Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
File: s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer (raw, json)
Hash identifier: UrEvN0lc6WcQrnoIDSgCYhmPxJPjGVnTSU8K2wVQ4Ew=
Subject key identifier: B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E5D749EA9DB5753D55BBFEC562CD6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:53 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 44567
AS: 216108
IP: 91.240.214.0/23
IP: 91.241.14.0/23
IP: 93.92.152.0/21
IP: 2a01:9c00::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:5d:74:9e:a9:db:57:53:d5:5b:bf:ec:56:2c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3d66297c5cdbd36d86849ddeae7985979f450ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0e:1d:8d:16:53:01:cc:72:1d:68:6a:1c:46:
7a:b1:6f:24:71:d9:ce:a2:b5:25:d6:b1:2c:f6:7b:
15:43:85:a4:96:aa:d0:d6:70:74:d6:fe:6c:1b:7e:
44:0c:a9:b8:d1:8d:24:49:5f:71:2c:db:f3:05:b1:
3f:ff:b0:80:82:09:1c:af:30:1d:3c:4c:a9:91:14:
60:10:08:a9:c2:4a:a6:92:42:3f:79:90:de:f6:28:
03:83:3e:35:4c:be:9f:82:6b:bb:a9:5f:83:68:13:
8b:1d:69:10:f0:e5:e9:54:0f:18:74:35:c7:85:fe:
93:d7:1b:54:bb:02:91:60:ac:32:27:dd:0d:52:c6:
f4:90:cb:65:8c:4d:ac:ca:fb:78:51:84:f2:b5:b4:
40:69:51:85:e9:d0:99:09:05:9f:76:df:c7:1c:f5:
38:13:9e:5e:d9:17:ea:f9:f4:76:96:67:20:a1:06:
39:99:54:89:e7:bb:5b:81:4a:54:3a:3c:4a:d8:6f:
28:43:fc:4c:b8:86:63:07:2c:73:a3:fe:f9:ca:17:
a8:67:e9:c7:81:fc:ce:fa:55:6b:09:f3:c9:3b:cf:
b9:ff:09:5a:f3:aa:74:01:8d:05:f8:1b:2a:35:1d:
99:fb:cf:40:ca:cb:97:93:4c:14:da:05:2a:9b:35:
8b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.214.0/23
91.241.14.0/23
93.92.152.0/21
IPv6:
2a01:9c00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44567
216108
Signature Algorithm: sha256WithRSAEncryption
3f:d3:aa:e7:fb:c3:75:23:c0:56:c5:25:7d:8f:56:f1:a4:a8:
5b:b0:83:5d:43:cc:3b:bb:85:33:ed:d2:ae:97:f8:ed:bf:18:
28:81:c9:d7:d1:2f:cb:67:d1:20:91:de:f1:b8:d3:55:b8:44:
01:c0:97:1d:78:17:0a:97:2b:86:e4:28:f4:1f:30:2d:d8:a6:
ce:4b:94:7a:f5:18:d5:00:3f:e2:54:3f:09:f9:76:cc:f7:89:
9d:a0:e7:4d:53:d9:b8:07:30:97:dd:dc:07:e5:a6:7f:d6:28:
e2:e2:d3:9d:c2:e6:aa:d2:f3:47:6f:83:60:6a:80:0a:1e:b8:
0c:2b:d4:68:d8:b4:5e:ba:88:85:cf:08:16:b8:a1:a3:eb:6f:
d8:5d:27:2b:68:8f:6b:9e:57:17:34:22:d3:95:93:cc:df:b2:
fb:4f:09:9e:e3:74:ba:3f:66:2b:a7:a3:30:44:ef:67:69:98:
8a:a3:02:10:f4:a2:d2:8d:c9:1f:61:72:d0:24:73:f1:8d:3c:
93:a0:f6:d8:e5:0d:7f:ac:26:3c:e3:0d:ac:d2:fe:32:49:7d:
95:d1:f8:d3:77:23:07:df:ea:7e:90:c5:0e:e0:34:f6:25:87:
58:08:35:97:1d:c2:c9:e7:70:d6:71:e0:9e:a8:8a:d6:49:ef:
34:46:39:12
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgISAYzFbl10nqnbV1PVW7/sVizWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTQyOTUzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiM2Q2NjI5N2M1Y2RiZDM2ZDg2ODQ5ZGRlYWU3OTg1OTc5ZjQ1MGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqA4djRZTAcxyHWhqHEZ6sW8kcdnO
orUl1rEs9nsVQ4WklqrQ1nB01v5sG35EDKm40Y0kSV9xLNvzBbE//7CAggkcrzAd
PEypkRRgEAipwkqmkkI/eZDe9igDgz41TL6fgmu7qV+DaBOLHWkQ8OXpVA8YdDXH
hf6T1xtUuwKRYKwyJ90NUsb0kMtljE2syvt4UYTytbRAaVGF6dCZCQWfdt/HHPU4
E55e2Rfq+fR2lmcgoQY5mVSJ57tbgUpUOjxK2G8oQ/xMuIZjByxzo/75yheoZ+nH
gfzO+lVrCfPJO8+5/wla86p0AY0F+BsqNR2Z+89AysuXk0wU2gUqmzWLDQIDAQAB
o4ICwDCCArwwHQYDVR0OBBYEFLPWYpfFzb022GhJ3ernmFl59FDKMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNhLzkyYzFj
Zi01YTIyLTQ1M2MtOTA3Zi1lYjFmODcxNWVlYzAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2EvOTJjMWNm
LTVhMjItNDUzYy05MDdmLWViMWY4NzE1ZWVjMC8xL3M5WmlsOFhOdlRiWWFFbmQ2
dWVZV1huMFVNby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF
BwEHAQH/BCswKTAYBAIAATASAwQBW/DWAwQBW/EOAwQDXVyYMA0EAgACMAcDBQAq
AZwAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwCuFwIDA0wsMA0GCSqGSIb3DQEB
CwUAA4IBAQA/06rn+8N1I8BWxSV9j1bxpKhbsINdQ8w7u4Uz7dKul/jtvxgogcnX
0S/LZ9Egkd7xuNNVuEQBwJcdeBcKlyuG5Cj0HzAt2KbOS5R69RjVAD/iVD8J+XbM
94mdoOdNU9m4BzCX3dwH5aZ/1iji4tOdwuaq0vNHb4NgaoAKHrgMK9Ro2LReuoiF
zwgWuKGj62/YXScraI9rnlcXNCLTlZPM37L7Twme43S6P2Yrp6MwRO9naZiKowIQ
9KLSjckfYXLQJHPxjTyToPbY5Q1/rCY84w2s0v4ySX2V0fjTdyMH3+p+kMUO4DT2
JYdYCDWXHcLJ53DWceCeqIrWSe80RjkS
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:38:40 2024 by rpki-client on console-ams.rpki-client.org