Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
File: y9IWsAV0TBjLOE09CdEkBm1V9i0.cer (raw, json)
Hash identifier: xXaCngD44di64noo4EB0obXsxNl0Tb0JjXLbt7RPyd8=
Subject key identifier: CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94AD98C36F6AEE675B043FCF25CE705
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:29:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.5.190.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:d9:8c:36:f6:ae:e6:75:b0:43:fc:f2:5c:e7:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cbd216b005744c18cb384d3d09d124066d55f62d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f0:6a:f0:49:d8:38:77:3b:da:38:62:5f:89:
52:00:c9:ce:67:17:dc:43:b9:82:24:00:de:9c:d8:
de:fc:b8:d5:98:f8:6c:72:1d:32:73:b1:4d:86:c7:
58:0a:3c:18:9d:f2:c0:c8:e2:44:2b:0f:83:08:61:
86:48:38:63:44:7c:07:2d:e9:14:b6:7a:3b:d0:54:
b2:c4:91:43:18:18:d4:c4:79:b0:90:e9:14:6c:58:
ba:4e:0e:47:73:f1:05:f1:b4:34:9e:99:ec:95:1c:
3d:34:c3:61:89:bd:6a:27:a7:ef:ed:63:f0:ca:76:
a7:66:ba:b7:f0:5f:0c:0d:05:e9:8e:80:fa:32:51:
35:c3:c9:5b:fe:08:8a:36:a5:4e:ca:43:63:8f:cf:
f9:8a:6d:10:01:8b:81:ae:4d:7f:9a:80:d9:9e:11:
9b:2e:d1:df:39:40:65:f8:f5:ff:5e:10:58:3a:40:
89:71:d6:be:5e:52:01:7f:a1:d4:6a:ca:30:b7:8e:
56:3d:8b:8c:1e:c4:9b:67:c7:0e:1e:83:5e:fd:60:
0a:2a:b8:4f:84:26:6a:1e:8f:a6:53:b7:57:f8:16:
8c:5c:f1:cf:f2:8b:da:d0:1b:64:b7:23:c1:11:f0:
45:ea:c4:97:e8:55:f2:ed:88:d5:5e:32:6e:c7:8b:
c3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.190.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:72:54:bd:5a:b7:dd:d8:93:f7:a3:fc:9e:e7:0a:77:c8:20:
c1:a9:be:a6:34:2d:8c:0b:ad:8d:c3:ee:17:da:74:0d:21:1a:
6e:66:f5:88:65:b3:ae:f9:32:ea:5e:84:0a:18:61:93:35:45:
42:7f:c3:d7:79:91:f9:ef:fb:07:cb:dc:b7:e1:75:e9:aa:56:
a8:0f:b0:c1:fb:e1:89:c1:87:2a:e6:02:14:2f:91:22:74:aa:
f7:b8:0e:5e:2d:39:da:8c:6b:5f:3f:15:21:bc:c9:0b:71:e1:
b6:be:ad:7e:27:4c:af:fb:a2:a1:dc:ab:da:a9:29:15:7e:0b:
50:a3:22:62:e2:f6:ac:40:ce:66:ed:b3:83:4b:1a:f7:02:2d:
3d:46:4a:88:f7:81:3d:0d:06:2e:0b:dc:89:c2:60:b2:8e:5d:
ad:fb:75:f8:60:fe:e6:41:03:31:7e:25:f5:00:9c:58:ed:9d:
19:d0:2d:94:69:d0:7c:76:a5:7b:24:dd:9f:c7:61:f6:8f:d3:
f6:65:69:57:eb:d4:af:87:47:5d:f0:a8:9b:ed:f5:1f:0f:fa:
80:a6:64:71:ac:dd:38:92:e8:a0:c1:32:8b:73:2c:e3:cc:e3:
5e:30:6d:40:8c:48:e8:8a:67:83:d1:cb:30:cb:fb:43:11:32:
b9:1b:66:31
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzJStmMNvau5nWwQ/zyXOcFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDgyOTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYmQyMTZiMDA1NzQ0YzE4Y2IzODRkM2QwOWQxMjQwNjZkNTVmNjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPBq8EnYOHc72jhiX4lSAMnOZxfc
Q7mCJADenNje/LjVmPhsch0yc7FNhsdYCjwYnfLAyOJEKw+DCGGGSDhjRHwHLekU
tno70FSyxJFDGBjUxHmwkOkUbFi6Tg5Hc/EF8bQ0npnslRw9NMNhib1qJ6fv7WPw
ynanZrq38F8MDQXpjoD6MlE1w8lb/giKNqVOykNjj8/5im0QAYuBrk1/moDZnhGb
LtHfOUBl+PX/XhBYOkCJcda+XlIBf6HUasowt45WPYuMHsSbZ8cOHoNe/WAKKrhP
hCZqHo+mU7dX+BaMXPHP8ova0BtktyPBEfBF6sSX6FXy7YjVXjJux4vD6wIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFMvSFrAFdEwYyzhNPQnRJAZtVfYtMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ2L2M1ZWI5
OS03Mjg5LTRlM2UtYThjZC0wNWJiZTRlZjA2YzAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDYvYzVlYjk5
LTcyODktNGUzZS1hOGNkLTA1YmJlNGVmMDZjMC8xL3k5SVdzQVYwVEJqTE9FMDlD
ZEVrQm0xVjlpMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQBwgW+MA0GCSqGSIb3DQEBCwUAA4IBAQCuclS9
Wrfd2JP3o/ye5wp3yCDBqb6mNC2MC62Nw+4X2nQNIRpuZvWIZbOu+TLqXoQKGGGT
NUVCf8PXeZH57/sHy9y34XXpqlaoD7DB++GJwYcq5gIUL5EidKr3uA5eLTnajGtf
PxUhvMkLceG2vq1+J0yv+6Kh3KvaqSkVfgtQoyJi4vasQM5m7bODSxr3Ai09RkqI
94E9DQYuC9yJwmCyjl2t+3X4YP7mQQMxfiX1AJxY7Z0Z0C2UadB8dqV7JN2fx2H2
j9P2ZWlX69Svh0dd8Kib7fUfD/qApmRxrN04kuigwTKLcyzjzONeMG1AjEjoimeD
0cswy/tDETK5G2Yx
-----END CERTIFICATE-----
Generated at Fri May 3 02:20:06 2024 by rpki-client on console-ams.rpki-client.org