Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
File: xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer (raw, json)
Hash identifier: HQvhI4Hy6sfBQNErYs+r2MLQDMvFpggtOjHlaEKPZyE=
Subject key identifier: C6:3D:96:AE:FC:54:80:24:FA:36:FA:5C:E8:04:A4:8B:F7:CA:3A:40
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC348D18395DD7412C5E15114CB448911
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 56654
AS: 60088
IP: 46.102.234.0/24
IP: 77.81.68.0/22
IP: 85.204.164.0/22
IP: 89.39.176.0/22
IP: 94.24.111.0/24
IP: 185.85.176.0/21
IP: 188.208.128.0/22
IP: 188.214.244.0 -- 188.214.255.255
IP: 2a04:f980::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:d1:83:95:dd:74:12:c5:e1:51:14:cb:44:89:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c63d96aefc548024fa36fa5ce804a48bf7ca3a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c2:fe:c8:6f:99:7b:4a:88:1d:b6:12:c7:06:
82:76:91:18:50:bc:34:f8:67:17:e5:9f:93:29:60:
5b:fd:f1:f3:b7:f1:01:78:46:02:dc:a3:42:54:23:
bd:48:da:84:19:02:97:bc:bb:df:ed:64:41:fc:85:
9f:46:fb:96:1d:c5:14:85:2c:93:dd:83:a8:cc:3b:
d5:f8:f1:df:6f:6f:e0:50:4f:3b:db:fe:20:8c:dc:
8c:df:fd:9d:63:aa:32:14:26:32:cc:b6:7e:1a:a8:
30:55:ce:51:2f:ef:7e:57:ab:10:ba:a4:6e:00:48:
ba:a9:98:32:af:52:92:73:9c:66:99:8c:53:ff:6c:
50:c4:14:37:53:36:45:b5:74:f5:a0:7e:0c:e6:98:
32:58:c6:51:20:e6:56:9c:a6:1c:84:1c:05:50:71:
5b:8e:69:e7:02:68:0e:eb:a3:31:38:57:72:70:c8:
27:6f:8f:44:60:c2:56:30:67:b8:a8:15:3f:64:49:
f5:e1:24:85:c5:34:55:df:22:c0:22:bc:dd:81:ad:
c7:d9:b6:52:d9:87:37:93:65:aa:75:68:10:e4:d4:
6b:5e:6b:91:78:d5:81:7b:1f:bf:af:5b:40:5e:10:
de:3d:c1:d7:dc:fa:d5:2c:f3:61:d7:2e:2b:4d:ca:
c6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:3D:96:AE:FC:54:80:24:FA:36:FA:5C:E8:04:A4:8B:F7:CA:3A:40
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.234.0/24
77.81.68.0/22
85.204.164.0/22
89.39.176.0/22
94.24.111.0/24
185.85.176.0/21
188.208.128.0/22
188.214.244.0-188.214.255.255
IPv6:
2a04:f980::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56654
60088
Signature Algorithm: sha256WithRSAEncryption
3e:0d:fb:8c:05:69:b8:65:8a:7f:7f:f2:86:0e:1e:a0:0a:35:
0b:63:77:06:71:b9:d9:e2:b5:b5:2b:74:b9:d2:cf:68:ad:33:
89:f6:fb:59:dd:85:53:be:8c:63:f9:59:22:b8:12:fc:b0:c5:
