Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer
File: xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer (raw, json)
Hash identifier: v+DwVPoT17cUmjwSZD6FzkWURLDGLr1rs4zWlOLM2tg=
Subject key identifier: C5:34:35:F4:BE:2C:54:3B:F3:48:3E:37:7F:80:31:4D:28:23:01:84
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DADCF8B05EE9D57EF27F03786CBDEC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 8639
IP: 185.121.20.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:dc:f8:b0:5e:e9:d5:7e:f2:7f:03:78:6c:bd:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c53435f4be2c543bf3483e377f80314d28230184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4d:e6:52:56:b7:cb:4a:8a:11:c8:83:34:b3:
a9:7c:d2:62:5d:86:c9:e8:eb:1c:52:49:ae:6b:9f:
7c:84:b8:3b:27:b9:44:64:ec:a4:96:ab:7e:ec:4b:
c4:31:e2:6e:fa:8b:83:5b:df:08:f2:80:70:dd:13:
ce:cb:89:4d:28:2a:f1:06:a5:21:84:4f:e2:92:4c:
de:a4:af:b4:0e:60:08:f7:64:da:81:20:87:cb:42:
87:22:8e:61:97:6e:d8:92:76:19:15:37:d8:09:72:
76:05:dc:62:c1:aa:46:9d:84:ec:17:18:5c:1d:c1:
93:11:3d:79:cb:0d:81:53:3d:7a:1e:d1:19:7c:6d:
de:dc:8c:23:af:52:e6:fe:7e:64:1b:a2:2e:ea:26:
32:e2:ac:ef:52:05:43:2e:0f:e5:2c:00:82:99:32:
72:cb:e1:f0:98:24:33:dd:ac:2c:d9:ba:aa:88:e1:
a5:3d:fd:53:a9:33:69:7a:6e:cc:d3:d3:3c:dc:06:
e3:11:de:11:e8:9d:95:0f:4b:3d:6b:65:bd:31:98:
49:cb:9b:11:5a:0e:53:6b:87:fc:0e:69:3c:dd:2a:
74:7f:b9:32:f7:14:a9:78:b5:62:89:2e:59:f0:ed:
a5:2c:3e:e3:2b:eb:f2:7c:82:88:6c:7d:70:35:18:
4e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:34:35:F4:BE:2C:54:3B:F3:48:3E:37:7F:80:31:4D:28:23:01:84
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.20.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8639
Signature Algorithm: sha256WithRSAEncryption
69:d2:ab:bd:63:c9:51:cb:49:33:5e:06:aa:ae:31:ad:c0:d2:
a7:a3:b5:17:9a:9e:69:b1:16:71:42:e2:f3:e5:db:a6:11:76:
07:ee:1b:51:17:09:84:6e:3f:5e:85:ff:3f:da:f4:86:23:f0:
8e:58:8c:a5:bf:44:cc:2d:4b:9b:dc:37:6b:56:9d:c5:54:16:
d6:7b:38:51:b0:f3:30:5c:c0:dc:95:5a:0d:69:fa:42:d4:af:
10:c3:fd:b7:53:33:4c:b1:fc:d1:6d:52:04:85:57:59:44:10:
e0:f4:a0:2b:06:22:3b:0d:af:71:ce:45:5a:9f:6b:03:ae:a5:
43:f1:6e:cb:9e:44:3b:cd:ef:d2:71:90:8b:43:2b:45:57:28:
99:5a:26:f6:e3:72:4f:c2:e0:d3:2c:47:ae:52:0a:c6:ea:bc:
56:c2:f2:f8:18:0a:63:63:e8:fd:cc:32:96:da:a1:fa:17:79:
66:b1:74:6d:f9:5f:ac:d9:d3:98:49:9c:b8:aa:38:06:72:47:
25:16:59:1b:79:37:96:e1:c2:ab:d6:af:71:22:e3:94:a3:02:
91:3f:26:f5:3d:6b:a5:a1:f1:2f:72:40:f0:91:e7:7a:5f:ac:
53:f4:30:7f:20:6d:4c:40:7b:07:fc:5c:1a:be:b0:e6:2c:8c:
4c:68:5f:e1
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgISAYzC2tz4sF7p1X7yfwN4bL3sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDIyOTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTM0MzVmNGJlMmM1NDNiZjM0ODNlMzc3ZjgwMzE0ZDI4MjMwMTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyE3mUla3y0qKEciDNLOpfNJiXYbJ
6OscUkmua598hLg7J7lEZOyklqt+7EvEMeJu+ouDW98I8oBw3RPOy4lNKCrxBqUh
hE/ikkzepK+0DmAI92TagSCHy0KHIo5hl27YknYZFTfYCXJ2BdxiwapGnYTsFxhc
HcGTET15yw2BUz16HtEZfG3e3Iwjr1Lm/n5kG6Iu6iYy4qzvUgVDLg/lLACCmTJy
y+HwmCQz3aws2bqqiOGlPf1TqTNpem7M09M83AbjEd4R6J2VD0s9a2W9MZhJy5sR
Wg5Ta4f8Dmk83Sp0f7ky9xSpeLViiS5Z8O2lLD7jK+vyfIKIbH1wNRhOmQIDAQAB
o4ICnzCCApswHQYDVR0OBBYEFMU0NfS+LFQ780g+N3+AMU0oIwGEMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JhLzQzZjYw
Ny1hN2Y0LTQ5ODUtYjZlYi05ZjRmZTRjZDAyNDYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmEvNDNmNjA3
LWE3ZjQtNDk4NS1iNmViLTlmNGZlNGNkMDI0Ni8xL3hUUTE5TDRzVkR2elNENDNm
NEF4VFNnakFZUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCuXkUMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC
AiG/MA0GCSqGSIb3DQEBCwUAA4IBAQBp0qu9Y8lRy0kzXgaqrjGtwNKno7UXmp5p
sRZxQuLz5dumEXYH7htRFwmEbj9ehf8/2vSGI/COWIylv0TMLUub3DdrVp3FVBbW
ezhRsPMwXMDclVoNafpC1K8Qw/23UzNMsfzRbVIEhVdZRBDg9KArBiI7Da9xzkVa
n2sDrqVD8W7LnkQ7ze/ScZCLQytFVyiZWib243JPwuDTLEeuUgrG6rxWwvL4GApj
Y+j9zDKW2qH6F3lmsXRt+V+s2dOYSZy4qjgGckclFlkbeTeW4cKr1q9xIuOUowKR
Pyb1PWulofEvckDwked6X6xT9DB/IG1MQHsH/FwavrDmLIxMaF/h
-----END CERTIFICATE-----
Generated at Fri May 3 08:26:08 2024 by rpki-client on console-fra.rpki-client.org