Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
File: tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer (raw, json)
Hash identifier: 45QJtuTrf3hwx1gH3EMYqYH2C/7BdrpwIZG/9CqlyHw=
Subject key identifier: B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC34936EADE6E0C383C4B43EB727C236B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:30:04 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 21060
AS: 44433
AS: 51251
IP: 80.82.96.0/20
IP: 80.89.16.0/20
IP: 91.195.58.0/23
IP: 91.213.70.0/24
IP: 92.43.232.0/21
IP: 185.134.252.0/22
IP: 185.155.36.0/22
IP: 188.244.64.0/20
IP: 194.8.244.0/23
IP: 2a02:6c0::/32
IP: 2a02:7c00::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:36:ea:de:6e:0c:38:3c:4b:43:eb:72:7c:23:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b478410224904494e9c0f7d35650a260e5fb6193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a5:1d:6b:e4:50:a4:a1:de:3e:92:c4:ea:e8:
46:aa:7d:07:6e:f7:28:ab:0a:93:74:a7:78:d9:3e:
e3:59:91:41:82:a4:9e:9d:82:bb:77:04:2b:c8:01:
0d:50:0f:58:4d:66:98:01:ed:f7:2a:00:0f:b7:e9:
e1:7d:2d:dc:34:65:3c:74:ea:32:33:51:c0:f3:2b:
18:d9:42:24:8a:ba:89:12:62:b8:29:e4:3e:58:3e:
82:b2:ae:fc:9d:35:8f:d3:5c:f0:da:86:1c:d8:ad:
33:7d:9a:6b:40:21:bf:47:7b:00:18:62:e6:11:f6:
61:34:f1:f6:15:33:7a:aa:f5:a9:2b:58:6c:85:e2:
0f:24:7f:ee:1d:88:02:29:74:f3:90:ac:f7:ce:1d:
80:12:af:6d:d5:e6:22:48:c7:26:d4:71:0d:98:93:
39:d1:ec:a9:7e:db:ef:aa:e1:23:f1:bb:73:35:53:
27:79:76:4b:5a:d5:e5:d9:6f:4b:7f:c5:c0:b4:ab:
c2:08:d2:4e:ac:87:cc:d7:02:2c:2d:24:9d:be:48:
39:dc:35:7a:86:2f:c9:fd:7a:a8:e3:d6:68:af:0b:
67:93:a7:94:09:03:8c:7f:d3:ea:66:39:36:49:02:
b2:62:b3:bf:c4:d2:f6:a0:7f:9c:84:f9:d2:41:57:
27:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.82.96.0/20
80.89.16.0/20
91.195.58.0/23
91.213.70.0/24
92.43.232.0/21
185.134.252.0/22
185.155.36.0/22
188.244.64.0/20
194.8.244.0/23
IPv6:
2a02:6c0::/32
2a02:7c00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21060
44433
51251
Signature Algorithm: sha256WithRSAEncryption
9f:40:f6:54:b3:fa:ae:4c:b9:d8:19:b8:7f:c6:c7:d5:ba:21:
3f:a4:f5:3f:bb:3c:c4:e2:6c:52:fe:ec:c2:17:6a:63:cf:e7:
14:93:34:f5:99:2d:17:1c:c7:e7:d2:af:5a:7b:2a:ed:1c:ed:
1f:39:2e:32:2b:99:af:e3:be:e6:05:cb:f0:e0:0c:ba:bb:d1:
