Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sUJ73NR8eEMfZioIWJAFrLULk0E.cer
File: sUJ73NR8eEMfZioIWJAFrLULk0E.cer (raw, json)
Hash identifier: L8iIXVenZx9jOoPsIG2MCQnSv9bcgvN8m87AEeGbRuY=
Subject key identifier: B1:42:7B:DC:D4:7C:78:43:1F:66:2A:08:58:90:05:AC:B5:0B:93:41
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC726ECEE452E1DD492E94A5219F60029
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3a/20a767-7b41-463b-a6c9-5fc8e6327889/1/sUJ73NR8eEMfZioIWJAFrLULk0E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3a/20a767-7b41-463b-a6c9-5fc8e6327889/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:06 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.234.54.0/24
IP: 91.235.148.0/24
IP: 91.235.241.0/24
IP: 91.236.12.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:ec:ee:45:2e:1d:d4:92:e9:4a:52:19:f6:00:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1427bdcd47c78431f662a08589005acb50b9341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:53:86:52:76:f9:ce:2d:4c:ef:f1:f6:99:db:
4e:81:75:32:8b:2c:63:ae:1b:97:49:a4:f5:3f:ae:
62:11:f4:b9:df:80:17:cf:89:ba:d8:91:8c:fd:fb:
67:33:0b:f7:30:7c:8d:97:d5:54:43:13:e5:9f:32:
c8:08:7a:50:c3:41:b2:9f:26:f7:13:41:4d:54:4c:
20:79:c6:60:7c:3d:92:08:d6:0d:01:8a:54:f2:21:
d7:18:80:cf:77:3e:4a:5f:d5:0f:ee:27:e7:a0:7a:
d5:6a:66:56:5f:53:fb:c0:f0:dc:4e:a5:e3:cb:87:
87:4b:85:6f:67:73:ac:90:c6:c8:92:47:84:1a:cc:
90:45:91:51:ce:ea:b5:30:1f:a5:2d:43:70:22:56:
ee:e6:c6:5b:45:3a:60:b4:26:fe:58:8c:41:76:89:
0e:5a:b8:b8:e7:d5:a2:35:3a:61:2d:a1:b5:a4:78:
4c:5e:6f:0d:2e:a1:d0:46:d1:b3:33:bb:b9:a7:96:
04:3a:52:53:42:91:c1:2e:ef:83:0c:62:c4:26:e4:
34:dc:f7:fe:65:66:a3:e9:db:20:5c:bb:17:78:c1:
20:23:3e:72:fe:2f:a4:ac:9a:7b:08:34:22:da:6e:
10:b6:6b:4c:b1:7c:0b:36:3b:d1:3f:4c:e2:36:5f:
89:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:42:7B:DC:D4:7C:78:43:1F:66:2A:08:58:90:05:AC:B5:0B:93:41
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/20a767-7b41-463b-a6c9-5fc8e6327889/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/20a767-7b41-463b-a6c9-5fc8e6327889/1/sUJ73NR8eEMfZioIWJAFrLULk0E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.54.0/24
91.235.148.0/24
91.235.241.0/24
91.236.12.0/24
Signature Algorithm: sha256WithRSAEncryption
07:ee:b2:7c:e6:e8:5f:e6:34:f3:3f:88:5a:b3:52:be:a5:54:
0a:5d:e4:a9:79:b2:de:de:ef:f6:8c:95:c6:e2:f6:ef:cf:78:
04:9e:0f:3f:39:db:57:a6:97:a8:72:78:c2:31:7f:ee:e7:be:
c8:06:48:87:a1:c5:86:8f:5b:f4:52:75:cb:be:de:da:3d:b3:
fb:07:0d:88:1d:8e:6c:d3:7e:21:4a:21:02:11:d2:2b:84:7c:
80:1a:e4:27:7b:26:84:ab:2c:65:71:2e:49:02:24:d5:d7:bf:
fb:9d:46:33:68:de:47:f0:46:d8:6f:e4:dc:4a:51:de:1c:ea:
60:3f:75:32:de:9e:77:1c:fa:0f:e3:d3:be:d1:53:a8:74:c0:
3e:ee:8d:f8:7d:6c:dc:d0:f4:d1:a9:71:76:82:8b:36:5e:35:
8f:50:0c:07:3f:a1:5a:8b:5e:ad:6c:96:13:ce:a0:df:89:b6:
3d:31:61:40:17:8f:cc:d7:45:01:ff:87:8a:63:0c:e9:5b:99:
bc:b5:bf:72:a4:18:1d:f2:1a:3d:04:fa:f6:c0:c5:f1:a6:5d:
22:e7:c1:6c:f3:3f:5c:52:4c:75:1d:6c:cc:41:69:ed:c3:d8:
e6:a7:65:99:4b:cc:2b:29:5c:e8:66:78:ea:6e:4a:9a:69:5a:
2e:6e:80:79
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgISAYzHJuzuRS4d1JLpSlIZ9gApMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMjIzMTA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTQyN2JkY2Q0N2M3ODQzMWY2NjJhMDg1ODkwMDVhY2I1MGI5MzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21OGUnb5zi1M7/H2mdtOgXUyiyxj
rhuXSaT1P65iEfS534AXz4m62JGM/ftnMwv3MHyNl9VUQxPlnzLICHpQw0Gynyb3
E0FNVEwgecZgfD2SCNYNAYpU8iHXGIDPdz5KX9UP7ifnoHrVamZWX1P7wPDcTqXj
y4eHS4VvZ3OskMbIkkeEGsyQRZFRzuq1MB+lLUNwIlbu5sZbRTpgtCb+WIxBdokO
Wri459WiNTphLaG1pHhMXm8NLqHQRtGzM7u5p5YEOlJTQpHBLu+DDGLEJuQ03Pf+
ZWaj6dsgXLsXeMEgIz5y/i+krJp7CDQi2m4QtmtMsXwLNjvRP0ziNl+JUQIDAQAB
o4ICljCCApIwHQYDVR0OBBYEFLFCe9zUfHhDH2YqCFiQBay1C5NBMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNhLzIwYTc2
Ny03YjQxLTQ2M2ItYTZjOS01ZmM4ZTYzMjc4ODkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2EvMjBhNzY3
LTdiNDEtNDYzYi1hNmM5LTVmYzhlNjMyNzg4OS8xL3NVSjczTlI4ZUVNZlppb0lX
SkFGckxVTGswRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUF
BwEHAQH/BCIwIDAeBAIAATAYAwQAW+o2AwQAW+uUAwQAW+vxAwQAW+wMMA0GCSqG
SIb3DQEBCwUAA4IBAQAH7rJ85uhf5jTzP4has1K+pVQKXeSpebLe3u/2jJXG4vbv
z3gEng8/OdtXppeocnjCMX/u577IBkiHocWGj1v0UnXLvt7aPbP7Bw2IHY5s034h
SiECEdIrhHyAGuQneyaEqyxlcS5JAiTV17/7nUYzaN5H8EbYb+TcSlHeHOpgP3Uy
3p53HPoP49O+0VOodMA+7o34fWzc0PTRqXF2gos2XjWPUAwHP6Fai16tbJYTzqDf
ibY9MWFAF4/M10UB/4eKYwzpW5m8tb9ypBgd8ho9BPr2wMXxpl0i58Fs8z9cUkx1
HWzMQWntw9jmp2WZS8wrKVzoZnjqbkqaaVouboB5
-----END CERTIFICATE-----
Generated at Fri May 3 03:46:35 2024 by rpki-client on console-fra.rpki-client.org