Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vPgUN0V8vDLfonMoSCQ6ie5Thwg.cer
File: vPgUN0V8vDLfonMoSCQ6ie5Thwg.cer (raw, json)
Hash identifier: 1z0uozm7WV/ddSJXfgvVmmMaa9/BqnvBrGvcUkZ0WSo=
Subject key identifier: BC:F8:14:37:45:7C:BC:32:DF:A2:73:28:48:24:3A:89:EE:53:87:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BBBA4C215BCE75DE8D1A0D258D9062
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1b/1507f8-e7d1-406f-9aeb-df169270b134/1/vPgUN0V8vDLfonMoSCQ6ie5Thwg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1b/1507f8-e7d1-406f-9aeb-df169270b134/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:32:52 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.238.143.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:ba:4c:21:5b:ce:75:de:8d:1a:0d:25:8d:90:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:32:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bcf81437457cbc32dfa2732848243a89ee538708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:aa:56:61:2b:53:be:ee:f4:b0:e3:28:da:a6:
c7:fa:d2:9c:80:f6:16:19:44:af:bc:d7:8b:1b:13:
5b:84:10:1f:65:56:62:e6:71:8f:e1:09:5f:45:09:
67:69:bf:6e:49:90:58:1d:ef:26:5d:98:5a:ae:e1:
13:dc:9c:9c:83:b3:4b:75:84:66:fa:5c:a3:c0:9e:
4c:86:5c:65:df:52:bc:a2:29:92:5a:6a:5e:bb:60:
23:05:64:cf:77:96:82:99:ca:db:2e:02:bf:e9:3a:
cb:65:8a:fd:50:b0:65:f5:54:b5:d4:7c:9e:04:cd:
6d:d9:27:d5:b6:cd:21:93:ec:e4:31:6e:9c:20:10:
17:e6:2c:44:4f:5a:b3:f7:9e:ab:3e:c6:b4:41:a4:
50:a4:08:c5:75:43:bb:cd:68:04:14:d6:2e:cc:c5:
2e:8c:ca:74:a5:ad:17:79:74:b8:e1:d6:52:56:8a:
93:6b:51:cd:2c:bb:ef:10:73:7c:a9:32:b4:23:f7:
c8:69:15:48:15:a1:ed:a4:64:83:64:d4:65:62:33:
fb:99:ab:b9:da:51:dd:cc:5c:51:f0:d8:b1:de:c7:
34:c1:eb:3d:c5:11:47:53:a2:6a:f1:44:ca:aa:5f:
5a:2c:b9:8e:a5:ab:9a:ff:91:97:19:77:a6:fb:8e:
dd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F8:14:37:45:7C:BC:32:DF:A2:73:28:48:24:3A:89:EE:53:87:08
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1507f8-e7d1-406f-9aeb-df169270b134/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1507f8-e7d1-406f-9aeb-df169270b134/1/vPgUN0V8vDLfonMoSCQ6ie5Thwg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.143.0/24
Signature Algorithm: sha256WithRSAEncryption
35:b1:4c:22:76:61:62:81:bf:8c:b0:39:f1:c6:11:41:84:e4:
e4:b6:36:21:d3:5d:c5:16:90:55:ce:73:6d:29:43:4e:be:1c:
f0:e5:0d:c2:d0:38:71:fe:e5:5c:94:93:7c:ac:a6:64:ad:25:
82:01:e1:9a:28:f6:f4:2a:0b:16:d6:57:37:80:70:4b:82:08:
63:69:aa:f8:08:50:91:a8:4e:f3:fc:95:ab:63:5d:b8:6c:71:
7d:3b:e6:0e:73:23:d5:38:65:22:f5:00:8c:73:be:f1:07:f4:
dc:4f:ea:df:99:9b:7a:2c:0a:9c:17:ce:56:e2:13:69:88:78:
66:57:0d:ee:3a:fb:4c:88:72:d8:ee:ae:ce:8b:23:fe:7b:6f:
55:83:07:3c:19:d6:65:5e:41:b0:f1:f9:fa:c8:e8:27:e6:70:
6a:2a:8f:75:cb:bb:ca:d8:28:04:c8:9d:0d:a5:cc:d1:d4:c9:
56:f4:34:17:b0:ff:33:f9:b5:3a:60:a8:de:dd:24:c8:b2:dd:
e0:28:00:b8:66:2e:61:88:93:5d:18:90:a2:52:e4:f4:35:7c:
35:2f:67:0e:e2:1f:60:96:cf:08:8f:e4:2b:dd:d0:17:03:f1:
4f:94:a1:af:18:8b:ce:0c:be:b0:8c:ec:2d:4b:2a:54:ce:06:
6c:30:04:83
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzJu7pMIVvOdd6NGg0ljZBiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTAzMjUyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiY2Y4MTQzNzQ1N2NiYzMyZGZhMjczMjg0ODI0M2E4OWVlNTM4NzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA66pWYStTvu70sOMo2qbH+tKcgPYW
GUSvvNeLGxNbhBAfZVZi5nGP4QlfRQlnab9uSZBYHe8mXZharuET3Jycg7NLdYRm
+lyjwJ5Mhlxl31K8oimSWmpeu2AjBWTPd5aCmcrbLgK/6TrLZYr9ULBl9VS11Hye
BM1t2SfVts0hk+zkMW6cIBAX5ixET1qz956rPsa0QaRQpAjFdUO7zWgEFNYuzMUu
jMp0pa0XeXS44dZSVoqTa1HNLLvvEHN8qTK0I/fIaRVIFaHtpGSDZNRlYjP7mau5
2lHdzFxR8Nix3sc0wes9xRFHU6Jq8UTKql9aLLmOpaua/5GXGXem+47dpwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFLz4FDdFfLwy36JzKEgkOonuU4cIMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFiLzE1MDdm
OC1lN2QxLTQwNmYtOWFlYi1kZjE2OTI3MGIxMzQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWIvMTUwN2Y4
LWU3ZDEtNDA2Zi05YWViLWRmMTY5MjcwYjEzNC8xL3ZQZ1VOMFY4dkRMZm9uTW9T
Q1E2aWU1VGh3Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAue6PMA0GCSqGSIb3DQEBCwUAA4IBAQA1sUwi
dmFigb+MsDnxxhFBhOTktjYh013FFpBVznNtKUNOvhzw5Q3C0Dhx/uVclJN8rKZk
rSWCAeGaKPb0KgsW1lc3gHBLgghjaar4CFCRqE7z/JWrY124bHF9O+YOcyPVOGUi
9QCMc77xB/TcT+rfmZt6LAqcF85W4hNpiHhmVw3uOvtMiHLY7q7OiyP+e29Vgwc8
GdZlXkGw8fn6yOgn5nBqKo91y7vK2CgEyJ0NpczR1MlW9DQXsP8z+bU6YKje3STI
st3gKAC4Zi5hiJNdGJCiUuT0NXw1L2cO4h9gls8Ij+Qr3dAXA/FPlKGvGIvODL6w
jOwtSypUzgZsMASD
-----END CERTIFICATE-----
Generated at Fri May 3 08:24:15 2024 by rpki-client on console-fra.rpki-client.org