27:39:56:1c:bb:e7:c6:43:57:70:60:ab:e3:93:06:0f:78:df:
dc:ad:4a:99:64:20:ba:ff:90:1c:93:bb:1b:48:5e:e9:93:1d:
ab:4e:33:11:88:ca:b5:07:f1:00:f3:b3:93:77:36:1e:77:93:
ca:3b:17:b1:6e:9e:11:66:2b:34:ee:8e:2f:4b:20:4d:51:f3:
28:09:46:87:90:8a:1c:e9:08:c6:3e:f1:1b:29:c9:45:6a:79:
62:ce:cc:6a:41:ae:03:ad:56:bf:8e:51:ef:77:79:71:7e:11:
71:85:ef:d1:9b:b6:ce:2c:15:c6:d3:4d:a7:71:d4:25:ec:4f:
21:d1:72:0a:35:a4:7e:a3:e0:ca:fa:03:65:34:36:fb:e7:88:
0d:f8:8c:17:2b:7c:9b:92:80:41:f3:bf:0a:a0:a7:3d:c7:a5:
5f:9e:9a:ed:bc:ed:ca:e4:a4:89:30:3e:dd:4b:75:7e:21:50:
af:3a:54:cb
-----BEGIN CERTIFICATE-----
MIIF4zCCBMugAwIBAgISAYzDSTbq3m4MODxLQ+tyfCNrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDQzMDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDc4NDEwMjI0OTA0NDk0ZTljMGY3ZDM1NjUwYTI2MGU1ZmI2MTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqUda+RQpKHePpLE6uhGqn0Hbvco
qwqTdKd42T7jWZFBgqSenYK7dwQryAENUA9YTWaYAe33KgAPt+nhfS3cNGU8dOoy
M1HA8ysY2UIkirqJEmK4KeQ+WD6Csq78nTWP01zw2oYc2K0zfZprQCG/R3sAGGLm
EfZhNPH2FTN6qvWpK1hsheIPJH/uHYgCKXTzkKz3zh2AEq9t1eYiSMcm1HENmJM5
0eypftvvquEj8btzNVMneXZLWtXl2W9Lf8XAtKvCCNJOrIfM1wIsLSSdvkg53DV6
hi/J/Xqo49Zorwtnk6eUCQOMf9PqZjk2SQKyYrO/xNL2oH+chPnSQVcnrwIDAQAB
o4IC7zCCAuswHQYDVR0OBBYEFLR4QQIkkESU6cD301ZQomDl+2GTMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U4LzVjZmJm
My1lNzgyLTQwMTMtOGVlZS1kZTdkM2JiZmVlODgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTgvNWNmYmYz
LWU3ODItNDAxMy04ZWVlLWRlN2QzYmJmZWU4OC8xL3RIaEJBaVNRUkpUcHdQZlRW
bENpWU9YN1laTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGCCsGAQUF
BwEHAQH/BFYwVDA8BAIAATA2AwQEUFJgAwQEUFkQAwQBW8M6AwQAW9VGAwQDXCvo
AwQCuYb8AwQCuZskAwQEvPRAAwQBwgj0MBQEAgACMA4DBQAqAgbAAwUAKgJ8ADAj
BggrBgEFBQcBCAEB/wQUMBKgEDAOAgJSRAIDAK2RAgMAyDMwDQYJKoZIhvcNAQEL
BQADggEBAJ9A9lSz+q5MudgZuH/Gx9W6IT+k9T+7PMTibFL+7MIXamPP5xSTNPWZ
LRccx+fSr1p7Ku0c7R85LjIrma/jvuYFy/DgDLq70Sc5Vhy758ZDV3Bgq+OTBg94
39ytSplkILr/kByTuxtIXumTHatOMxGIyrUH8QDzs5N3Nh53k8o7F7FunhFmKzTu
ji9LIE1R8ygJRoeQihzpCMY+8RspyUVqeWLOzGpBrgOtVr+OUe93eXF+EXGF79Gb
ts4sFcbTTadx1CXsTyHRcgo1pH6j4Mr6A2U0NvvniA34jBcrfJuSgEHzvwqgpz3H
pV+emu287crkpIkwPt1LdX4hUK86VMs=
-----END CERTIFICATE-----
Generated at Fri May 3 02:17:11 2024 by rpki-client on console-ams.rpki-client.org