Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/r8GT7hHlRxYWn5TI-THq4fyFSSE.cer
File: r8GT7hHlRxYWn5TI-THq4fyFSSE.cer (raw, json)
Hash identifier: ktAvNiuhuVFBSl//Tq/tS/Wz3CfdA58uCO6v2iFHfi8=
Subject key identifier: AF:C1:93:EE:11:E5:47:16:16:9F:94:C8:F9:31:EA:E1:FC:85:49:21
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA976F5AEFD1E7446241F88A572AB3A8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/0b9cbf-25ae-4327-98aa-a7dd9aea1d7a/1/r8GT7hHlRxYWn5TI-THq4fyFSSE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/0b9cbf-25ae-4327-98aa-a7dd9aea1d7a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 14:32:51 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 59435
AS: 208367
IP: 45.142.100.0/22
IP: 2a10:46c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:97:6f:5a:ef:d1:e7:44:62:41:f8:8a:57:2a:b3:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 14:32:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=afc193ee11e54716169f94c8f931eae1fc854921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:da:db:02:d8:fc:60:ff:0c:ab:34:ae:ef:d3:
f4:11:c5:fb:4b:b3:b7:25:98:97:2d:9f:86:03:f0:
15:21:5e:72:5a:42:54:37:e3:2e:6f:4f:7c:2e:62:
4d:e0:63:95:b5:ed:1c:44:bf:5f:14:87:12:8c:45:
ec:ea:49:34:32:d1:b3:0c:06:2a:d9:74:b0:41:ce:
9d:2f:75:6e:51:74:28:8c:07:a7:53:86:ac:1f:36:
68:8a:20:f8:e6:7f:77:98:31:64:4b:a8:dc:24:b2:
4d:0b:b1:a0:b7:ae:e5:9c:6e:3a:7d:ad:e6:6a:58:
8a:34:9d:06:83:54:ae:0c:b2:e9:18:39:61:23:a4:
ba:53:10:3f:4d:30:03:8d:b8:a3:8d:fb:a5:c9:47:
dc:f9:f0:a0:2d:db:c4:af:c5:61:dd:50:66:00:c4:
7e:ba:c1:19:c1:c6:88:4c:5b:68:e1:77:5e:73:29:
6e:d8:c8:a4:b3:16:61:60:e7:cd:a4:93:2c:3f:bc:
ad:00:f2:92:b2:00:ca:9d:55:79:ef:57:96:23:14:
98:d3:a0:e8:b7:a5:50:ad:90:4a:8d:93:73:61:23:
5c:ec:2b:3c:13:e9:a9:32:68:bf:ff:7e:0c:b2:a7:
0f:33:1a:8a:c7:62:6f:76:3a:e4:ba:36:a5:37:69:
8b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C1:93:EE:11:E5:47:16:16:9F:94:C8:F9:31:EA:E1:FC:85:49:21
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0b9cbf-25ae-4327-98aa-a7dd9aea1d7a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0b9cbf-25ae-4327-98aa-a7dd9aea1d7a/1/r8GT7hHlRxYWn5TI-THq4fyFSSE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.100.0/22
IPv6:
2a10:46c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59435
208367
Signature Algorithm: sha256WithRSAEncryption
5b:10:8e:76:10:75:25:ca:95:c1:d2:50:f7:ef:2c:2a:09:e5:
6c:47:ed:bf:39:47:2a:f3:4b:7b:c8:21:3a:f7:94:12:3b:8b:
d6:f4:87:81:23:7f:ae:89:59:be:b6:bc:3e:b0:a5:3a:7e:00:
86:64:27:73:41:15:66:f9:b8:23:89:db:21:33:4d:cc:ff:c8:
e1:2c:86:da:cb:51:65:97:f7:e1:63:fb:4c:44:c3:2c:c1:13:
3c:ec:75:e1:1c:24:bf:17:de:9f:65:de:8f:3d:99:ca:a9:f4:
02:04:6d:53:54:f3:5d:5b:34:77:f1:35:d6:04:09:2b:12:ba:
79:df:cb:1e:12:40:dc:92:f6:11:4d:ba:bf:11:12:42:81:0d:
38:ff:12:62:d6:ca:5d:b2:44:56:be:30:af:ff:fc:ef:39:d9:
0a:4a:0f:68:6a:67:21:80:43:13:06:bb:35:b3:1c:54:19:a7:
27:be:12:91:d1:6d:d4:87:63:16:43:13:d6:ce:f8:4b:8a:28:
4d:8c:92:83:0b:e4:8a:90:87:7a:84:70:56:43:69:ac:4c:2a:
02:9d:bd:4a:e9:9b:f9:da:72:cd:5f:d9:ee:c0:1e:64:59:04:
c6:fe:bd:f6:73:49:5f:74:b7:e1:00:ef:88:d8:2e:06:90:37:
07:9b:9d:03
-----BEGIN CERTIFICATE-----
MIIFqDCCBJCgAwIBAgISAYzKl29a79HnRGJB+IpXKrOoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTQzMjUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZmMxOTNlZTExZTU0NzE2MTY5Zjk0YzhmOTMxZWFlMWZjODU0OTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9rbAtj8YP8MqzSu79P0EcX7S7O3
JZiXLZ+GA/AVIV5yWkJUN+Mub098LmJN4GOVte0cRL9fFIcSjEXs6kk0MtGzDAYq
2XSwQc6dL3VuUXQojAenU4asHzZoiiD45n93mDFkS6jcJLJNC7Ggt67lnG46fa3m
aliKNJ0Gg1SuDLLpGDlhI6S6UxA/TTADjbijjfulyUfc+fCgLdvEr8Vh3VBmAMR+
usEZwcaITFto4Xdecylu2MiksxZhYOfNpJMsP7ytAPKSsgDKnVV571eWIxSY06Do
t6VQrZBKjZNzYSNc7Cs8E+mpMmi//34MsqcPMxqKx2JvdjrkujalN2mLQwIDAQAB
o4ICtDCCArAwHQYDVR0OBBYEFK/Bk+4R5UcWFp+UyPkx6uH8hUkhMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RjLzBiOWNi
Zi0yNWFlLTQzMjctOThhYS1hN2RkOWFlYTFkN2EvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGMvMGI5Y2Jm
LTI1YWUtNDMyNy05OGFhLWE3ZGQ5YWVhMWQ3YS8xL3I4R1Q3aEhsUnhZV241VEkt
VEhxNGZ5RlNTRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCLY5kMA0EAgACMAcDBQMqEEbAMB8GCCsGAQUF
BwEIAQH/BBAwDqAMMAoCAwDoKwIDAy3vMA0GCSqGSIb3DQEBCwUAA4IBAQBbEI52
EHUlypXB0lD37ywqCeVsR+2/OUcq80t7yCE695QSO4vW9IeBI3+uiVm+trw+sKU6
fgCGZCdzQRVm+bgjidshM03M/8jhLIbay1Fll/fhY/tMRMMswRM87HXhHCS/F96f
Zd6PPZnKqfQCBG1TVPNdWzR38TXWBAkrErp538seEkDckvYRTbq/ERJCgQ04/xJi
1spdskRWvjCv//zvOdkKSg9oamchgEMTBrs1sxxUGacnvhKR0W3Uh2MWQxPWzvhL
iihNjJKDC+SKkId6hHBWQ2msTCoCnb1K6Zv52nLNX9nuwB5kWQTG/r32c0lfdLfh
AO+I2C4GkDcHm50D
-----END CERTIFICATE-----
Generated at Fri May 3 11:00:53 2024 by rpki-client on console-fra.rpki-client.org