Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xhMnbLymeTwzRXqb8i_BCzgjAfQ.cer
File: xhMnbLymeTwzRXqb8i_BCzgjAfQ.cer (raw, json)
Hash identifier: 8wJhE/fcXfs9POl2nKyUaPc1PM8+vVVeqe9fJ2rLER4=
Subject key identifier: C6:13:27:6C:BC:A6:79:3C:33:45:7A:9B:F2:2F:C1:0B:38:23:01:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86F0CA1870D6F5067A015778805A0E0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:29:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208844
IP: 45.82.128.0/22
IP: 2a13:fe40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:0c:a1:87:0d:6f:50:67:a0:15:77:88:05:a0:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c613276cbca6793c33457a9bf22fc10b382301f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:75:18:27:16:a0:37:3d:64:bb:b8:fe:47:c7:
27:0d:5a:98:b8:e1:0d:d0:e5:87:d2:37:f2:f9:7b:
0c:bb:e4:6c:45:7b:92:5b:c4:b4:61:d0:91:f7:24:
82:61:af:00:49:cf:ff:90:8f:67:9e:5c:45:1e:e4:
52:47:fc:a8:f9:55:b4:24:77:df:00:fa:d8:23:c4:
3a:0d:c9:af:8d:72:1f:53:43:46:a5:15:fe:fc:55:
e0:70:06:24:cb:8d:9c:5c:88:0c:c9:e6:5f:7c:48:
3f:b3:da:d2:5a:3d:b5:da:7b:e2:74:8a:79:03:10:
32:68:b2:17:e9:6e:a3:36:aa:af:4d:98:0f:74:51:
11:62:c3:31:2e:05:79:94:f2:78:60:c2:a4:19:cf:
26:34:24:90:e2:2d:2f:d5:b4:f4:da:f9:d3:92:45:
01:ff:e9:c5:b3:e6:17:80:b1:ea:2d:a5:79:1a:82:
ed:7c:fc:ca:2c:50:1b:58:bc:8b:05:3a:a1:86:ba:
43:d1:15:3d:82:9d:83:ce:c8:72:1c:f1:65:8e:2d:
78:f1:90:40:ef:2e:fc:6b:88:56:af:7a:4a:e8:0f:
ed:00:70:6b:fb:82:97:b8:d5:b3:10:a9:9d:66:ce:
c1:f4:6a:db:ce:31:dc:6e:19:20:ae:02:84:4c:8f:
21:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:13:27:6C:BC:A6:79:3C:33:45:7A:9B:F2:2F:C1:0B:38:23:01:F4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.128.0/22
IPv6:
2a13:fe40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208844
Signature Algorithm: sha256WithRSAEncryption
21:63:3b:98:a9:9e:ea:c5:dd:89:26:9d:95:2e:f0:07:d1:30:
b7:5e:af:72:a3:2f:a1:1a:c0:05:8e:10:70:4d:a3:ee:25:01:
7f:9f:f2:9f:f4:70:63:51:27:8c:c7:17:89:3e:23:c3:c7:84:
86:1f:88:db:18:3b:78:48:62:09:17:d5:41:b3:79:60:86:dd:
60:fe:fb:ee:13:26:c4:3f:1f:7a:73:b9:19:36:b8:a8:f9:f5:
a1:85:ed:90:40:7b:19:73:38:2a:0a:7a:27:35:73:a2:93:37:
67:03:f1:ea:14:f7:e5:a1:19:28:8c:33:11:11:f8:d0:b3:f7:
d8:47:d5:8f:b3:2d:e1:f2:4f:37:e9:68:95:1a:c7:83:39:ee:
95:25:55:01:78:ad:7c:e0:cd:81:24:03:c6:2d:04:8c:cf:ac:
81:72:47:52:be:d7:c2:62:3b:a0:c3:2b:24:c2:66:75:8d:02:
7c:a6:85:e7:17:62:a1:f1:f2:11:05:b0:d6:25:36:e7:39:bd:
63:a7:bf:ad:f1:d3:68:d6:cf:63:1c:5e:80:89:42:f5:23:d7:
2c:2f:69:5f:1f:f5:0e:5a:bb:f6:1b:09:11:85:3d:bd:83:73:
2b:92:05:7a:cb:e7:f2:0e:45:0b:28:17:45:71:ac:d4:05:dc:
af:51:0a:4b
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzIbwyhhw1vUGegFXeIBaDgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDQyOTMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjEzMjc2Y2JjYTY3OTNjMzM0NTdhOWJmMjJmYzEwYjM4MjMwMWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnUYJxagNz1ku7j+R8cnDVqYuOEN
0OWH0jfy+XsMu+RsRXuSW8S0YdCR9ySCYa8ASc//kI9nnlxFHuRSR/yo+VW0JHff
APrYI8Q6DcmvjXIfU0NGpRX+/FXgcAYky42cXIgMyeZffEg/s9rSWj212nvidIp5
AxAyaLIX6W6jNqqvTZgPdFERYsMxLgV5lPJ4YMKkGc8mNCSQ4i0v1bT02vnTkkUB
/+nFs+YXgLHqLaV5GoLtfPzKLFAbWLyLBTqhhrpD0RU9gp2DzshyHPFlji148ZBA
7y78a4hWr3pK6A/tAHBr+4KXuNWzEKmdZs7B9GrbzjHcbhkgrgKETI8hdQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFMYTJ2y8pnk8M0V6m/IvwQs4IwH0MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNkLzI4MThi
Ni0xYzEzLTQ3MjQtYmU5Mi04Y2Q0MzhiNWYyNjAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2QvMjgxOGI2
LTFjMTMtNDcyNC1iZTkyLThjZDQzOGI1ZjI2MC8xL3hoTW5iTHltZVR3elJYcWI4
aV9CQ3pnakFmUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCLVKAMA0EAgACMAcDBQMqE/5AMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMvzDANBgkqhkiG9w0BAQsFAAOCAQEAIWM7mKme6sXd
iSadlS7wB9Ewt16vcqMvoRrABY4QcE2j7iUBf5/yn/RwY1EnjMcXiT4jw8eEhh+I
2xg7eEhiCRfVQbN5YIbdYP777hMmxD8fenO5GTa4qPn1oYXtkEB7GXM4Kgp6JzVz
opM3ZwPx6hT35aEZKIwzERH40LP32EfVj7Mt4fJPN+lolRrHgznulSVVAXitfODN
gSQDxi0EjM+sgXJHUr7XwmI7oMMrJMJmdY0CfKaF5xdiofHyEQWw1iU25zm9Y6e/
rfHTaNbPYxxegIlC9SPXLC9pXx/1Dlq79hsJEYU9vYNzK5IFesvn8g5FCygXRXGs
1AXcr1EKSw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 11:05:09 2024 by rpki-client on console-ams.rpki-client.org