Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
File: t3M-nelIW0RnHI5RHaIh5BU8cRs.cer (raw, json)
Hash identifier: TZzj5In/0U7RyXvFOV6nTBtm4YUGkAvBuFEWd4Z+JSw=
Subject key identifier: B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC42475F2DA64D483E1C8A6CBFA024858
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 209828
IP: 91.241.48.0/22
IP: 194.5.236.0/23
IP: 2a00:7540::/29
IP: 2a0c:8dc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:75:f2:da:64:d4:83:e1:c8:a6:cb:fa:02:48:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7733e9de9485b44671c8e511da221e4153c711b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:dc:a0:db:5b:d2:78:42:33:9f:2b:0f:f3:98:
6c:e4:43:81:96:1a:68:b8:b1:9c:17:e3:a6:3a:83:
33:c3:d3:0a:9f:51:03:a0:fb:44:b1:e5:86:13:a1:
08:ff:67:9c:d0:72:a5:1a:2d:63:4c:37:9a:ac:6a:
54:c7:5a:60:64:0d:35:8e:2d:4b:86:df:9b:7a:87:
fc:f5:55:0a:cf:c7:df:00:bb:9e:31:32:6b:e5:bb:
22:7b:3f:e0:77:af:f4:29:52:3b:57:d0:d5:10:f4:
ce:c2:0c:ec:55:38:43:b4:bd:28:83:90:d6:1f:75:
fd:26:1b:dd:7a:5d:78:be:94:e9:00:c5:0c:e2:bd:
32:61:b5:ea:58:8e:eb:3a:21:d0:ec:a4:7e:03:39:
37:34:69:55:6e:ef:bf:bd:43:e9:fa:d0:58:44:a0:
e0:3d:5c:87:82:1d:54:ee:7a:96:e1:cb:1e:d0:62:
81:07:fa:16:b9:fb:95:3f:4d:18:c6:72:9e:0a:e5:
a4:57:bd:12:ae:f4:1b:53:e4:30:29:a5:cc:59:a9:
e7:59:c3:de:2e:16:18:42:da:d6:f9:42:79:b1:89:
40:f6:c6:85:17:a0:0e:46:66:97:29:07:8d:da:b0:
25:e4:07:49:1a:43:1c:e5:43:49:8e:72:36:b7:28:
db:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.48.0/22
194.5.236.0/23
IPv6:
2a00:7540::/29
2a0c:8dc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209828
Signature Algorithm: sha256WithRSAEncryption
72:9b:80:01:05:81:f5:a0:86:b2:95:ec:00:c4:9a:29:df:2a:
61:5d:3d:ba:63:7b:63:e3:e9:85:72:e3:0e:0e:b4:c0:80:3d:
98:e6:89:f1:a1:08:a9:d7:7d:1f:02:ea:dc:69:cb:fc:91:fc:
88:08:a8:1c:7d:c9:6d:4d:49:79:be:cf:24:d0:ac:b5:0c:1d:
fc:c0:10:05:e2:8e:d7:f5:0f:fb:5d:02:57:74:85:79:d2:79:
5a:7c:7c:19:c5:54:d1:b7:25:f0:02:0c:36:b1:a2:5b:8f:15:
20:34:3d:77:ef:7d:c2:1f:9f:30:18:6c:08:b7:4e:d5:b9:02:
d1:ae:46:31:ac:51:04:53:57:e8:56:6f:00:99:c7:91:24:78:
dd:70:af:93:65:ff:d4:f4:16:d6:20:82:76:58:b4:c6:e8:f9:
cc:ba:9a:1f:75:23:a7:e4:52:c8:dd:68:56:2c:b8:c1:1a:b8:
eb:35:6b:f4:fb:7f:74:c2:24:c3:1a:ce:db:59:d0:0d:60:7a:
2f:40:e8:eb:a0:e5:72:a0:af:21:b5:96:e5:ed:05:d6:8a:75:
96:ff:d2:b3:c6:7a:56:76:9f:3b:31:ca:b2:29:b3:fb:44:64:
64:c1:0e:80:b6:ca:a1:f5:8c:bd:6c:a2:1a:59:78:b9:f7:5c:
8a:f6:fd:7e
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgISAYzEJHXy2mTUg+HIpsv6AkhYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDgyOTMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzczM2U5ZGU5NDg1YjQ0NjcxYzhlNTExZGEyMjFlNDE1M2M3MTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNyg21vSeEIznysP85hs5EOBlhpo
uLGcF+OmOoMzw9MKn1EDoPtEseWGE6EI/2ec0HKlGi1jTDearGpUx1pgZA01ji1L
ht+beof89VUKz8ffALueMTJr5bsiez/gd6/0KVI7V9DVEPTOwgzsVThDtL0og5DW
H3X9Jhvdel14vpTpAMUM4r0yYbXqWI7rOiHQ7KR+Azk3NGlVbu+/vUPp+tBYRKDg
PVyHgh1U7nqW4cse0GKBB/oWufuVP00YxnKeCuWkV70SrvQbU+QwKaXMWannWcPe
LhYYQtrW+UJ5sYlA9saFF6AORmaXKQeN2rAl5AdJGkMc5UNJjnI2tyjbLwIDAQAB
o4ICvDCCArgwHQYDVR0OBBYEFLdzPp3pSFtEZxyOUR2iIeQVPHEbMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYxLzE3ZTQ1
MC04ODE4LTRhMjctOWYzNS01MThjZDE0NzEzZWIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjEvMTdlNDUw
LTg4MTgtNGEyNy05ZjM1LTUxOGNkMTQ3MTNlYi8xL3QzTS1uZWxJVzBSbkhJNVJI
YUloNUJVOGNScy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF
BwEHAQH/BCwwKjASBAIAATAMAwQCW/EwAwQBwgXsMBQEAgACMA4DBQMqAHVAAwUD
KgyNwDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDM6QwDQYJKoZIhvcNAQELBQAD
ggEBAHKbgAEFgfWghrKV7ADEminfKmFdPbpje2Pj6YVy4w4OtMCAPZjmifGhCKnX
fR8C6txpy/yR/IgIqBx9yW1NSXm+zyTQrLUMHfzAEAXijtf1D/tdAld0hXnSeVp8
fBnFVNG3JfACDDaxoluPFSA0PXfvfcIfnzAYbAi3TtW5AtGuRjGsUQRTV+hWbwCZ
x5EkeN1wr5Nl/9T0FtYggnZYtMbo+cy6mh91I6fkUsjdaFYsuMEauOs1a/T7f3TC
JMMazttZ0A1gei9A6Oug5XKgryG1luXtBdaKdZb/0rPGelZ2nzsxyrIps/tEZGTB
DoC2yqH1jL1sohpZeLn3XIr2/X4=
-----END CERTIFICATE-----
Generated at Fri May 3 07:32:29 2024 by rpki-client on console-ams.rpki-client.org