21:aa:c1:99:e9:33:19:33:e0:5f:1a:de:8a:41:78:74:19:47:
c1:34:94:9a:3b:4d:da:49:be:da:20:d9:8f:c7:1d:d5:21:32:
db:69:5b:76:c0:3f:cf:b8:f6:35:88:87:1a:9a:e5:ae:14:06:
53:14:db:28:1a:71:cf:8f:09:37:67:17:77:ef:8c:f5:7d:3b:
23:e8:e7:4c:18:ef:c7:23:4e:59:4e:7e:7b:83:40:d4:48:6d:
e7:c6:70:f1:0c:ba:48:21:ed:59:55:91:5e:d7:16:aa:f6:93:
98:a4:1f:d8:6e:34:14:a0:7b:54:83:d6:a4:f1:eb:6b:f3:16:
3f:0b:42:4e:ec:6e:03:3a:4d:d4:0a:20:0f:df:90:af:35:9f:
8d:3d:c2:80:9f:9a:a5:4c:fa:66:55:32:cb:41:65:9c:8f:c4:
84:77:6f:10:03:17:e6:dd:4d:ad:f3:4b:22:0f:b8:1b:1c:0f:
b8:5c:d4:2b:25:77:26:d3:31:c5:e3:2a:76:e8:9d:7f:28:27:
54:f7:cd:64
-----BEGIN CERTIFICATE-----
MIIF2TCCBMGgAwIBAgISAYzDSNGDld10EsXhURTLRIkRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDQyOTM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjNkOTZhZWZjNTQ4MDI0ZmEzNmZhNWNlODA0YTQ4YmY3Y2EzYTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlML+yG+Ze0qIHbYSxwaCdpEYULw0
+GcX5Z+TKWBb/fHzt/EBeEYC3KNCVCO9SNqEGQKXvLvf7WRB/IWfRvuWHcUUhSyT
3YOozDvV+PHfb2/gUE872/4gjNyM3/2dY6oyFCYyzLZ+GqgwVc5RL+9+V6sQuqRu
AEi6qZgyr1KSc5xmmYxT/2xQxBQ3UzZFtXT1oH4M5pgyWMZRIOZWnKYchBwFUHFb
jmnnAmgO66MxOFdycMgnb49EYMJWMGe4qBU/ZEn14SSFxTRV3yLAIrzdga3H2bZS
2Yc3k2WqdWgQ5NRrXmuReNWBex+/r1tAXhDePcHX3PrVLPNh1y4rTcrGQQIDAQAB
o4IC5TCCAuEwHQYDVR0OBBYEFMY9lq78VIAk+jb6XOgEpIv3yjpAMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZkL2VkZDZi
OC1hYmJkLTRiODEtOTcwNy05NzFkMjhkNDNjMTQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmQvZWRkNmI4
LWFiYmQtNGI4MS05NzA3LTk3MWQyOGQ0M2MxNC8xL3hqMldydnhVZ0NUNk52cGM2
QVNraV9mS09rQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF8GCCsGAQUF
BwEHAQH/BFAwTjA9BAIAATA3AwQALmbqAwQCTVFEAwQCVcykAwQCWSewAwQAXhhv
AwQDuVWwAwQCvNCAMAsDBAK81vQDAwC81jANBAIAAjAHAwUDKgT5gDAfBggrBgEF
BQcBCAEB/wQQMA6gDDAKAgMA3U4CAwDquDANBgkqhkiG9w0BAQsFAAOCAQEAPg37
jAVpuGWKf3/yhg4eoAo1C2N3BnG52eK1tSt0udLPaK0zifb7Wd2FU76MY/lZIrgS
/LDFIarBmekzGTPgXxreikF4dBlHwTSUmjtN2km+2iDZj8cd1SEy22lbdsA/z7j2
NYiHGprlrhQGUxTbKBpxz48JN2cXd++M9X07I+jnTBjvxyNOWU5+e4NA1Eht58Zw
8Qy6SCHtWVWRXtcWqvaTmKQf2G40FKB7VIPWpPHra/MWPwtCTuxuAzpN1AogD9+Q
rzWfjT3CgJ+apUz6ZlUyy0FlnI/EhHdvEAMX5t1NrfNLIg+4GxwPuFzUKyV3JtMx
xeMqduidfygnVPfNZA==
-----END CERTIFICATE-----
Generated at Fri May 3 02:19:53 2024 by rpki-client on console-ams.rpki-client.org