Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/z13l9P7Bb1FvC8TWMcJidmP5BfM.cer
File: z13l9P7Bb1FvC8TWMcJidmP5BfM.cer (raw, json)
Hash identifier: kO4z5P3NFvJkTgB5XUd2vF6VUi3E6xDDTKuetVMy584=
Subject key identifier: CF:5D:E5:F4:FE:C1:6F:51:6F:0B:C4:D6:31:C2:62:76:63:F9:05:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26CEEF8920DBEE1772D133B4A914450
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 197082
IP: 91.217.225.0/24
IP: 185.75.216.0/22
IP: 2a05:4dc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:ee:f8:92:0d:be:e1:77:2d:13:3b:4a:91:44:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cf5de5f4fec16f516f0bc4d631c2627663f905f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:82:31:8e:11:4a:9d:5b:86:3d:a4:f5:6a:52:
68:9d:e1:62:01:fe:7a:e2:da:ed:71:e7:b5:10:e2:
c5:eb:60:3e:6e:69:3e:4a:71:fc:b0:42:5c:fd:2b:
8a:5a:ca:b4:dd:d3:62:49:56:e4:b9:67:ac:0a:06:
cd:7e:26:00:8d:a0:51:87:98:61:fd:10:0a:82:bf:
b0:55:06:f7:55:5c:30:d5:85:44:84:74:f7:9c:40:
88:88:10:13:4f:4f:92:d1:08:09:f3:9c:6b:65:b1:
e4:bf:30:c6:d9:1a:c0:1f:f0:a3:a8:e0:80:41:28:
ba:04:8e:de:84:45:1f:bf:1e:cd:91:32:a8:05:fe:
95:39:c9:d5:3c:42:39:2a:7e:96:a1:b5:ee:6d:04:
31:0f:a2:86:99:dc:0a:46:f1:db:d1:91:8e:43:ab:
98:6e:b9:10:f0:eb:d8:1f:dd:f7:f4:18:6e:37:c8:
ba:15:33:ff:05:78:d6:40:f4:a6:38:74:64:bb:90:
a5:d6:bf:f0:84:54:04:41:c6:f6:fa:17:07:e4:2e:
30:47:8a:89:02:c9:52:07:8b:e3:ac:4f:6d:5e:69:
74:e8:85:c3:65:6a:df:b9:c2:27:3d:94:aa:d2:14:
00:9f:8b:e2:57:0e:88:ce:90:2f:c1:b7:05:9b:1c:
4a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:5D:E5:F4:FE:C1:6F:51:6F:0B:C4:D6:31:C2:62:76:63:F9:05:F3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.225.0/24
185.75.216.0/22
IPv6:
2a05:4dc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197082
Signature Algorithm: sha256WithRSAEncryption
3b:1e:f9:fa:e8:78:1b:50:98:3f:9f:24:b6:68:1f:49:af:34:
2e:4d:c9:f1:a0:24:5e:3e:2b:ed:fa:5d:a2:d4:28:f8:3e:d7:
61:cb:62:f0:6c:97:04:d0:37:4c:be:be:7e:5b:0c:d5:c5:8f:
71:b3:06:51:ab:59:95:08:00:25:0e:ed:8c:4b:33:db:0e:0c:
b4:33:ef:bc:0b:fe:dc:72:47:f6:4e:cf:28:2e:81:0d:d2:62:
ac:e7:36:45:95:a3:f2:70:b8:22:24:3f:30:2c:33:45:08:69:
58:e1:89:a8:9e:17:e9:1a:a7:30:cf:9f:35:72:2b:19:b9:0c:
d2:0c:5d:e1:2c:63:45:20:fd:a6:5c:ef:9b:00:b4:85:dc:ff:
50:05:67:4d:e9:11:18:5d:88:24:c1:3e:7f:d9:4b:b4:db:7a:
04:3c:f6:93:66:90:8c:31:c7:4e:da:71:02:2e:3b:05:c3:f7:
3c:c9:ea:7c:f8:5a:f3:81:23:5f:4b:53:3a:2a:f8:72:b4:14:
6d:78:32:e9:ea:5a:52:48:1d:db:e4:76:30:37:56:43:81:ca:
a4:a3:63:46:94:7a:8a:69:3b:54:55:b0:47:04:42:24:31:a1:
ee:fc:f3:d7:ed:fd:9c:0c:7a:03:0f:9f:0e:60:5b:4e:a2:5e:
88:a3:9f:4a
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAYzCbO74kg2+4XctEztKkURQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDAyOTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjVkZTVmNGZlYzE2ZjUxNmYwYmM0ZDYzMWMyNjI3NjYzZjkwNWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioIxjhFKnVuGPaT1alJoneFiAf56
4trtcee1EOLF62A+bmk+SnH8sEJc/SuKWsq03dNiSVbkuWesCgbNfiYAjaBRh5hh
/RAKgr+wVQb3VVww1YVEhHT3nECIiBATT0+S0QgJ85xrZbHkvzDG2RrAH/CjqOCA
QSi6BI7ehEUfvx7NkTKoBf6VOcnVPEI5Kn6WobXubQQxD6KGmdwKRvHb0ZGOQ6uY
brkQ8OvYH9339BhuN8i6FTP/BXjWQPSmOHRku5Cl1r/whFQEQcb2+hcH5C4wR4qJ
AslSB4vjrE9tXml06IXDZWrfucInPZSq0hQAn4viVw6IzpAvwbcFmxxKxwIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFM9d5fT+wW9RbwvE1jHCYnZj+QXzMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y4L2UxZTY3
MC02MjZhLTRjMTUtYTY2OS02ZmUxNDk0ZmJjMmMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjgvZTFlNjcw
LTYyNmEtNGMxNS1hNjY5LTZmZTE0OTRmYmMyYy8xL3oxM2w5UDdCYjFGdkM4VFdN
Y0ppZG1QNUJmTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQAW9nhAwQCuUvYMA0EAgACMAcDBQMqBU3AMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMB2jANBgkqhkiG9w0BAQsFAAOCAQEAOx75
+uh4G1CYP58ktmgfSa80Lk3J8aAkXj4r7fpdotQo+D7XYcti8GyXBNA3TL6+flsM
1cWPcbMGUatZlQgAJQ7tjEsz2w4MtDPvvAv+3HJH9k7PKC6BDdJirOc2RZWj8nC4
IiQ/MCwzRQhpWOGJqJ4X6RqnMM+fNXIrGbkM0gxd4SxjRSD9plzvmwC0hdz/UAVn
TekRGF2IJME+f9lLtNt6BDz2k2aQjDHHTtpxAi47BcP3PMnqfPha84EjX0tTOir4
crQUbXgy6epaUkgd2+R2MDdWQ4HKpKNjRpR6imk7VFWwRwRCJDGh7vzz1+39nAx6
Aw+fDmBbTqJeiKOfSg==
-----END CERTIFICATE-----
Generated at Fri May 3 11:08:13 2024 by rpki-client on console-fra.rpki-client.org