75:52:9a:7d:c7:5d:5c:4d:75:7e:ef:2c:16:3d:
c5:5d:76:1b:3f:e0:40:ef:f5:e7:8a:d9:1c:c6:4d:0e:e7:82:
da:6e:8d:74:1f:d0:59:e8:94:75:ea:f2:7b:31:5f:93:03:e4:
7a:78:b4:ab
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzGSnfNOOjXM3+EH+tjIHPqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTgzMDE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNWE5NzUyMzlmZGQ0NDNiN2QzZDgyZTM5MmE5ZTRhZTM5MjE4ZWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArw8jimlIv3L1etSEmMZZb2g54a0V
chWzcU06d89GcZxfnxa3o4J0l0J9g5MsTSW1bM36dzS8KHTMwVwXV5eCSTgb09Qu
zJqrVMqr/XkOH/88Y37PnAMQZoePCWyNQKW5ZbBoDt7/Ie7SNIFH4ZsTqjSZWnca
H1Oz6bO7XVdePXAlmtCZk19CQ7ebnQ58vTBkc/yeshsFN/I4Y6T3Dk4jJP/I0EV9
T83X/6bcIpBXdHEc2xGS9QLZwr5I4lnYmQTDIn34hg3lImSa2/IdKkqGz/gU7Xe0
nfWdFAH687/UKQChMSToKgUJoyrVLH58Pbo/ECzu5Hbpf/3U6I2h2dcGrwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFKWpdSOf3UQ7fT2C45Kp5K45IY72MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAyL2YyNzAw
Yi05ODUzLTQxNzItOWE2MS1hNjkxNDQ4YjJlYzQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDIvZjI3MDBi
LTk4NTMtNDE3Mi05YTYxLWE2OTE0NDhiMmVjNC8xL3BhbDFJNV9kUkR0OVBZTGpr
cW5rcmpraGp2WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQDwSRAMA0GCSqGSIb3DQEBCwUAA4IBAQB6lXNN
m0SHlB0FjWRlnw2wTIr1HlJrahPDKbawunwvq2Q+wyzPiddsm+zilMNYnNCJgbLJ
BU40lRh8v3LWtpii0roSCU69HukrrVgliD5hRzh62a4m6FziL/5+iAA2ExufAf8b
owMsRMbvZxz52fZKpMtB72pByyy+TGRLFMXe5cc50fjobt0PVnzBhuRGNEoz2Fhp
s7HKQvFFt42OxHPelq/prmz1NPULHX8H6SDaYxWsxXIfmn3/P/XpEKj21NCVk2WC
ffl4eSBEdVKafcddXE11fu8sFj3FXXYbP+BA7/Xnitkcxk0O54Labo10H9BZ6JR1
6vJ7MV+TA+R6eLSr
-----END CERTIFICATE-----
Generated at Fri May 3 10:59:33 2024 by rpki-client on console-fra.rpki-client.org