Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer
File: v5joFwlZteYBj2ArOnSHstgCgQY.cer (raw, json)
Hash identifier: k+bqfPdg2C32grW535Im4QnJawM2qEDe7nuuwqt1YJ4=
Subject key identifier: BF:98:E8:17:09:59:B5:E6:01:8F:60:2B:3A:74:87:B2:D8:02:81:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA9A16CC6264BE4BD13E7C0151F37EDC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 14:35:45 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 47631
IP: 93.187.224.0/21
IP: 185.34.124.0/22
IP: 2a00:9460::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:9a:16:cc:62:64:be:4b:d1:3e:7c:01:51:f3:7e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 14:35:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf98e8170959b5e6018f602b3a7487b2d8028106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e1:54:7c:b6:4c:e0:19:48:ab:f9:ab:df:96:
70:33:c2:82:37:90:69:e6:9b:23:22:08:84:ac:74:
1e:39:e6:6f:e8:ba:e9:53:3d:b2:19:10:02:35:a3:
5a:ac:17:4c:5a:82:e7:2a:6f:18:40:5c:29:df:af:
f4:58:ce:22:cc:32:50:57:db:69:d7:19:14:d4:d1:
84:4a:92:50:9e:ec:c1:79:9e:a9:e5:ec:e8:88:8d:
ab:59:43:28:fc:3a:61:9c:0e:9d:9c:46:54:4a:58:
b7:bd:12:4d:5f:bb:7b:e1:22:2b:2c:6f:97:d9:eb:
41:6e:1c:31:e5:87:5b:ba:89:fb:5a:69:66:c0:a6:
ba:cc:90:30:19:3c:bc:3c:5b:b3:84:f0:e6:73:1d:
8b:3f:05:d7:2c:b5:76:31:6c:0d:42:a5:36:a3:88:
6f:f9:af:c8:3e:38:98:ee:78:5d:24:8c:99:a9:dd:
44:0c:4c:fa:30:18:4d:94:eb:77:61:ac:4b:d7:82:
08:5d:32:cc:cf:98:7b:5c:f4:61:5f:a0:bb:8e:03:
08:e1:61:a7:a3:b6:d6:81:91:1f:2e:9f:70:7d:bf:
ab:c5:b2:26:be:59:74:42:07:3a:39:95:83:8b:0d:
e6:2e:7a:db:86:4a:08:b5:2b:94:ab:52:b2:10:07:
a8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:98:E8:17:09:59:B5:E6:01:8F:60:2B:3A:74:87:B2:D8:02:81:06
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.187.224.0/21
185.34.124.0/22
IPv6:
2a00:9460::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47631
Signature Algorithm: sha256WithRSAEncryption
14:45:77:3d:0f:9a:fa:80:ba:de:61:0c:5b:b8:d1:10:1b:2c:
db:51:ff:10:90:01:e5:c5:1b:63:e3:e9:14:4a:18:74:4f:34:
23:56:6c:75:68:fa:5e:5a:9c:b7:d5:d2:9a:0b:06:62:7c:f6:
cc:76:f5:ac:81:4e:00:b5:ad:46:90:99:48:d0:48:6a:2b:91:
15:be:7b:88:f0:45:b0:06:92:e8:86:82:23:31:4c:ec:57:48:
cf:6a:e8:29:09:72:f0:51:f8:d6:38:06:b6:7d:01:75:9f:f5:
6d:cd:a8:97:51:e2:26:39:a4:80:0d:fd:0e:4c:4c:d8:ef:91:
1a:87:fc:88:dd:9f:14:cd:a2:85:96:ac:21:a3:b9:c5:dc:db:
dc:b3:21:84:4d:1b:74:37:77:10:b0:e2:65:5b:7d:8a:ec:bb:
4e:d4:5c:e7:02:2b:f4:30:55:6e:05:96:99:47:a1:21:d6:ca:
dc:97:f6:ec:41:0e:5c:38:1c:5b:8e:d6:f9:19:aa:42:c9:7d:
89:05:ef:16:59:2a:f4:c1:9b:ed:6c:a1:e0:5d:42:65:f3:40:
d2:de:18:d7:39:66:61:bd:a8:9d:99:19:37:11:10:8c:7a:09:
6b:74:8d:7c:7d:17:f6:0b:5c:15:21:3f:dc:27:7d:18:68:c8:
9e:e6:51:1d
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAYzKmhbMYmS+S9E+fAFR837cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTQzNTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjk4ZTgxNzA5NTliNWU2MDE4ZjYwMmIzYTc0ODdiMmQ4MDI4MTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+FUfLZM4BlIq/mr35ZwM8KCN5Bp
5psjIgiErHQeOeZv6LrpUz2yGRACNaNarBdMWoLnKm8YQFwp36/0WM4izDJQV9tp
1xkU1NGESpJQnuzBeZ6p5ezoiI2rWUMo/DphnA6dnEZUSli3vRJNX7t74SIrLG+X
2etBbhwx5Ydbuon7WmlmwKa6zJAwGTy8PFuzhPDmcx2LPwXXLLV2MWwNQqU2o4hv
+a/IPjiY7nhdJIyZqd1EDEz6MBhNlOt3YaxL14IIXTLMz5h7XPRhX6C7jgMI4WGn
o7bWgZEfLp9wfb+rxbImvll0Qgc6OZWDiw3mLnrbhkoItSuUq1KyEAeo5wIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFL+Y6BcJWbXmAY9gKzp0h7LYAoEGMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk3LzIzZmIx
YS1hNzkxLTQwMGMtYTQxYS00OGNlZWQ1ZTQzOGUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTcvMjNmYjFh
LWE3OTEtNDAwYy1hNDFhLTQ4Y2VlZDVlNDM4ZS8xL3Y1am9Gd2xadGVZQmoyQXJP
blNIc3RnQ2dRWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQDXbvgAwQCuSJ8MA0EAgACMAcDBQMqAJRgMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwC6DzANBgkqhkiG9w0BAQsFAAOCAQEAFEV3
PQ+a+oC63mEMW7jREBss21H/EJAB5cUbY+PpFEoYdE80I1ZsdWj6Xlqct9XSmgsG
Ynz2zHb1rIFOALWtRpCZSNBIaiuRFb57iPBFsAaS6IaCIzFM7FdIz2roKQly8FH4
1jgGtn0BdZ/1bc2ol1HiJjmkgA39DkxM2O+RGof8iN2fFM2ihZasIaO5xdzb3LMh
hE0bdDd3ELDiZVt9iuy7TtRc5wIr9DBVbgWWmUehIdbK3Jf27EEOXDgcW47W+Rmq
Qsl9iQXvFlkq9MGb7Wyh4F1CZfNA0t4Y1zlmYb2onZkZNxEQjHoJa3SNfH0X9gtc
FSE/3Cd9GGjInuZRHQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 11:04:49 2024 by rpki-client on console-ams.rpki-client.org