Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
File: y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer (raw, json)
Hash identifier: IcugwTyx5BAES4VIrcWhh9/lKUsZbbVtmV1nJ+s5Nz0=
Subject key identifier: CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CF34F2F3199B0F768C8B9CD089D373C8C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 10 Jan 2024 12:18:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 147.78.132.0/22
IP: 2a14:6b80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f3:4f:2f:31:99:b0:f7:68:c8:b9:cd:08:9d:37:3c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 10 12:18:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e4:dd:62:b2:78:4c:44:c6:68:fb:40:11:63:
ca:48:1b:c8:1c:19:e2:06:51:a9:08:91:be:3c:05:
61:bf:18:98:7c:94:25:2f:05:1d:61:ee:56:aa:4b:
13:57:47:03:fd:07:2a:fb:b6:63:f3:73:20:7a:51:
0f:92:e5:21:31:fb:b8:03:89:f2:7c:bf:0a:4c:3f:
93:91:57:1e:73:09:3f:7c:b3:94:85:8e:07:3c:b6:
8e:55:dd:b2:c8:7d:dd:24:70:52:b5:3d:e3:48:91:
02:80:df:be:5a:da:12:52:58:16:92:a1:b7:8c:42:
ca:79:82:77:95:83:28:75:ab:6c:ba:c1:16:93:11:
09:ac:55:55:59:13:6e:8c:fd:da:46:60:dc:8a:03:
68:be:7d:43:85:e3:a5:6d:72:74:a5:d6:2c:b9:bc:
a7:25:f1:9e:e2:89:40:9b:d0:87:7f:0a:a4:6e:8a:
34:bb:66:45:fd:e7:b3:99:4a:a8:9e:68:7c:9b:1a:
11:ed:5d:30:cb:24:e6:ba:19:81:60:78:6c:cd:df:
6e:c2:fe:d8:a3:3c:3b:ea:a3:95:8c:af:6c:7b:4f:
bf:a1:af:bb:ff:bb:61:7e:72:fb:ce:05:c2:bc:aa:
be:52:f4:45:1a:3f:35:ac:0a:1a:59:86:d8:88:99:
c2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.132.0/22
IPv6:
2a14:6b80::/29
Signature Algorithm: sha256WithRSAEncryption
8d:7d:98:01:89:c4:c3:62:a8:b3:20:2a:3c:4a:5b:ee:56:ae:
9d:4d:1b:20:f3:92:22:84:6d:8a:e0:2c:1a:26:94:93:0d:77:
3c:cf:7c:bc:1f:e2:12:2d:00:4c:69:32:22:ff:59:7e:1f:9b:
83:91:bf:39:d4:fb:17:c3:09:45:f5:06:86:1a:a9:69:1d:4d:
65:84:06:f1:d1:6e:29:d4:f1:9f:48:b9:11:75:09:58:81:e2:
b5:2c:93:1c:36:64:d6:65:fa:7a:8c:53:b5:ab:1c:ae:75:c8:
44:9e:1b:19:13:00:25:01:32:bb:16:f7:9f:e0:c0:e5:bc:0b:
79:e3:0f:0a:08:b3:43:a3:a2:ae:f9:4f:3d:37:0b:bf:65:1b:
26:fb:45:57:b7:e3:d9:04:09:90:8f:10:c6:e6:14:f6:74:ec:
62:bb:ec:f1:55:e0:19:27:79:c7:26:fa:61:dc:a4:a8:d7:ef:
f1:bb:47:cb:0c:d5:03:a9:1c:55:f2:6a:20:94:3a:c0:6a:5d:
a6:b2:ea:59:b3:2e:a0:2e:c8:d4:17:9e:07:51:e1:76:da:e6:
06:78:42:79:a7:f7:5b:8e:f4:54:8a:dd:bf:73:73:91:5d:8a:
f9:d6:2a:43:84:84:40:cf:12:42:9a:b1:f4:0c:20:54:d6:91:
d2:b2:b8:8b
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzzTy8xmbD3aMi5zQidNzyMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTEwMTIxODIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYmI3YzIwYjU1YTQ3MGRhYjg5MmY0YzkxZWEwMDEwYmQxYzM5ZjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOTdYrJ4TETGaPtAEWPKSBvIHBni
BlGpCJG+PAVhvxiYfJQlLwUdYe5WqksTV0cD/Qcq+7Zj83MgelEPkuUhMfu4A4ny
fL8KTD+TkVcecwk/fLOUhY4HPLaOVd2yyH3dJHBStT3jSJECgN++WtoSUlgWkqG3
jELKeYJ3lYModatsusEWkxEJrFVVWRNujP3aRmDcigNovn1DheOlbXJ0pdYsubyn
JfGe4olAm9CHfwqkboo0u2ZF/eezmUqonmh8mxoR7V0wyyTmuhmBYHhszd9uwv7Y
ozw76qOVjK9se0+/oa+7/7thfnL7zgXCvKq+UvRFGj81rAoaWYbYiJnCsQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFMu3wgtVpHDauJL0yR6gAQvRw580MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FmLzdmMGMy
NC00NDBhLTRmZjctYTBjOC0yNTYzMzk3MzZjMmIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYvN2YwYzI0
LTQ0MGEtNGZmNy1hMGM4LTI1NjMzOTczNmMyYi8xL3k3ZkNDMVdrY05xNGt2VEpI
cUFCQzlIRG56US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCk06EMA0EAgACMAcDBQMqFGuAMA0GCSqGSIb3
DQEBCwUAA4IBAQCNfZgBicTDYqizICo8SlvuVq6dTRsg85IihG2K4CwaJpSTDXc8
z3y8H+ISLQBMaTIi/1l+H5uDkb851PsXwwlF9QaGGqlpHU1lhAbx0W4p1PGfSLkR
dQlYgeK1LJMcNmTWZfp6jFO1qxyudchEnhsZEwAlATK7Fvef4MDlvAt54w8KCLND
o6Ku+U89Nwu/ZRsm+0VXt+PZBAmQjxDG5hT2dOxiu+zxVeAZJ3nHJvph3KSo1+/x
u0fLDNUDqRxV8moglDrAal2msupZsy6gLsjUF54HUeF22uYGeEJ5p/dbjvRUit2/
c3ORXYr51ipDhIRAzxJCmrH0DCBU1pHSsriL
-----END CERTIFICATE-----
Generated at Fri May 3 03:51:26 2024 by rpki-client on console-fra.rpki-client.org