Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
File: v9gcqQzFIkWGr-urHHixeQJo1cE.cer (raw, json)
Hash identifier: RRwszFteBMgy/niqj5RUI8Wl2f5oWXXvUoMW8zHgfFU=
Subject key identifier: BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC871525D27A8A32900B3B22D88DD82CC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:31:59 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.149.216.0/22
IP: 2a0f:7600::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:52:5d:27:a8:a3:29:00:b3:b2:2d:88:dd:82:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:31:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7b:ec:92:a4:46:f1:96:0c:a4:d7:f9:7c:8c:
f7:dc:84:03:1d:48:b5:74:c5:f8:74:c5:fe:7e:0d:
7e:bf:10:41:ca:50:69:66:96:c9:fe:1e:a1:8d:75:
80:71:b6:b8:ff:7f:a5:5f:4c:df:da:db:09:72:3b:
ba:2c:62:44:cd:a4:79:5e:f6:6e:aa:79:3e:6a:25:
44:9b:41:71:a7:ca:e2:4b:d2:ae:74:68:b4:f4:cd:
25:9a:89:7b:ef:98:86:2d:f2:6b:2b:49:a3:9e:1e:
05:35:5d:46:8c:ab:29:b1:69:e3:69:c6:88:9c:6d:
b4:fc:f3:f9:2a:c9:45:1c:5a:56:1e:37:1a:80:7e:
19:79:67:99:2d:26:09:bc:d2:60:43:9f:e3:6e:3b:
59:b8:14:94:af:05:50:cf:51:62:14:fb:a9:8b:94:
e9:f8:6d:d0:10:7b:7e:42:43:53:4d:ee:6f:94:d7:
5c:6a:85:a4:14:10:56:9d:78:4f:10:bf:95:d5:a6:
92:c5:02:f4:fa:89:8f:41:e4:0a:25:15:5d:22:e6:
6b:7f:a4:11:93:9a:ac:ca:95:a1:31:41:42:c4:d3:
ce:e1:18:15:97:b8:53:c8:22:31:b5:bd:82:8b:e9:
b7:b2:1a:c6:07:f9:82:38:f9:d6:b2:10:49:b9:49:
59:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.216.0/22
IPv6:
2a0f:7600::/29
Signature Algorithm: sha256WithRSAEncryption
ae:a3:6d:dd:43:c4:61:f5:08:26:4f:b3:05:d9:5b:95:7e:3c:
d5:d6:93:33:fd:14:c0:af:11:76:8f:f9:eb:25:0e:6a:22:7a:
41:a1:f9:5f:52:b7:3e:8e:c9:da:f3:19:47:be:d5:28:fa:31:
33:21:bf:c1:8d:05:4d:63:39:9c:88:65:15:d1:39:d8:d8:27:
04:52:b4:34:06:3c:94:6a:62:6e:4a:b5:27:1d:cd:22:ce:ad:
07:32:e9:0b:35:a2:51:4c:1f:55:48:fb:de:e9:a2:8a:3d:b9:
44:bc:c7:db:e1:30:68:eb:6e:02:25:73:5b:f4:d5:30:b4:1b:
3b:d1:c2:23:6f:8a:37:9a:14:a3:a2:81:4e:56:02:f5:86:d6:
61:57:3c:80:6b:4a:16:0e:26:8f:26:bf:a6:2e:fe:ad:a0:64:
0a:5b:28:7c:60:1b:a0:5b:ab:08:7d:94:d5:fd:5c:c6:8a:a2:
bc:7f:70:a7:de:d2:a1:9c:dc:0f:d5:28:32:eb:04:f0:a3:ff:
aa:01:75:1d:67:81:bf:40:8c:db:07:b1:2c:c3:5b:ee:80:52:
69:55:76:ce:13:bf:8c:84:82:29:3d:10:9f:b9:73:0f:1c:c4:
2a:57:a6:3f:0f:cb:55:92:d6:4c:20:f7:21:49:de:18:15:ad:
9d:d2:c8:0b
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzIcVJdJ6ijKQCzsi2I3YLMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDQzMTU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZmQ4MWNhOTBjYzUyMjQ1ODZhZmViYWIxYzc4YjE3OTAyNjhkNWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXvskqRG8ZYMpNf5fIz33IQDHUi1
dMX4dMX+fg1+vxBBylBpZpbJ/h6hjXWAcba4/3+lX0zf2tsJcju6LGJEzaR5XvZu
qnk+aiVEm0Fxp8riS9KudGi09M0lmol775iGLfJrK0mjnh4FNV1GjKspsWnjacaI
nG20/PP5KslFHFpWHjcagH4ZeWeZLSYJvNJgQ5/jbjtZuBSUrwVQz1FiFPupi5Tp
+G3QEHt+QkNTTe5vlNdcaoWkFBBWnXhPEL+V1aaSxQL0+omPQeQKJRVdIuZrf6QR
k5qsypWhMUFCxNPO4RgVl7hTyCIxtb2Ci+m3shrGB/mCOPnWshBJuUlZEQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFL/YHKkMxSJFhq/rqxx4sXkCaNXBMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJmLzI1YTU5
Yy1jMmZjLTRmZDQtOTZmNy04NGFkY2JmNWFjNTUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmYvMjVhNTlj
LWMyZmMtNGZkNC05NmY3LTg0YWRjYmY1YWM1NS8xL3Y5Z2NxUXpGSWtXR3ItdXJI
SGl4ZVFKbzFjRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCLZXYMA0EAgACMAcDBQMqD3YAMA0GCSqGSIb3
DQEBCwUAA4IBAQCuo23dQ8Rh9QgmT7MF2VuVfjzV1pMz/RTArxF2j/nrJQ5qInpB
oflfUrc+jsna8xlHvtUo+jEzIb/BjQVNYzmciGUV0TnY2CcEUrQ0BjyUamJuSrUn
Hc0izq0HMukLNaJRTB9VSPve6aKKPblEvMfb4TBo624CJXNb9NUwtBs70cIjb4o3
mhSjooFOVgL1htZhVzyAa0oWDiaPJr+mLv6toGQKWyh8YBugW6sIfZTV/VzGiqK8
f3Cn3tKhnNwP1Sgy6wTwo/+qAXUdZ4G/QIzbB7Esw1vugFJpVXbOE7+MhIIpPRCf
uXMPHMQqV6Y/D8tVktZMIPchSd4YFa2d0sgL
-----END CERTIFICATE-----
Generated at Fri May 3 08:24:01 2024 by rpki-client on console-fra.rpki-client.org