Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tTcRWWHGq_W4er5KIAU-SsobbsI.cer
File: tTcRWWHGq_W4er5KIAU-SsobbsI.cer (raw, json)
Hash identifier: fLa66Mir8A90sAWzwac5twXnUQg2CjyL64r7pjBuQM0=
Subject key identifier: B5:37:11:59:61:C6:AB:F5:B8:7A:BE:4A:20:05:3E:4A:CA:1B:6E:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC794E75536D2CCA6AF763C447480584D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:31:13 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 207413
IP: 91.194.140.0/23
IP: 91.194.166.0/23
IP: 2a0f:9e80::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:e7:55:36:d2:cc:a6:af:76:3c:44:74:80:58:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:31:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b537115961c6abf5b87abe4a20053e4aca1b6ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ae:28:77:01:ea:a8:ba:0c:c2:04:92:0e:90:
4d:22:a4:09:c3:5e:ce:40:52:37:08:6e:ad:26:17:
22:aa:f0:3d:9e:08:04:6e:14:71:19:db:e3:eb:d5:
1d:b9:1e:ae:9b:20:7a:86:5c:d0:4c:55:e5:41:53:
de:7d:23:89:29:3c:df:21:e4:6b:e7:96:47:14:0d:
dd:cf:ca:1c:42:28:12:c4:d4:ed:83:de:d1:4a:b8:
41:de:41:58:63:29:99:c0:0a:37:df:b1:99:49:6f:
cb:83:f3:f7:0c:21:4a:53:7a:b1:2e:f0:ed:3b:9a:
bc:c6:f1:55:c3:05:d5:39:58:1f:a9:43:a7:f3:fd:
72:55:b9:5d:3a:ef:89:da:b2:40:2d:cf:26:4e:1c:
4d:88:7e:1f:f2:e2:23:1a:fe:c9:eb:d8:6f:27:4f:
75:38:5f:4d:12:79:7f:4f:57:a5:35:b6:8b:6e:fe:
d6:68:0d:bd:33:84:15:03:63:8c:9e:2b:c0:0c:fc:
5b:96:91:13:bf:34:0a:28:fc:59:92:4f:3b:b3:62:
3d:ab:1e:b9:18:d3:c4:8c:c3:ef:db:89:71:73:da:
37:7f:90:13:66:67:ea:f9:66:47:1e:ff:5e:9b:06:
02:52:e5:c5:86:67:84:50:3b:84:98:9c:2d:f4:d0:
53:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:37:11:59:61:C6:AB:F5:B8:7A:BE:4A:20:05:3E:4A:CA:1B:6E:C2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.140.0/23
91.194.166.0/23
IPv6:
2a0f:9e80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207413
Signature Algorithm: sha256WithRSAEncryption
98:ce:99:83:13:21:0a:90:5f:d1:f7:75:a2:40:8d:81:87:78:
28:ea:a8:89:59:cc:9e:04:d1:97:ee:80:34:ae:92:b2:6f:d5:
b1:90:24:cb:92:33:32:bb:cd:8e:4f:bd:ce:3b:a7:2d:e8:a3:
77:01:70:ba:6c:d4:79:0d:41:e1:04:f3:0e:73:93:d0:9e:5c:
03:32:5a:f1:25:8a:bc:78:26:cc:f2:d6:f2:62:ca:f2:72:e5:
aa:79:98:23:64:1f:19:35:e7:1f:b6:b5:e5:f8:98:bc:4c:39:
91:18:fa:1a:2e:91:cf:43:d1:ff:a2:32:16:ba:56:9d:c5:a5:
67:dd:ac:8b:29:cb:2c:7f:03:b6:21:6f:09:4f:cc:3d:a6:00:
4d:7b:29:35:55:e4:51:91:bc:f3:b6:3c:b7:29:9e:0f:54:0e:
51:4c:cf:13:63:2a:e3:a0:44:64:20:68:1b:53:8a:1c:50:80:
d8:d4:50:54:29:c6:ab:40:ce:db:e5:5f:8f:c5:50:1c:70:df:
55:1d:39:49:e1:48:90:1b:a5:a1:6a:be:93:85:28:f1:ad:bc:
32:e4:85:6d:6a:8a:ed:00:dc:dc:6c:cf:9e:db:1b:29:ee:a7:
81:ca:bf:dc:fb:14:ad:00:ea:87:69:f9:91:11:b8:12:0c:64:
c4:18:cc:fd
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAYzHlOdVNtLMpq92PER0gFhNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDAzMTEzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTM3MTE1OTYxYzZhYmY1Yjg3YWJlNGEyMDA1M2U0YWNhMWI2ZWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt64odwHqqLoMwgSSDpBNIqQJw17O
QFI3CG6tJhciqvA9nggEbhRxGdvj69UduR6umyB6hlzQTFXlQVPefSOJKTzfIeRr
55ZHFA3dz8ocQigSxNTtg97RSrhB3kFYYymZwAo337GZSW/Lg/P3DCFKU3qxLvDt
O5q8xvFVwwXVOVgfqUOn8/1yVbldOu+J2rJALc8mThxNiH4f8uIjGv7J69hvJ091
OF9NEnl/T1elNbaLbv7WaA29M4QVA2OMnivADPxblpETvzQKKPxZkk87s2I9qx65
GNPEjMPv24lxc9o3f5ATZmfq+WZHHv9emwYCUuXFhmeEUDuEmJwt9NBToQIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFLU3EVlhxqv1uHq+SiAFPkrKG27CMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VmLzI2Y2M2
YS02ZjE3LTQwYTktYjk4Ny02ZmM3MTcxNzVlNTgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWYvMjZjYzZh
LTZmMTctNDBhOS1iOTg3LTZmYzcxNzE3NWU1OC8xL3RUY1JXV0hHcV9XNGVyNUtJ
QVUtU3NvYmJzSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQBW8KMAwQBW8KmMA0EAgACMAcDBQAqD56AMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMqNTANBgkqhkiG9w0BAQsFAAOCAQEAmM6Z
gxMhCpBf0fd1okCNgYd4KOqoiVnMngTRl+6ANK6Ssm/VsZAky5IzMrvNjk+9zjun
LeijdwFwumzUeQ1B4QTzDnOT0J5cAzJa8SWKvHgmzPLW8mLK8nLlqnmYI2QfGTXn
H7a15fiYvEw5kRj6Gi6Rz0PR/6IyFrpWncWlZ92siynLLH8DtiFvCU/MPaYATXsp
NVXkUZG887Y8tymeD1QOUUzPE2Mq46BEZCBoG1OKHFCA2NRQVCnGq0DO2+Vfj8VQ
HHDfVR05SeFIkBuloWq+k4Uo8a28MuSFbWqK7QDc3GzPntsbKe6ngcq/3PsUrQDq
h2n5kRG4EgxkxBjM/Q==
-----END CERTIFICATE-----
Generated at Fri May 3 14:05:27 2024 by rpki-client on console-fra.rpki-client.org