Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pcatcQWg6X4ZLw6I5mgYq2D33sg.cer
File: pcatcQWg6X4ZLw6I5mgYq2D33sg.cer (raw, json)
Hash identifier: 761vbwmBC4tSTVZWPIYQYjIBBft14G+ju5gtmPAtHHU=
Subject key identifier: A5:C6:AD:71:05:A0:E9:7E:19:2F:0E:88:E6:68:18:AB:60:F7:DE:C8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BCA5F5BE065AFC19C514BCE6CA655F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:52 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 196636
IP: 195.191.224.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:a5:f5:be:06:5a:fc:19:c5:14:bc:e6:ca:65:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5c6ad7105a0e97e192f0e88e66818ab60f7dec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:34:72:2f:cc:d6:5d:86:8a:f2:86:7c:dd:21:
37:83:af:fd:b7:d9:fb:f8:93:22:cb:66:4a:6c:fa:
f4:7c:ce:0b:d5:0a:b8:3a:6e:18:19:59:e9:ae:f8:
48:b3:f8:2b:ab:5d:84:c9:8b:81:b6:76:f4:4e:8b:
be:99:d4:d5:b0:10:c7:93:8a:8c:61:f7:bf:cc:d9:
51:5d:22:18:75:27:eb:db:89:71:85:20:a3:92:6c:
9c:98:28:89:90:83:2a:fc:7d:62:59:a6:8b:35:a7:
90:3b:37:66:6d:3c:19:f7:5d:3a:03:36:73:1d:7c:
33:b5:64:27:53:a3:cc:aa:02:42:cf:39:4b:ea:3a:
27:a1:94:20:c7:b2:cf:19:09:28:82:72:5d:62:55:
61:a8:ae:3d:d6:e9:72:e5:54:7b:5d:c8:12:37:8d:
f2:f5:ac:6e:4c:22:05:5d:88:b7:9a:8d:4a:4c:17:
e1:2d:a7:f1:5a:3e:61:57:c5:34:4f:a4:ac:e4:96:
a8:4a:4b:f1:ad:08:e6:85:d1:6a:30:73:68:19:a1:
7b:07:bf:77:5b:77:57:34:9f:f3:4d:4c:26:e1:96:
77:cc:34:a5:7c:36:10:f9:c6:e2:69:a5:6a:12:4e:
fe:1c:ff:c2:25:a6:1b:2c:4d:6b:33:27:33:68:0a:
19:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C6:AD:71:05:A0:E9:7E:19:2F:0E:88:E6:68:18:AB:60:F7:DE:C8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.224.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
196636
Signature Algorithm: sha256WithRSAEncryption
12:81:8f:b4:e7:ed:33:c4:6b:77:48:c5:aa:c9:be:82:39:24:
7e:78:43:8c:c9:57:a2:be:c7:3a:66:36:af:0d:7d:c8:74:a4:
51:1c:97:59:15:dc:04:5a:87:e2:40:e1:a7:df:a4:03:69:12:
c0:6a:7c:16:99:99:9e:86:dd:b9:ee:72:da:1c:dc:b6:c9:52:
eb:93:aa:9c:1a:b3:9d:cd:54:9a:8d:d4:3b:f1:de:ad:d6:af:
fe:83:6d:fe:a4:56:a1:d3:51:a7:e9:42:81:7b:c8:da:ad:01:
db:26:5c:eb:44:d1:b8:0b:dd:b1:e3:7f:0b:19:7d:94:f3:7e:
02:88:2f:51:fe:db:12:fc:a0:78:44:a0:f7:69:3d:fb:c5:64:
be:4e:3b:98:57:3d:5c:46:06:60:b3:4f:dd:d9:3c:47:48:9e:
83:79:03:07:e0:c5:01:53:d5:d5:a4:75:c0:e9:8b:d4:5d:8b:
9f:14:6a:78:55:ee:1f:b6:93:ef:92:82:1a:e3:c9:8e:29:24:
94:a1:35:84:83:00:e6:46:04:bb:81:07:f4:d2:9e:9e:a8:6a:
80:66:b9:af:21:50:3e:7f:56:1e:7c:e6:4e:9f:c7:91:b1:ee:
ef:53:8a:6d:58:37:93:06:dd:a0:d4:b1:7b:1e:07:01:03:f8:
db:24:f8:ee
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYzJvKX1vgZa/BnFFLzmymVfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTAzMzUyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNWM2YWQ3MTA1YTBlOTdlMTkyZjBlODhlNjY4MThhYjYwZjdkZWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDRyL8zWXYaK8oZ83SE3g6/9t9n7
+JMiy2ZKbPr0fM4L1Qq4Om4YGVnprvhIs/grq12EyYuBtnb0Tou+mdTVsBDHk4qM
Yfe/zNlRXSIYdSfr24lxhSCjkmycmCiJkIMq/H1iWaaLNaeQOzdmbTwZ9106AzZz
HXwztWQnU6PMqgJCzzlL6jonoZQgx7LPGQkognJdYlVhqK491uly5VR7XcgSN43y
9axuTCIFXYi3mo1KTBfhLafxWj5hV8U0T6Ss5JaoSkvxrQjmhdFqMHNoGaF7B793
W3dXNJ/zTUwm4ZZ3zDSlfDYQ+cbiaaVqEk7+HP/CJaYbLE1rMyczaAoZ2QIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFKXGrXEFoOl+GS8OiOZoGKtg997IMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg2LzdhMGFh
Mi1mOTliLTQxODUtOGYyNC0xNjQ2YzY3ZjQyOTQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYvN2EwYWEy
LWY5OWItNDE4NS04ZjI0LTE2NDZjNjdmNDI5NC8xL3BjYXRjUVdnNlg0Wkx3Nkk1
bWdZcTJEMzNzZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQBw7/gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwMAHDANBgkqhkiG9w0BAQsFAAOCAQEAEoGPtOftM8Rrd0jFqsm+gjkkfnhDjMlX
or7HOmY2rw19yHSkURyXWRXcBFqH4kDhp9+kA2kSwGp8FpmZnobdue5y2hzctslS
65OqnBqznc1Umo3UO/Herdav/oNt/qRWodNRp+lCgXvI2q0B2yZc60TRuAvdseN/
Cxl9lPN+AogvUf7bEvygeESg92k9+8Vkvk47mFc9XEYGYLNP3dk8R0ieg3kDB+DF
AVPV1aR1wOmL1F2LnxRqeFXuH7aT75KCGuPJjikklKE1hIMA5kYEu4EH9NKenqhq
gGa5ryFQPn9WHnzmTp/HkbHu71OKbVg3kwbdoNSxex4HAQP42yT47g==
-----END CERTIFICATE-----
Generated at Fri May 3 14:01:51 2024 by rpki-client on console-fra.rpki-client.org