Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
File: sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer (raw, json)
Hash identifier: 8dvVMpy/S6uwP84MNKTNVtPCB9ucoJ/vhcTL2/Cwbdk=
Subject key identifier: B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56DE5D06361300CC1D6D81E4B4958CF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 209422
IP: 5.253.248.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:e5:d0:63:61:30:0c:c1:d6:d8:1e:4b:49:58:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7f:89:87:ae:15:16:e8:b3:88:ab:f1:af:a1:
fb:1f:9d:02:4b:2c:78:40:cb:11:d2:4f:11:b7:e4:
2d:2a:c3:89:0b:b2:13:98:49:34:33:eb:b9:ec:76:
aa:5a:de:43:45:67:74:aa:69:ea:27:98:90:b1:57:
b3:cb:7e:b1:a1:62:c1:b3:3a:e9:a1:ab:9f:1c:93:
c5:9c:c0:bf:2d:a3:58:5f:6e:86:b9:3f:39:b1:80:
73:03:47:de:8c:bb:48:be:76:e0:dc:7f:ee:12:db:
6e:15:04:cd:1e:94:bf:d8:3a:52:b4:24:d4:e1:5a:
2c:80:f0:03:d9:11:99:1e:9e:94:45:34:48:72:3e:
b3:2b:0d:c9:16:9e:99:88:ed:fd:b7:36:8a:5f:f3:
25:ef:13:a5:27:6d:0a:05:a8:61:0c:0c:ba:69:69:
0e:a2:e2:d9:94:ff:b3:47:10:72:5d:e9:df:31:d8:
f1:a3:6c:7b:42:f3:88:eb:88:d3:f8:ef:0e:cf:a0:
78:6f:16:df:8e:e7:42:b3:bd:4c:a3:2a:3c:8f:8b:
3a:c0:41:0e:46:e6:7b:4f:fe:d0:10:83:74:16:e4:
d9:d7:64:d9:46:07:18:e4:fd:ce:0a:eb:82:2d:94:
39:4e:e7:f2:81:d7:11:e6:08:eb:9f:20:88:dd:5c:
7f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.248.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209422
Signature Algorithm: sha256WithRSAEncryption
42:4c:62:4a:69:9a:ba:49:8d:13:93:24:a8:5e:a5:c5:68:a0:
78:be:72:15:b0:bd:39:9b:cf:62:08:1f:6e:d7:21:57:00:f9:
6e:a8:32:ae:7c:ad:8d:da:06:71:c8:9b:48:90:ce:9b:c7:85:
b2:d2:fc:47:b0:db:21:06:64:b0:7b:e1:58:76:5a:d9:be:01:
09:8c:03:2e:82:ae:17:4f:39:4c:99:fc:4e:67:aa:6e:ed:30:
e8:4e:98:de:ab:b5:1c:a8:c9:f6:f9:d0:32:f0:b5:2b:21:8c:
8e:22:70:35:ad:d5:5a:cf:45:f8:d7:5e:3c:8f:37:2c:96:aa:
30:6d:24:03:2e:7b:92:e9:3c:b3:1a:fa:95:f9:4d:48:2a:45:
e0:7c:c7:48:6e:e4:21:27:73:a1:06:1a:68:e4:6f:b0:08:4f:
5f:33:37:aa:aa:90:b1:dc:5a:39:29:95:b5:84:fd:03:aa:05:
aa:60:5d:a2:cd:a4:25:20:41:42:fe:52:de:d6:8d:10:31:a3:
08:fc:b3:40:32:bb:55:cd:4f:19:09:d5:c1:39:c3:5b:13:d7:
ea:67:21:1b:22:21:98:ae:66:fa:dd:bf:33:82:ab:28:bb:35:
31:7c:f5:f8:7c:cc:6f:e4:b7:26:f0:2e:0f:69:79:6e:62:00:
42:2b:bd:e9
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYzFbeXQY2EwDMHW2B5LSVjPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTQyOTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDJmMGMyYTJhNTEyNzViZWUyNDkzYTU2NTZlY2YxYjYxMmYxMjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3+Jh64VFuiziKvxr6H7H50CSyx4
QMsR0k8Rt+QtKsOJC7ITmEk0M+u57HaqWt5DRWd0qmnqJ5iQsVezy36xoWLBszrp
oaufHJPFnMC/LaNYX26GuT85sYBzA0fejLtIvnbg3H/uEttuFQTNHpS/2DpStCTU
4VosgPAD2RGZHp6URTRIcj6zKw3JFp6ZiO39tzaKX/Ml7xOlJ20KBahhDAy6aWkO
ouLZlP+zRxByXenfMdjxo2x7QvOI64jT+O8Oz6B4bxbfjudCs71Moyo8j4s6wEEO
RuZ7T/7QEIN0FuTZ12TZRgcY5P3OCuuCLZQ5TufygdcR5gjrnyCI3Vx/OQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFLAvDCoqUSdb7iSTpWVuzxthLxImMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FlL2M1OTE2
Mi03YmQxLTRiOGEtYTllMy0yMWZmMTEyMGZiNzIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWUvYzU5MTYy
LTdiZDEtNGI4YS1hOWUzLTIxZmYxMTIwZmI3Mi8xL3NDOE1LaXBSSjF2dUpKT2xa
VzdQRzJFdkVpWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCBf34MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwMyDjANBgkqhkiG9w0BAQsFAAOCAQEAQkxiSmmaukmNE5MkqF6lxWigeL5yFbC9
OZvPYggfbtchVwD5bqgyrnytjdoGccibSJDOm8eFstL8R7DbIQZksHvhWHZa2b4B
CYwDLoKuF085TJn8Tmeqbu0w6E6Y3qu1HKjJ9vnQMvC1KyGMjiJwNa3VWs9F+Nde
PI83LJaqMG0kAy57kuk8sxr6lflNSCpF4HzHSG7kISdzoQYaaORvsAhPXzM3qqqQ
sdxaOSmVtYT9A6oFqmBdos2kJSBBQv5S3taNEDGjCPyzQDK7Vc1PGQnVwTnDWxPX
6mchGyIhmK5m+t2/M4KrKLs1MXz1+HzMb+S3JvAuD2l5bmIAQiu96Q==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:43:11 2024 by rpki-client on console-ams.rpki-client.org