Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
File: rCGhE9G6AdEH_feRMIwKUfPQbdo.cer (raw, json)
Hash identifier: qz3r9bggMZSjnv0HBHmkYYdq4gIl9emazVCiYEA5njg=
Subject key identifier: AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018ED2769515F1ED5EB74B8A31EDDE63AED5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 12 Apr 2024 13:19:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.137.165.0/24
IP: 185.226.188.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d2:76:95:15:f1:ed:5e:b7:4b:8a:31:ed:de:63:ae:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 12 13:19:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac21a113d1ba01d107fdf791308c0a51f3d06dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c7:ea:2a:e9:a4:66:be:b5:f3:0f:19:03:78:
d0:5b:e5:ec:47:62:23:14:b2:64:6d:d6:5e:83:22:
bb:e9:5d:ea:19:3e:ad:8e:d0:e2:c1:03:89:20:a1:
86:22:58:6d:2c:9d:79:16:be:e1:7c:82:31:9c:a5:
3d:95:6b:17:fa:46:25:c1:17:be:1b:3f:50:bf:d5:
90:c4:e4:f8:a6:83:05:ec:4f:3a:73:b7:5e:85:f3:
fb:9e:6b:58:3b:1c:d5:02:db:56:2d:dd:7a:7d:c0:
b0:0b:b7:61:44:b2:be:ff:52:da:42:fc:e1:39:88:
4f:13:85:7a:29:c2:41:fb:6e:9b:f4:58:2b:c4:dc:
4a:9f:60:a6:cd:51:8a:96:d8:8e:e2:9e:84:05:d2:
e8:92:cf:39:44:47:9c:c3:52:4c:30:6d:0e:4a:ae:
ee:26:64:4a:64:78:de:e9:8c:4a:51:10:83:08:11:
2d:50:9c:c4:27:24:96:14:05:76:0e:da:f7:c6:95:
03:22:cd:84:5d:26:f2:5a:c9:8d:70:28:fb:2b:f3:
57:f4:e9:ba:fa:87:b6:d1:de:38:c1:84:d8:9b:ee:
2d:ac:4e:0d:55:79:a3:e2:a6:05:b1:ee:5e:46:fb:
55:8f:0e:47:e6:df:53:fd:bd:90:03:61:30:cc:3c:
6a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.165.0/24
185.226.188.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:06:d1:60:93:80:32:8d:23:9d:6e:c5:1d:ce:aa:1e:30:98:
71:c2:c1:33:23:f3:0b:55:9b:f8:79:1a:82:26:75:57:2a:02:
29:7a:bb:bc:96:4b:62:42:b1:3c:66:81:5b:a8:a2:93:8a:9d:
f4:93:0a:12:ba:f5:03:ba:bb:34:93:7a:37:bf:bb:fe:fe:0f:
93:5c:4e:36:fd:34:54:5f:d7:0d:48:92:fe:90:bc:0c:f5:44:
15:4f:28:c7:fd:7d:65:53:47:ad:51:74:65:0e:22:a8:24:ec:
ff:b1:b4:1a:b6:f0:af:9c:8a:e9:7c:d1:b7:e6:88:57:77:1e:
fb:f1:99:c1:01:52:07:a7:c1:3b:ce:f0:3e:3e:c9:02:65:9f:
b1:68:9f:99:e8:9a:5e:45:87:74:40:7e:f8:c9:0f:d9:a0:81:
50:e2:6f:c4:c2:34:e2:f8:35:b4:ca:24:59:de:13:7d:17:e4:
d3:ec:e5:c2:45:38:d7:40:6a:81:2f:0a:c2:dc:f3:78:4c:83:
f6:36:45:4b:f2:94:a6:da:50:03:19:32:75:29:a6:40:f9:e9:
fd:86:c4:80:32:ba:4b:e5:05:df:38:5a:0f:2e:af:f8:88:64:
5f:72:96:b2:5c:bc:23:9f:5b:5e:20:91:84:c2:70:22:0e:94:
da:9a:52:97
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgISAY7SdpUV8e1et0uKMe3eY67VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNDEyMTMxOTMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzIxYTExM2QxYmEwMWQxMDdmZGY3OTEzMDhjMGE1MWYzZDA2ZGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcfqKumkZr618w8ZA3jQW+XsR2Ij
FLJkbdZegyK76V3qGT6tjtDiwQOJIKGGIlhtLJ15Fr7hfIIxnKU9lWsX+kYlwRe+
Gz9Qv9WQxOT4poMF7E86c7dehfP7nmtYOxzVAttWLd16fcCwC7dhRLK+/1LaQvzh
OYhPE4V6KcJB+26b9FgrxNxKn2CmzVGKltiO4p6EBdLoks85REecw1JMMG0OSq7u
JmRKZHje6YxKURCDCBEtUJzEJySWFAV2Dtr3xpUDIs2EXSbyWsmNcCj7K/NX9Om6
+oe20d44wYTYm+4trE4NVXmj4qYFse5eRvtVjw5H5t9T/b2QA2EwzDxqzQIDAQAB
o4ICijCCAoYwHQYDVR0OBBYEFKwhoRPRugHRB/33kTCMClHz0G3aMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQzLzU4OTNm
Ny1iNGYxLTQ5NjEtOTQyNi1mZDczYjgwODMzYjcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDMvNTg5M2Y3
LWI0ZjEtNDk2MS05NDI2LWZkNzNiODA4MzNiNy8xL3JDR2hFOUc2QWRFSF9mZVJN
SXdLVWZQUWJkby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQAuYmlAwQCueK8MA0GCSqGSIb3DQEBCwUAA4IB
AQCtBtFgk4AyjSOdbsUdzqoeMJhxwsEzI/MLVZv4eRqCJnVXKgIperu8lktiQrE8
ZoFbqKKTip30kwoSuvUDurs0k3o3v7v+/g+TXE42/TRUX9cNSJL+kLwM9UQVTyjH
/X1lU0etUXRlDiKoJOz/sbQatvCvnIrpfNG35ohXdx778ZnBAVIHp8E7zvA+PskC
ZZ+xaJ+Z6JpeRYd0QH74yQ/ZoIFQ4m/EwjTi+DW0yiRZ3hN9F+TT7OXCRTjXQGqB
LwrC3PN4TIP2NkVL8pSm2lADGTJ1KaZA+en9hsSAMrpL5QXfOFoPLq/4iGRfcpay
XLwjn1teIJGEwnAiDpTamlKX
-----END CERTIFICATE-----
Generated at Fri May 3 02:15:53 2024 by rpki-client on console-ams.rpki-client.org