Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vGY8bnedrpvbBGhU8Yn-jFw8MuE.cer
File: vGY8bnedrpvbBGhU8Yn-jFw8MuE.cer (raw, json)
Hash identifier: P/quTelmHJhgwtDH1w9nvHIgNCDSUUCwultlWbKRKhw=
Subject key identifier: BC:66:3C:6E:77:9D:AE:9B:DB:04:68:54:F1:89:FE:8C:5C:3C:32:E1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94CC020BF29BC9D4C3E0B9CCEDEB222
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:31:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 47586
IP: 37.77.108.0/22
IP: 80.249.204.0/22
IP: 87.239.0.0/21
IP: 91.214.56.0/22
IP: 93.190.16.0/21
IP: 109.235.184.0/21
IP: 146.19.211.0/24
IP: 158.58.128.0/21
IP: 185.30.116.0/22
IP: 193.0.148.0/22
IP: 194.114.128.0/22
IP: 195.64.156.0/23
IP: 2a00:b160::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:c0:20:bf:29:bc:9d:4c:3e:0b:9c:ce:de:b2:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:31:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc663c6e779dae9bdb046854f189fe8c5c3c32e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:75:19:94:a5:4d:d4:ec:71:96:c4:c6:cd:d2:
a5:d2:4d:6d:f2:ec:80:6c:9b:78:1d:86:3d:91:c6:
43:ba:84:d1:90:a9:ff:53:2a:51:7e:f0:bd:41:93:
ad:85:b6:e8:af:b0:75:c3:64:da:5e:39:c2:3f:ea:
42:58:e4:17:86:41:44:23:74:f7:74:65:2f:1d:4b:
bc:be:94:ca:d0:71:d9:02:3b:88:44:5c:b0:5c:6d:
72:e9:93:85:ef:89:01:b6:da:dd:2b:48:9f:be:e8:
30:03:57:70:bb:28:44:c2:ce:15:bf:72:ad:1c:64:
f4:7f:58:9c:8a:65:da:6f:f5:1f:f5:4c:97:2c:8e:
32:ea:81:a9:a9:76:06:62:a6:8a:04:51:96:31:8f:
4e:8a:66:f8:30:29:d7:c0:2e:e5:f8:be:aa:ce:19:
ab:7c:49:ba:50:0f:72:2d:48:6a:16:fa:6c:82:f7:
b1:24:c1:e8:18:d0:9e:b6:e2:1e:25:81:f9:4b:3f:
65:91:70:3d:f4:3a:96:e1:00:14:34:17:eb:67:07:
a6:12:d7:21:a9:74:21:54:4f:96:b7:37:0c:db:6e:
03:69:35:43:dd:32:65:e9:2f:eb:56:0d:f4:30:58:
f1:ee:c1:17:de:2d:82:83:1d:95:60:12:26:78:08:
88:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:66:3C:6E:77:9D:AE:9B:DB:04:68:54:F1:89:FE:8C:5C:3C:32:E1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.108.0/22
80.249.204.0/22
87.239.0.0/21
91.214.56.0/22
93.190.16.0/21
109.235.184.0/21
146.19.211.0/24
158.58.128.0/21
185.30.116.0/22
193.0.148.0/22
194.114.128.0/22
195.64.156.0/23
IPv6:
2a00:b160::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47586
Signature Algorithm: sha256WithRSAEncryption
57:74:19:81:45:12:31:43:af:19:92:b7:a7:3b:eb:03:0f:07:
e5:2f:96:c4:4b:34:cf:2d:c1:58:c0:44:29:27:e6:48:22:26:
