Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
File: pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer (raw, json)
Hash identifier: 9fOxQ5FBFypq1o5KR4jvdKsNPTL2g+k2L9LElDEMqCo=
Subject key identifier: A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56EB87BE066B165EC2A1065B7B918D0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:16 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.170.152.0/22
IP: 185.207.132.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:b8:7b:e0:66:b1:65:ec:2a:10:65:b7:b9:18:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a647893fb5b348e68a66d55a28f278cbf3931df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:61:f3:46:98:8d:a0:78:34:4a:e0:e9:8d:fc:
7f:dc:0e:42:04:59:d0:9d:39:a7:e0:9c:04:14:f9:
ba:cd:68:df:62:2d:df:fe:80:dd:a8:d3:28:6d:17:
b2:cf:b2:9a:80:8b:ad:24:92:53:23:cf:76:2c:dd:
f5:f0:ec:10:a9:4e:3d:58:89:dd:b4:86:1e:c7:b7:
5e:b8:e7:d0:49:c9:a9:13:67:98:28:29:46:db:16:
9a:e4:e6:7c:c0:d0:47:16:de:f6:6e:11:8d:ff:dd:
96:1c:ad:33:7f:a4:ea:4a:97:25:0b:57:6f:54:b0:
8a:37:c2:e0:b9:b6:c0:50:1d:9a:b6:dd:b7:6a:f8:
ed:c0:8e:e8:1f:44:59:cc:13:9d:d0:96:9e:fd:a9:
bc:88:80:69:5d:90:fe:6c:f2:c8:34:88:c2:d2:f3:
68:05:92:c8:cb:9f:26:1e:22:06:33:6e:b1:01:85:
bd:75:6e:4d:46:4c:75:e2:55:e5:5f:f0:2e:48:d1:
59:78:f2:e2:38:b4:87:d7:f8:6c:89:e1:fe:31:7f:
17:65:10:56:5a:23:4f:28:53:0d:98:67:4b:14:36:
7e:bd:74:2c:8e:72:7c:0d:3e:d1:9a:9c:ac:66:86:
1e:5a:08:02:76:fe:c9:99:55:42:98:03:a1:0d:e9:
ce:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.152.0/22
185.207.132.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:dc:e4:fe:bf:a4:5d:aa:89:ef:e5:14:f8:19:dd:bd:82:52:
e8:f7:70:aa:3a:44:1f:c6:e3:6b:49:53:59:eb:2b:0c:a9:6a:
10:d2:5a:de:94:86:8e:79:e6:9e:3a:b4:72:45:fe:b7:83:00:
9b:94:8d:f2:e0:63:56:34:7a:4c:a2:34:a4:67:29:b8:67:9c:
da:4e:d1:38:78:82:b3:8f:8c:10:50:f7:51:10:4e:36:14:c2:
19:ff:3d:c4:e9:1c:19:18:25:93:8e:dd:c2:ca:e8:35:2d:2d:
6a:14:0e:12:29:5e:d0:d2:1a:17:6d:82:f2:bc:1f:73:5a:c6:
98:f9:bf:f1:96:d2:2c:d6:2a:05:11:2d:94:98:55:32:7b:8b:
fd:e3:89:4f:c5:df:61:65:d7:0f:f2:13:7e:5c:aa:e9:2f:72:
89:00:8b:f4:bf:d1:f7:8d:f8:58:43:99:89:fa:e9:97:7c:35:
27:49:f3:e2:af:f0:cf:9f:5a:f6:98:13:66:95:af:18:c4:ca:
6c:e1:13:16:f9:4c:1f:08:a5:99:e4:63:5f:ab:dd:2e:e3:07:
6c:43:c8:03:7a:8f:24:36:3e:b9:2f:ac:cd:c0:4e:47:0c:46:
26:05:04:65:2c:09:3b:95:0a:aa:4d:b2:b8:59:14:07:61:d1:
43:1f:c3:ea
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgISAYzFbrh74GaxZewqEGW3uRjQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTQzMDE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjQ3ODkzZmI1YjM0OGU2OGE2NmQ1NWEyOGYyNzhjYmYzOTMxZGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2HzRpiNoHg0SuDpjfx/3A5CBFnQ
nTmn4JwEFPm6zWjfYi3f/oDdqNMobReyz7KagIutJJJTI892LN318OwQqU49WInd
tIYex7deuOfQScmpE2eYKClG2xaa5OZ8wNBHFt72bhGN/92WHK0zf6TqSpclC1dv
VLCKN8LgubbAUB2att23avjtwI7oH0RZzBOd0Jae/am8iIBpXZD+bPLINIjC0vNo
BZLIy58mHiIGM26xAYW9dW5NRkx14lXlX/AuSNFZePLiOLSH1/hsieH+MX8XZRBW
WiNPKFMNmGdLFDZ+vXQsjnJ8DT7RmpysZoYeWggCdv7JmVVCmAOhDenOcQIDAQAB
o4ICijCCAoYwHQYDVR0OBBYEFKZHiT+1s0jmimbVWijyeMvzkx30MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYzL2RhOGNi
MS0xYmZjLTQzZmQtYTBkMi1kNjI0NDk2ZGRjYzgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjMvZGE4Y2Ix
LTFiZmMtNDNmZC1hMGQyLWQ2MjQ0OTZkZGNjOC8xL3BrZUpQN1d6U09hS1p0VmFL
UEo0eV9PVEhmUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQCuaqYAwQCuc+EMA0GCSqGSIb3DQEBCwUAA4IB
AQBs3OT+v6Rdqonv5RT4Gd29glLo93CqOkQfxuNrSVNZ6ysMqWoQ0lrelIaOeeae
OrRyRf63gwCblI3y4GNWNHpMojSkZym4Z5zaTtE4eIKzj4wQUPdREE42FMIZ/z3E
6RwZGCWTjt3Cyug1LS1qFA4SKV7Q0hoXbYLyvB9zWsaY+b/xltIs1ioFES2UmFUy
e4v944lPxd9hZdcP8hN+XKrpL3KJAIv0v9H3jfhYQ5mJ+umXfDUnSfPir/DPn1r2
mBNmla8YxMps4RMW+UwfCKWZ5GNfq90u4wdsQ8gDeo8kNj65L6zNwE5HDEYmBQRl
LAk7lQqqTbK4WRQHYdFDH8Pq
-----END CERTIFICATE-----
Generated at Fri May 3 12:03:21 2024 by rpki-client on console-ams.rpki-client.org