Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer
File: vJxAXxQuU-tnscSZI6t5XoQyjJs.cer (raw, json)
Hash identifier: +t+b45oUmPJyV/llj1glAwL1brsVXi0s+u95nJLpvDA=
Subject key identifier: BC:9C:40:5F:14:2E:53:EB:67:B1:C4:99:23:AB:79:5E:84:32:8C:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DFA3B99ED9D4B4BC3B945070042F80
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:32:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 50289
IP: 37.123.216.0/21
IP: 62.78.32.0/19
IP: 185.142.64.0/22
IP: 2a03:a400::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:a3:b9:9e:d9:d4:b4:bc:3b:94:50:70:04:2f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:32:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc9c405f142e53eb67b1c49923ab795e84328c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0e:b7:0b:e2:01:1f:88:e5:67:c0:96:0e:74:
03:71:9f:36:7f:a4:62:d7:aa:d2:5c:d5:73:dc:fd:
d0:25:ae:6f:63:5d:27:30:60:28:bc:7f:41:ee:cd:
a5:1a:3d:cc:3f:8f:92:a5:f4:27:ab:3d:53:f4:02:
5a:14:e9:5b:4d:c8:56:15:55:c9:05:5f:d4:d9:3b:
b0:44:24:66:ca:8e:c4:3a:0c:a5:5e:35:1b:12:40:
20:c8:ce:c8:60:94:79:89:bc:12:ff:7b:e5:70:07:
51:2f:79:94:b3:ca:fc:c3:68:13:80:87:05:2a:30:
44:6d:0e:c0:1b:3f:9b:99:7c:f6:e8:f8:c2:ba:b5:
87:09:e7:ae:61:a2:4e:43:d6:0d:24:74:ac:dd:45:
d4:ce:bb:9a:7e:d9:e7:76:12:ed:7f:9d:cd:74:69:
53:33:bf:a6:b6:18:4f:a4:11:fe:18:3a:c2:be:30:
ce:10:01:81:e6:7e:98:95:26:e5:7d:11:2a:bc:b7:
4e:63:5b:4f:6b:6b:2f:08:8b:93:df:f1:22:af:db:
3d:09:9d:bc:71:21:98:1c:ec:c0:df:e2:f1:be:7a:
be:66:a2:ef:c5:34:8d:dd:c8:74:b4:11:f3:b4:be:
4b:1e:5c:8d:4e:01:5b:01:17:eb:c2:ec:fa:99:4e:
93:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:9C:40:5F:14:2E:53:EB:67:B1:C4:99:23:AB:79:5E:84:32:8C:9B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.123.216.0/21
62.78.32.0/19
185.142.64.0/22
IPv6:
2a03:a400::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50289
Signature Algorithm: sha256WithRSAEncryption
16:5b:d2:c6:6e:39:60:03:a0:ba:d4:d5:05:50:82:87:f7:c5:
6d:99:08:a6:1f:67:4c:f7:9d:ec:82:09:c6:0d:92:af:2a:95:
c5:99:03:d5:f4:c7:15:e3:12:89:69:4c:5c:75:f2:f6:8d:a1:
43:52:a6:6d:82:ff:eb:fc:49:6b:2b:ca:dd:f6:20:4d:d4:0b:
b0:20:3c:9d:26:8a:0c:8a:25:5f:9e:20:89:ca:da:1a:63:ed:
b9:ea:2f:1a:b0:63:e6:27:bf:6f:60:25:64:a9:68:d5:44:a2:
93:e7:4d:76:78:79:f8:37:7a:52:12:81:a3:40:2b:c8:dd:9a:
65:40:bd:fc:a3:58:f5:81:d1:51:1b:42:2b:ba:e5:92:d6:28:
13:5a:53:a0:ac:e4:19:9c:ee:56:5d:0a:db:db:3f:e7:c6:1f:
2f:c8:5a:8d:22:92:e8:be:c6:08:f5:6e:a8:ba:03:32:e0:ce:
b0:09:e4:01:33:0c:fa:98:1e:4d:b0:d2:42:4f:d5:78:bd:2b:
9c:31:7c:f1:66:2e:90:7d:94:01:63:7b:0c:59:4b:33:09:09:
85:3e:47:45:f1:30:b6:b5:9a:54:b1:22:cd:db:f4:de:12:e9:
9c:f8:ce:35:ca:e3:a7:e7:60:bf:e7:d6:17:86:b0:7d:b4:56:
62:db:f5:9f
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgISAYzI36O5ntnUtLw7lFBwBC+AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDYzMjI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzljNDA1ZjE0MmU1M2ViNjdiMWM0OTkyM2FiNzk1ZTg0MzI4YzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQ63C+IBH4jlZ8CWDnQDcZ82f6Ri
16rSXNVz3P3QJa5vY10nMGAovH9B7s2lGj3MP4+SpfQnqz1T9AJaFOlbTchWFVXJ
BV/U2TuwRCRmyo7EOgylXjUbEkAgyM7IYJR5ibwS/3vlcAdRL3mUs8r8w2gTgIcF
KjBEbQ7AGz+bmXz26PjCurWHCeeuYaJOQ9YNJHSs3UXUzruaftnndhLtf53NdGlT
M7+mthhPpBH+GDrCvjDOEAGB5n6YlSblfREqvLdOY1tPa2svCIuT3/Eir9s9CZ28
cSGYHOzA3+Lxvnq+ZqLvxTSN3ch0tBHztL5LHlyNTgFbARfrwuz6mU6T/QIDAQAB
o4ICuzCCArcwHQYDVR0OBBYEFLycQF8ULlPrZ7HEmSOreV6EMoybMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMxL2I4MTZi
OS05MWIwLTQ2ZGEtOGU1OC05MTQ4OGEzNGZjYzgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzEvYjgxNmI5
LTkxYjAtNDZkYS04ZTU4LTkxNDg4YTM0ZmNjOC8xL3ZKeEFYeFF1VS10bnNjU1pJ
NnQ1WG9ReWpKcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF
BwEHAQH/BCswKTAYBAIAATASAwQDJXvYAwQFPk4gAwQCuY5AMA0EAgACMAcDBQAq
A6QAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDEcTANBgkqhkiG9w0BAQsFAAOC
AQEAFlvSxm45YAOgutTVBVCCh/fFbZkIph9nTPed7IIJxg2SryqVxZkD1fTHFeMS
iWlMXHXy9o2hQ1KmbYL/6/xJayvK3fYgTdQLsCA8nSaKDIolX54gicraGmPtueov
GrBj5ie/b2AlZKlo1USik+dNdnh5+Dd6UhKBo0AryN2aZUC9/KNY9YHRURtCK7rl
ktYoE1pToKzkGZzuVl0K29s/58YfL8hajSKS6L7GCPVuqLoDMuDOsAnkATMM+pge
TbDSQk/VeL0rnDF88WYukH2UAWN7DFlLMwkJhT5HRfEwtrWaVLEizdv03hLpnPjO
Ncrjp+dgv+fWF4awfbRWYtv1nw==
-----END CERTIFICATE-----
Generated at Fri May 3 11:04:51 2024 by rpki-client on console-fra.rpki-client.org