3b:0e:a2:1d:ee:f3:7f:3b:4b:23:51:d0:d3:6a:9c:1c:33:ad:
b4:41:5a:7a:24:43:15:92:01:fc:a0:ac:28:63:d4:bd:b3:1d:
13:15:d4:d9:c4:05:97:b1:0d:4f:d2:d9:a8:1d:fb:63:76:bf:
d8:73:42:a4:0d:6d:03:ad:c9:55:b3:8b:db:59:2d:de:75:f8:
59:6c:13:1c:46:e0:85:01:30:45:21:8b:8d:fe:71:b5:c3:c5:
d3:d0:35:fe:82:0d:13:5c:76:56:08:8d:d7:f9:54:34:27:d4:
51:d2:49:01:e0:20:60:23:7f:eb:e2:88:7f:99:a0:d6:79:4b:
32:dd:75:78:a4:ac:97:cd:86:bd:26:70:3b:66:6d:6a:4f:9a:
37:3a:e9:d6:64:4a:c8:88:55:f5:8e:89:3f:6a:e1:45:0b:b3:
0d:55:3a:1b:37:3e:52:15:73:0d:0e:ce:3e:32:76:eb:bd:f1:
32:cb:55:14:b3:91:6b:f0:e0:3b:11:fb:fb:2b:40:45:46:74:
51:b0:1e:fe:0f:2d:ac:bf:f9:c4:87:05:a3:1b:cf:a0:35:e4:
d2:55:f9:7d
-----BEGIN CERTIFICATE-----
MIIF5TCCBM2gAwIBAgISAYzJTMAgvym8nUw+C5zO3rIiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDgzMTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzY2M2M2ZTc3OWRhZTliZGIwNDY4NTRmMTg5ZmU4YzVjM2MzMmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXUZlKVN1OxxlsTGzdKl0k1t8uyA
bJt4HYY9kcZDuoTRkKn/UypRfvC9QZOthbbor7B1w2TaXjnCP+pCWOQXhkFEI3T3
dGUvHUu8vpTK0HHZAjuIRFywXG1y6ZOF74kBttrdK0ifvugwA1dwuyhEws4Vv3Kt
HGT0f1icimXab/Uf9UyXLI4y6oGpqXYGYqaKBFGWMY9Oimb4MCnXwC7l+L6qzhmr
fEm6UA9yLUhqFvpsgvexJMHoGNCetuIeJYH5Sz9lkXA99DqW4QAUNBfrZwemEtch
qXQhVE+WtzcM224DaTVD3TJl6S/rVg30MFjx7sEX3i2Cgx2VYBImeAiIHwIDAQAB
o4IC8TCCAu0wHQYDVR0OBBYEFLxmPG53na6b2wRoVPGJ/oxcPDLhMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M3LzdhOGYz
Zi0zMDRjLTRhMjYtYWVjYS0xOGJkZmU4Y2MwY2QvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcvN2E4ZjNm
LTMwNGMtNGEyNi1hZWNhLTE4YmRmZThjYzBjZC8xL3ZHWThibmVkcnB2YkJHaFU4
WW4takZ3OE11RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHAGCCsGAQUF
BwEHAQH/BGEwXzBOBAIAATBIAwQCJU1sAwQCUPnMAwQDV+8AAwQCW9Y4AwQDXb4Q
AwQDbeu4AwQAkhPTAwQDnjqAAwQCuR50AwQCwQCUAwQCwnKAAwQBw0CcMA0EAgAC
MAcDBQAqALFgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwC54jANBgkqhkiG9w0B
AQsFAAOCAQEAV3QZgUUSMUOvGZK3pzvrAw8H5S+WxEs0zy3BWMBEKSfmSCImOw6i
He7zfztLI1HQ02qcHDOttEFaeiRDFZIB/KCsKGPUvbMdExXU2cQFl7ENT9LZqB37
Y3a/2HNCpA1tA63JVbOL21kt3nX4WWwTHEbghQEwRSGLjf5xtcPF09A1/oINE1x2
VgiN1/lUNCfUUdJJAeAgYCN/6+KIf5mg1nlLMt11eKSsl82GvSZwO2Ztak+aNzrp
1mRKyIhV9Y6JP2rhRQuzDVU6Gzc+UhVzDQ7OPjJ2673xMstVFLORa/DgOxH7+ytA
RUZ0UbAe/g8trL/5xIcFoxvPoDXk0lX5fQ==
-----END CERTIFICATE-----
Generated at Fri May 3 08:24:07 2024 by rpki-client on console-fra.rpki-client.org