Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
File: tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer (raw, json)
Hash identifier: c9mnAmgIyXLr9GF8JZrcKUpiT/H4jx5cCdSoEq+8b/o=
Subject key identifier: B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2A29183DD258948C5D188EA9494E9B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:33:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 35781
IP: 194.88.150.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:29:18:3d:d2:58:94:8c:5d:18:8e:a9:49:4e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:33:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:68:88:fd:2b:ff:d7:e8:d0:cf:2a:60:00:0f:
d5:71:45:c9:80:cd:1f:70:c7:e7:d4:13:99:cb:c7:
15:60:45:3e:ec:6d:54:30:0a:c0:af:f4:35:a3:a7:
88:4f:34:a9:3b:21:0b:11:8a:cd:89:69:dc:18:a7:
a4:be:41:7d:ed:69:6b:21:fc:f5:bd:3e:5b:24:cf:
84:00:cb:7f:1e:1d:e1:a1:9a:67:b5:1e:d5:d2:94:
64:66:b2:00:0b:21:fe:a4:3d:a7:0f:05:fb:69:39:
8e:a8:2b:b3:ba:ed:8e:d7:31:3d:bc:de:b8:20:af:
b4:dc:cf:c6:f8:24:77:d4:19:57:19:4b:5c:cb:b8:
0e:dd:a5:08:6c:83:18:d6:c6:1f:39:45:49:f7:9b:
60:a5:6e:53:5b:ca:c5:32:5e:1c:28:74:ea:c6:d0:
90:2d:ed:d6:a7:f3:bf:71:fd:6c:d3:0b:de:81:ce:
e8:a4:ca:04:b0:4d:c7:32:77:64:e6:30:c2:d8:59:
76:2d:83:ee:a5:0f:86:bd:ad:95:79:ff:10:f7:38:
fb:02:a7:87:5e:77:72:a1:2f:06:d5:a3:af:95:82:
af:b2:74:5d:1c:d7:45:1f:c2:09:d6:71:a8:39:f2:
66:ed:29:45:bf:ef:3a:ba:7f:bf:45:7e:5a:d0:e9:
ed:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.88.150.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35781
Signature Algorithm: sha256WithRSAEncryption
34:2e:90:a8:40:4a:13:aa:3d:c0:7c:62:b6:bd:71:a9:a2:63:
56:ef:e3:21:41:4d:72:56:a9:1b:c9:35:fc:7b:9b:75:43:1f:
c6:14:97:25:7e:51:f8:24:3a:be:e9:26:ac:e1:7f:64:29:98:
38:da:11:14:53:30:79:44:47:be:58:6b:46:34:4b:a3:21:b8:
e7:9a:8e:4a:e1:32:b7:eb:c4:b0:39:c1:8c:9a:ca:0b:9c:a6:
0b:19:12:e1:ce:3a:78:a0:ad:bd:48:cb:7d:26:c1:d0:98:ce:
92:93:67:5a:83:8c:7c:9d:41:cf:9f:fb:ae:c6:c4:fc:15:6a:
c1:28:c3:d3:c9:d4:59:82:01:9b:dd:f1:b2:30:c0:8a:c1:56:
1b:fe:d4:69:5d:ec:ae:92:40:44:f9:ce:31:54:93:1e:24:16:
c4:a7:9a:68:71:42:42:c4:28:e1:4e:a1:30:ec:0b:10:a1:cd:
58:0a:47:f4:e7:bf:63:f5:af:8d:9e:3d:6c:31:07:44:0b:c0:
9f:b1:8c:70:00:d0:3c:91:1c:77:49:30:12:08:b6:66:18:13:
85:3d:0c:8d:17:9d:00:a4:93:87:6c:5e:e8:55:fc:95:99:7b:
c0:1e:d3:64:41:c0:75:e6:fe:5d:7b:c9:ab:3a:38:d4:ac:5c:
03:9c:d8:78
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYzKKikYPdJYlIxdGI6pSU6bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTIzMzI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNWM3ZDgxZWM0YzQwNTVjNjczZmY1NzFjY2FkMDdjM2E2OTkxMDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2iI/Sv/1+jQzypgAA/VcUXJgM0f
cMfn1BOZy8cVYEU+7G1UMArAr/Q1o6eITzSpOyELEYrNiWncGKekvkF97WlrIfz1
vT5bJM+EAMt/Hh3hoZpntR7V0pRkZrIACyH+pD2nDwX7aTmOqCuzuu2O1zE9vN64
IK+03M/G+CR31BlXGUtcy7gO3aUIbIMY1sYfOUVJ95tgpW5TW8rFMl4cKHTqxtCQ
Le3Wp/O/cf1s0wvegc7opMoEsE3HMndk5jDC2Fl2LYPupQ+Gva2Vef8Q9zj7AqeH
XndyoS8G1aOvlYKvsnRdHNdFH8IJ1nGoOfJm7SlFv+86un+/RX5a0OntPQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFLXH2B7ExAVcZz/1ccytB8OmmRBeMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FmLzY3MmEy
Zi1hYzJiLTQ2MzEtYWIzZC1jMmJjMTQ1MWYyNzEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYvNjcyYTJm
LWFjMmItNDYzMS1hYjNkLWMyYmMxNDUxZjI3MS8xL3RjZllIc1RFQlZ4blBfVnh6
SzBIdzZhWkVGNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQBwliWMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwCLxTANBgkqhkiG9w0BAQsFAAOCAQEANC6QqEBKE6o9wHxitr1xqaJjVu/jIUFN
clapG8k1/HubdUMfxhSXJX5R+CQ6vukmrOF/ZCmYONoRFFMweURHvlhrRjRLoyG4
55qOSuEyt+vEsDnBjJrKC5ymCxkS4c46eKCtvUjLfSbB0JjOkpNnWoOMfJ1Bz5/7
rsbE/BVqwSjD08nUWYIBm93xsjDAisFWG/7UaV3srpJARPnOMVSTHiQWxKeaaHFC
QsQo4U6hMOwLEKHNWApH9Oe/Y/WvjZ49bDEHRAvAn7GMcADQPJEcd0kwEgi2ZhgT
hT0MjRedAKSTh2xe6FX8lZl7wB7TZEHAdeb+XXvJqzo41KxcA5zYeA==
-----END CERTIFICATE-----
Generated at Fri May 3 11:03:20 2024 by rpki-client on console-fra.rpki-client.org