Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
File: xX5Yw0bntBVVDBOurdLPkO3QeJU.cer (raw, json)
Hash identifier: hKCxb1drD9tKq8KXMj8jBFLx5IDdWUlzp/EFUiR9fes=
Subject key identifier: C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5012BE021193A44E65047BA4A47ED88
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:37 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 39611
IP: 185.49.24.0/22
IP: 213.207.32.0/19
IP: 2a01:9d20::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:2b:e0:21:19:3a:44:e6:50:47:ba:4a:47:ed:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c57e58c346e7b415550c13aeadd2cf90edd07895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c1:2a:73:a5:c9:ff:be:60:82:eb:d8:a7:f7:
65:45:88:ef:1c:97:f0:44:f3:cc:c9:56:65:4f:b5:
5c:c5:90:47:3c:79:c8:8c:a9:9c:d6:3e:93:0d:21:
a3:7d:5b:87:3d:34:39:67:fe:01:a9:8e:ad:b9:7c:
60:41:b5:75:ac:50:60:7f:9e:48:d2:8d:93:18:be:
b2:30:9c:b8:22:bc:45:2b:30:fa:01:51:30:78:26:
21:87:4a:85:5e:0e:9e:07:ba:42:ec:72:57:e3:9c:
d5:12:54:09:33:75:b1:98:0a:63:ea:37:29:50:8a:
d4:b4:9b:ef:62:10:b6:9a:3f:b7:ec:eb:19:f3:5f:
d3:75:0d:19:f2:30:f6:0e:f5:46:98:b7:11:9f:30:
b0:6f:39:83:5f:49:6c:03:b1:34:d0:05:ba:ad:17:
b1:a1:b0:02:54:65:a0:ca:84:18:fa:5e:e6:bf:ea:
8a:c6:d3:12:83:2f:b3:8c:e8:d4:e4:0e:1c:be:ec:
5c:7a:52:7d:fa:c3:7b:18:a9:a9:48:d8:0e:26:ac:
64:9f:74:4e:97:aa:cf:ef:fe:6d:c4:b4:55:12:16:
3c:f7:ec:83:fc:f4:46:5b:45:07:04:69:0b:cc:66:
39:48:62:8b:b8:ec:67:a2:89:ef:4b:f4:93:c2:8e:
d1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.24.0/22
213.207.32.0/19
IPv6:
2a01:9d20::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39611
Signature Algorithm: sha256WithRSAEncryption
3c:3f:37:04:03:d5:9d:ad:01:08:94:3b:56:e8:1e:ee:a6:cb:
06:0b:5d:3b:0a:4c:88:d7:b3:00:cd:ba:c7:9f:cb:15:a9:5e:
d5:02:b5:de:26:58:ed:00:4f:f9:8e:90:b7:e6:dc:b6:bd:78:
aa:ab:66:bc:b8:88:42:18:db:e3:52:33:a7:ce:ff:63:7d:ad:
1f:64:29:dd:f8:80:02:14:30:ce:3e:f1:22:07:f7:1f:2f:df:
e5:b2:fb:c6:5a:f1:3a:84:94:2d:07:42:91:d4:48:da:ac:6e:
39:3d:49:4d:65:6d:1d:46:12:4a:93:5b:0e:c6:62:55:32:36:
a7:94:12:01:3c:17:12:46:06:59:88:6c:29:b7:d1:91:2f:c8:
df:fe:e8:14:ec:81:3a:19:a5:4f:61:92:49:30:00:f9:2c:2f:
1f:0c:73:b8:af:3a:25:ab:c2:bb:fc:ac:ca:18:33:dd:2d:e4:
9d:68:61:d2:8b:55:7d:27:fa:b3:23:74:d7:9a:40:f7:4c:af:
97:c2:90:c3:05:01:9b:ef:dd:07:a1:8d:ea:16:2f:42:8b:fe:
99:79:87:da:59:a5:2e:36:a0:16:e0:06:54:24:c0:dc:ea:a1:
3d:a9:ff:90:af:10:b4:5b:0d:02:ee:e0:10:a7:df:d4:40:07:
4b:d2:d0:3a
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAYzFASvgIRk6ROZQR7pKR+2IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTIzMDM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTdlNThjMzQ2ZTdiNDE1NTUwYzEzYWVhZGQyY2Y5MGVkZDA3ODk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18Eqc6XJ/75gguvYp/dlRYjvHJfw
RPPMyVZlT7VcxZBHPHnIjKmc1j6TDSGjfVuHPTQ5Z/4BqY6tuXxgQbV1rFBgf55I
0o2TGL6yMJy4IrxFKzD6AVEweCYhh0qFXg6eB7pC7HJX45zVElQJM3WxmApj6jcp
UIrUtJvvYhC2mj+37OsZ81/TdQ0Z8jD2DvVGmLcRnzCwbzmDX0lsA7E00AW6rRex
obACVGWgyoQY+l7mv+qKxtMSgy+zjOjU5A4cvuxcelJ9+sN7GKmpSNgOJqxkn3RO
l6rP7/5txLRVEhY89+yD/PRGW0UHBGkLzGY5SGKLuOxnoonvS/STwo7RZwIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFMV+WMNG57QVVQwTrq3Sz5Dt0HiVMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA4L2NlZTcw
ZC04YjUyLTRjMTEtYTc3Yy0wNzQzMDU3MzVhYzIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgvY2VlNzBk
LThiNTItNGMxMS1hNzdjLTA3NDMwNTczNWFjMi8xL3hYNVl3MGJudEJWVkRCT3Vy
ZExQa08zUWVKVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQCuTEYAwQF1c8gMA0EAgACMAcDBQMqAZ0gMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCauzANBgkqhkiG9w0BAQsFAAOCAQEAPD83
BAPVna0BCJQ7Vuge7qbLBgtdOwpMiNezAM26x5/LFale1QK13iZY7QBP+Y6Qt+bc
tr14qqtmvLiIQhjb41Izp87/Y32tH2Qp3fiAAhQwzj7xIgf3Hy/f5bL7xlrxOoSU
LQdCkdRI2qxuOT1JTWVtHUYSSpNbDsZiVTI2p5QSATwXEkYGWYhsKbfRkS/I3/7o
FOyBOhmlT2GSSTAA+SwvHwxzuK86JavCu/ysyhgz3S3knWhh0otVfSf6syN015pA
90yvl8KQwwUBm+/dB6GN6hYvQov+mXmH2lmlLjagFuAGVCTA3OqhPan/kK8QtFsN
Au7gEKff1EAHS9LQOg==
-----END CERTIFICATE-----
Generated at Fri May 3 14:09:03 2024 by rpki-client on console-fra.rpki-client.org