Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
File: roP3h5wsdKEWUrXgivZKrJCACwQ.cer (raw, json)
Hash identifier: B446PkMLjvXRj6GpBMJdtCR7q1t8bTYOnY5ot9PWj1w=
Subject key identifier: AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D1460899AAFC8EBF8B7B71D15197B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:37 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 136.206.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:14:60:89:9a:af:c8:eb:f8:b7:b7:1d:15:19:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae83f7879c2c74a11652b5e08af64aac90800b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7a:dc:a1:ae:3e:ee:85:0e:6e:92:3b:44:6d:
e5:03:b8:f5:25:d6:32:32:d6:71:a9:1d:b3:11:74:
1c:56:e0:10:7d:f7:49:68:4b:8a:31:b8:6d:0b:24:
e6:be:66:e1:00:c7:16:7c:4d:d3:61:1b:b7:70:b4:
7f:f9:fc:46:5c:ba:be:7b:27:aa:eb:65:70:ca:39:
22:ff:3c:71:ac:0c:82:e7:fe:48:8c:0f:d1:c1:85:
5c:ed:a4:21:a6:a0:4d:ad:bd:aa:0c:14:8b:34:6d:
ca:2b:28:69:92:0e:1f:cd:36:dd:8d:98:7f:37:78:
a9:3a:8d:cd:69:3f:17:ee:ce:66:bf:1b:e0:0c:c2:
b8:b6:31:b4:cb:48:23:3d:80:17:78:cf:e9:66:69:
61:5d:10:d7:4c:f2:20:bb:e8:29:a3:66:25:ea:29:
06:2b:d4:d8:7e:07:1f:b5:77:10:b5:4b:cf:e8:86:
82:13:41:3c:60:c0:1a:64:8e:8b:ca:06:18:e5:5c:
ae:0f:09:6c:53:71:09:d7:80:19:98:45:04:be:25:
e7:20:7f:b7:9d:cb:f4:f8:48:03:3e:da:af:b4:c8:
dc:ae:e3:93:d2:3b:ee:3b:0c:74:4f:43:f3:20:aa:
c4:57:f5:fb:70:6a:95:b8:a6:c8:c3:1c:3a:f8:c6:
1b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.206.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0d:5a:8c:a9:08:98:3d:83:2c:d4:e1:32:32:58:46:0c:88:6d:
6f:a8:b1:33:0e:2e:03:1b:52:6b:82:f8:ea:4a:37:45:4f:ec:
6b:e8:e0:1b:a8:00:c9:71:5d:c1:3c:55:3f:0e:dc:4e:4d:9e:
2e:18:24:02:ad:f3:67:e3:6a:16:00:36:8d:b7:89:7a:d2:52:
a3:3f:c9:42:af:e9:f6:72:d2:b0:14:16:b4:94:da:a6:a0:2e:
fb:84:4d:99:60:2b:a6:37:5f:c6:2e:17:e4:ac:11:2f:14:24:
3c:c7:76:98:f8:55:41:19:f4:ae:b8:5f:22:93:61:ee:5a:0a:
d1:0a:05:e2:5f:cf:41:86:24:68:69:24:9c:ab:d3:3d:c3:9a:
f4:aa:4d:ed:2f:c8:47:fa:35:fa:57:67:33:40:34:21:9f:64:
c8:c4:02:8b:aa:4c:91:13:df:58:d5:3e:81:41:38:e3:bf:e8:
82:2a:d9:39:51:aa:80:ca:3c:8d:65:01:8b:7a:53:56:f8:a2:
d6:c3:60:03:f4:9f:dd:a8:45:72:e3:43:0a:46:92:c4:7b:3a:
42:41:7f:89:76:4a:31:f6:65:57:d3:d5:77:54:cc:4e:29:8b:
9f:ba:58:b8:03:5b:a5:c3:4f:92:60:e5:be:ce:54:8a:87:02:
ed:e7:4b:2a
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgISAYzCbRRgiZqvyOv4t7cdFRl7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDAyOTM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTgzZjc4NzljMmM3NGExMTY1MmI1ZTA4YWY2NGFhYzkwODAwYjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03rcoa4+7oUObpI7RG3lA7j1JdYy
MtZxqR2zEXQcVuAQffdJaEuKMbhtCyTmvmbhAMcWfE3TYRu3cLR/+fxGXLq+eyeq
62Vwyjki/zxxrAyC5/5IjA/RwYVc7aQhpqBNrb2qDBSLNG3KKyhpkg4fzTbdjZh/
N3ipOo3NaT8X7s5mvxvgDMK4tjG0y0gjPYAXeM/pZmlhXRDXTPIgu+gpo2Yl6ikG
K9TYfgcftXcQtUvP6IaCE0E8YMAaZI6LygYY5VyuDwlsU3EJ14AZmEUEviXnIH+3
ncv0+EgDPtqvtMjcruOT0jvuOwx0T0PzIKrEV/X7cGqVuKbIwxw6+MYbiQIDAQAB
o4ICgzCCAn8wHQYDVR0OBBYEFK6D94ecLHShFlK14Ir2SqyQgAsEMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg4Lzg0ZDAy
Ni0xN2U0LTQ3ODctYTQzOS00NzNkNzRhNWUyMGYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODgvODRkMDI2
LTE3ZTQtNDc4Ny1hNDM5LTQ3M2Q3NGE1ZTIwZi8xL3JvUDNoNXdzZEtFV1VyWGdp
dlpLckpDQUN3US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF
BwEHAQH/BA8wDTALBAIAATAFAwMAiM4wDQYJKoZIhvcNAQELBQADggEBAA1ajKkI
mD2DLNThMjJYRgyIbW+osTMOLgMbUmuC+OpKN0VP7Gvo4BuoAMlxXcE8VT8O3E5N
ni4YJAKt82fjahYANo23iXrSUqM/yUKv6fZy0rAUFrSU2qagLvuETZlgK6Y3X8Yu
F+SsES8UJDzHdpj4VUEZ9K64XyKTYe5aCtEKBeJfz0GGJGhpJJyr0z3DmvSqTe0v
yEf6NfpXZzNANCGfZMjEAouqTJET31jVPoFBOOO/6IIq2TlRqoDKPI1lAYt6U1b4
otbDYAP0n92oRXLjQwpGksR7OkJBf4l2SjH2ZVfT1XdUzE4pi5+6WLgDW6XDT5Jg
5b7OVIqHAu3nSyo=
-----END CERTIFICATE-----
Generated at Fri May 3 03:45:59 2024 by rpki-client on console-fra.rpki-client.org