Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sxQ5IJVoAqjrS0Ynov9POYfsGj0.cer
File: sxQ5IJVoAqjrS0Ynov9POYfsGj0.cer (raw, json)
Hash identifier: K3TScC539ogLmA8p8pZpXljg6C8di8Ra/tdZNDzWGto=
Subject key identifier: B3:14:39:20:95:68:02:A8:EB:4B:46:27:A2:FF:4F:39:87:EC:1A:3D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2970FBC6008C24C97F47C0C36EE91E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/a1c142-8943-49f4-8cc9-6ef2b9d7f104/1/sxQ5IJVoAqjrS0Ynov9POYfsGj0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/a1c142-8943-49f4-8cc9-6ef2b9d7f104/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:32:42 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 81.25.16.0/20
IP: 109.234.40.0/21
IP: 185.255.116.0/22
IP: 2a00:1800::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:70:fb:c6:00:8c:24:c9:7f:47:c0:c3:6e:e9:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:32:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3143920956802a8eb4b4627a2ff4f3987ec1a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:45:b5:01:de:41:28:ba:f9:e0:3c:c9:7a:c5:
d5:32:0d:e5:11:e1:1c:3f:0c:91:8d:6b:1d:41:77:
54:ad:ef:de:fa:92:84:c0:77:5a:d8:54:99:89:9c:
f3:93:0c:41:3e:00:15:92:ea:e7:e7:b4:cf:9d:88:
fe:4f:7f:e4:c2:33:f4:fc:55:4e:98:fd:86:98:e3:
3d:94:5e:68:3d:b7:01:61:e4:dc:b3:72:90:7a:e0:
14:97:49:b7:d2:28:dc:93:fa:ce:b0:64:cd:6f:24:
d6:b6:72:09:14:14:73:d9:e9:ef:20:cf:0c:9b:df:
cc:04:59:9e:9c:81:84:62:a0:4e:74:ce:a0:07:de:
1e:f8:75:0e:a2:27:23:db:f1:13:af:ff:af:e6:90:
a3:85:04:d2:82:32:9c:0e:ea:b7:31:ea:ca:5a:9b:
fb:f5:15:cd:b2:f1:89:4a:fb:71:4b:f3:0a:1c:e8:
43:d6:dd:f1:37:71:dd:8f:a6:23:1f:c0:e3:f5:f8:
bf:e0:13:40:6e:33:d5:0f:15:b8:12:92:70:e3:34:
19:c7:e8:0e:1d:24:82:7f:fd:10:14:1c:39:16:b4:
0e:77:3c:f7:56:db:4a:98:97:2c:21:1e:e4:2a:10:
05:a9:d1:35:30:aa:4c:1d:ab:61:36:87:77:75:15:
2e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:14:39:20:95:68:02:A8:EB:4B:46:27:A2:FF:4F:39:87:EC:1A:3D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a1c142-8943-49f4-8cc9-6ef2b9d7f104/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a1c142-8943-49f4-8cc9-6ef2b9d7f104/1/sxQ5IJVoAqjrS0Ynov9POYfsGj0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.25.16.0/20
109.234.40.0/21
185.255.116.0/22
IPv6:
2a00:1800::/29
Signature Algorithm: sha256WithRSAEncryption
0e:fb:95:54:c5:83:56:1d:45:da:19:29:97:62:f1:65:d2:9c:
74:9c:2f:44:96:78:60:3c:cf:da:80:4e:f6:b8:b8:f4:76:c3:
44:73:4e:2e:30:71:2a:f3:75:f7:68:a5:9e:3f:76:ac:6c:57:
5c:e8:c7:3c:5e:fb:ef:c6:26:56:17:ad:a5:be:8b:8f:5d:b7:
fb:ff:4c:d5:9b:d7:38:98:4c:7b:c0:6b:fc:e7:48:32:80:90:
39:3a:5b:65:63:f3:44:a3:1f:a9:24:34:cd:05:62:24:7e:01:
31:18:e6:b9:ba:4a:79:b0:e5:1f:00:f6:5f:f3:dd:b7:14:ae:
dc:7a:04:b5:2e:eb:0f:b3:81:50:d8:29:c7:7e:02:2c:88:6c:
5d:37:3f:85:5d:38:64:9e:19:9b:63:cb:ee:25:ae:94:66:66:
e5:8d:eb:1b:50:65:c5:8e:1f:d4:5f:6c:59:9a:e3:46:54:15:
a3:a7:11:76:23:c9:1d:9a:10:46:0e:21:1b:73:5f:94:e0:f4:
56:9d:9b:98:aa:d1:d4:ab:49:b8:ea:b7:6c:1c:05:10:c9:9d:
c3:64:a8:23:10:73:e2:cd:d1:51:5e:23:1a:04:ee:1e:40:fc:
be:0f:66:28:cb:e7:c1:ef:c8:60:e3:65:1a:95:69:f8:1b:8e:
cf:56:5f:34
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgISAYzKKXD7xgCMJMl/R8DDbukeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTIzMjQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzE0MzkyMDk1NjgwMmE4ZWI0YjQ2MjdhMmZmNGYzOTg3ZWMxYTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUW1Ad5BKLr54DzJesXVMg3lEeEc
PwyRjWsdQXdUre/e+pKEwHda2FSZiZzzkwxBPgAVkurn57TPnYj+T3/kwjP0/FVO
mP2GmOM9lF5oPbcBYeTcs3KQeuAUl0m30ijck/rOsGTNbyTWtnIJFBRz2envIM8M
m9/MBFmenIGEYqBOdM6gB94e+HUOoicj2/ETr/+v5pCjhQTSgjKcDuq3MerKWpv7
9RXNsvGJSvtxS/MKHOhD1t3xN3Hdj6YjH8Dj9fi/4BNAbjPVDxW4EpJw4zQZx+gO
HSSCf/0QFBw5FrQOdzz3VttKmJcsIR7kKhAFqdE1MKpMHathNod3dRUuJwIDAQAB
o4ICnzCCApswHQYDVR0OBBYEFLMUOSCVaAKo60tGJ6L/TzmH7Bo9MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JlL2ExYzE0
Mi04OTQzLTQ5ZjQtOGNjOS02ZWYyYjlkN2YxMDQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUvYTFjMTQy
LTg5NDMtNDlmNC04Y2M5LTZlZjJiOWQ3ZjEwNC8xL3N4UTVJSlZvQXFqclMwWW5v
djlQT1lmc0dqMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF
BwEHAQH/BCswKTAYBAIAATASAwQEURkQAwQDbeooAwQCuf90MA0EAgACMAcDBQMq
ABgAMA0GCSqGSIb3DQEBCwUAA4IBAQAO+5VUxYNWHUXaGSmXYvFl0px0nC9Elnhg
PM/agE72uLj0dsNEc04uMHEq83X3aKWeP3asbFdc6Mc8XvvvxiZWF62lvouPXbf7
/0zVm9c4mEx7wGv850gygJA5OltlY/NEox+pJDTNBWIkfgExGOa5ukp5sOUfAPZf
8923FK7cegS1LusPs4FQ2CnHfgIsiGxdNz+FXThknhmbY8vuJa6UZmbljesbUGXF
jh/UX2xZmuNGVBWjpxF2I8kdmhBGDiEbc1+U4PRWnZuYqtHUq0m46rdsHAUQyZ3D
ZKgjEHPizdFRXiMaBO4eQPy+D2Yoy+fB78hg42UalWn4G47PVl80
-----END CERTIFICATE-----
Generated at Fri May 3 02:16:56 2024 by rpki-client on console-ams.rpki-client.org