Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
File: xRGedSADkvGi8IvpkHMtgEeyiwk.cer (raw, json)
Hash identifier: 4zxETmOTsvVpWWmDAw38lez8GyHn+q/NKw1CQ+0PFZs=
Subject key identifier: C5:11:9E:75:20:03:92:F1:A2:F0:8B:E9:90:73:2D:80:47:B2:8B:09
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DDAC509B2B5BB785A22697D12A1120
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:30:19 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 57388
IP: 130.0.24.0/21
IP: 185.85.152.0/22
IP: 2a02:dd00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:ac:50:9b:2b:5b:b7:85:a2:26:97:d1:2a:11:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c5119e75200392f1a2f08be990732d8047b28b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cb:3a:60:98:23:4d:2a:14:c9:f2:b3:6f:69:
39:38:78:55:04:1f:ca:00:3a:d0:59:91:99:b7:88:
61:bd:24:9f:72:2c:e9:db:c0:ab:91:7f:5b:c3:17:
eb:c8:3d:05:c3:07:f5:54:7d:68:c3:ae:e7:86:c7:
13:46:30:21:9c:7f:d4:1c:95:84:81:e7:e9:76:e5:
35:48:b4:28:6b:c4:23:9c:57:9b:75:ec:43:37:b6:
0a:3e:3f:0a:b3:50:1f:de:c7:4f:0d:99:40:d9:3b:
58:38:ab:3c:e6:66:34:d5:81:d8:f4:ab:54:21:14:
1d:6c:ca:3d:57:38:8c:74:37:1a:06:77:5f:8d:ae:
e1:59:bb:30:e5:86:ff:3e:e6:f6:65:62:c6:b4:d9:
93:45:1b:1d:19:67:ea:f8:32:bf:05:ed:36:9c:f6:
43:93:4a:13:e4:f1:5b:d9:14:e2:f1:3b:72:b2:91:
e6:fe:93:64:0f:aa:ba:e8:48:a6:de:a3:a9:1a:24:
46:6e:67:20:10:47:fa:79:24:83:5e:31:01:3f:b6:
e8:98:d0:77:75:04:76:1c:18:c4:3e:85:89:ce:32:
eb:32:2b:7e:b3:26:c9:e7:98:7a:a3:a4:09:fd:91:
3c:4a:ea:f7:03:02:cb:29:74:85:cc:96:53:dd:d5:
57:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:11:9E:75:20:03:92:F1:A2:F0:8B:E9:90:73:2D:80:47:B2:8B:09
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.0.24.0/21
185.85.152.0/22
IPv6:
2a02:dd00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57388
Signature Algorithm: sha256WithRSAEncryption
7b:c0:63:6e:13:31:99:61:f7:72:4f:d0:aa:39:1a:6a:da:53:
c2:6c:c4:2c:6e:5b:80:57:c1:3a:3b:3e:12:b9:10:4d:0c:e0:
ef:12:84:5b:29:8e:81:71:8f:c1:3e:90:95:88:bc:ee:20:5b:
4c:72:0b:49:d9:bd:a1:6f:43:d8:1e:d6:33:71:88:a9:b7:c1:
0f:11:6a:ce:48:6e:51:2f:7d:ae:76:fa:70:8f:60:56:9e:06:
59:6e:ba:99:62:54:9d:88:b5:91:96:e7:e0:86:67:28:f9:0c:
f9:18:fd:17:a8:9b:3e:c9:42:2e:d5:d0:9d:78:3d:99:77:3f:
b5:32:12:3c:58:f1:65:92:84:f0:09:68:c7:69:85:5c:5d:8c:
51:04:eb:83:96:ae:45:66:f1:3f:df:ac:d0:f9:b1:9e:c6:eb:
03:6d:15:29:a2:3f:d9:43:8b:a8:2e:f8:9f:41:28:b7:43:3c:
d2:3f:4b:50:ac:ba:64:40:3f:4a:3f:01:69:67:58:0a:d7:fe:
d4:7d:80:14:bc:9f:a6:3b:a0:dd:09:1e:79:40:97:f3:64:fa:
f1:58:f4:c4:f0:9c:83:65:2d:82:c6:6b:55:31:1e:d5:8d:25:
17:4e:76:53:ab:cb:e8:af:04:95:04:e8:ed:8d:38:cc:8b:9f:
4d:26:bf:68
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAYzI3axQmytbt4WiJpfRKhEgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDYzMDE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTExOWU3NTIwMDM5MmYxYTJmMDhiZTk5MDczMmQ4MDQ3YjI4YjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8s6YJgjTSoUyfKzb2k5OHhVBB/K
ADrQWZGZt4hhvSSfcizp28CrkX9bwxfryD0Fwwf1VH1ow67nhscTRjAhnH/UHJWE
gefpduU1SLQoa8QjnFebdexDN7YKPj8Ks1Af3sdPDZlA2TtYOKs85mY01YHY9KtU
IRQdbMo9VziMdDcaBndfja7hWbsw5Yb/Pub2ZWLGtNmTRRsdGWfq+DK/Be02nPZD
k0oT5PFb2RTi8TtyspHm/pNkD6q66Eim3qOpGiRGbmcgEEf6eSSDXjEBP7bomNB3
dQR2HBjEPoWJzjLrMit+sybJ55h6o6QJ/ZE8Sur3AwLLKXSFzJZT3dVX/wIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFMURnnUgA5LxovCL6ZBzLYBHsosJMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JjLzMyMGJh
Zi01OWRjLTQ2YTItYWY3ZC1kODE5Y2VkNWQzNWEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMvMzIwYmFm
LTU5ZGMtNDZhMi1hZjdkLWQ4MTljZWQ1ZDM1YS8xL3hSR2VkU0FEa3ZHaThJdnBr
SE10Z0VleWl3ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQDggAYAwQCuVWYMA0EAgACMAcDBQMqAt0AMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDgLDANBgkqhkiG9w0BAQsFAAOCAQEAe8Bj
bhMxmWH3ck/QqjkaatpTwmzELG5bgFfBOjs+ErkQTQzg7xKEWymOgXGPwT6QlYi8
7iBbTHILSdm9oW9D2B7WM3GIqbfBDxFqzkhuUS99rnb6cI9gVp4GWW66mWJUnYi1
kZbn4IZnKPkM+Rj9F6ibPslCLtXQnXg9mXc/tTISPFjxZZKE8Alox2mFXF2MUQTr
g5auRWbxP9+s0PmxnsbrA20VKaI/2UOLqC74n0Eot0M80j9LUKy6ZEA/Sj8BaWdY
Ctf+1H2AFLyfpjug3QkeeUCX82T68Vj0xPCcg2UtgsZrVTEe1Y0lF052U6vL6K8E
lQTo7Y04zIufTSa/aA==
-----END CERTIFICATE-----
Generated at Fri May 3 09:42:17 2024 by rpki-client on console-ams.rpki-client.org