Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/z3P3vZzZk2geMP7FxZtHVlIroxw.cer
File: z3P3vZzZk2geMP7FxZtHVlIroxw.cer (raw, json)
Hash identifier: RWO+Wx+HvlVR6wmtgTt7Dxb7aX/2OqEqZ/S8oj1EQGE=
Subject key identifier: CF:73:F7:BD:9C:D9:93:68:1E:30:FE:C5:C5:9B:47:56:52:2B:A3:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3488E7E127A2A5EFBBE0D4275AB01C6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/0b0d7f-8196-4275-a911-7a793992fba0/1/z3P3vZzZk2geMP7FxZtHVlIroxw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/0b0d7f-8196-4275-a911-7a793992fba0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.220.129.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:8e:7e:12:7a:2a:5e:fb:be:0d:42:75:ab:01:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cf73f7bd9cd993681e30fec5c59b4756522ba31c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8b:52:a6:7b:75:7a:f3:0e:6e:0d:97:18:fc:
4a:eb:1a:bb:bc:5f:c7:67:e6:29:1e:09:0d:c7:9a:
bd:58:cf:06:97:ba:70:66:73:84:dd:6c:ac:64:12:
fe:a5:36:b0:5e:87:f2:a6:52:68:0f:41:f4:08:fe:
b2:27:48:2c:7d:04:4b:6a:fc:9e:d2:fa:c9:a2:7b:
fe:87:72:9d:e6:1c:b4:87:0e:c5:0e:67:e5:5b:60:
b3:a0:c5:82:46:1b:6a:cf:07:c7:d1:1e:b5:0c:4d:
a0:d7:f0:00:90:10:6d:e8:f6:c7:f7:ed:bb:9c:df:
44:d4:ef:f8:c0:3f:43:75:d2:cf:ae:88:9f:96:aa:
0b:4d:a9:e8:e9:59:15:24:8a:04:07:b5:18:7c:de:
18:d4:5b:ea:59:c0:e4:94:3b:d0:cd:23:79:c5:3d:
c9:76:88:e6:ca:89:46:2d:63:de:fe:1b:7f:1f:44:
9e:aa:ed:29:6e:83:e0:74:57:9a:8f:30:8a:0b:cb:
cc:c1:64:8d:1d:b8:37:1d:13:34:d4:c5:bc:db:af:
95:6b:40:ce:84:d9:0b:63:7b:cb:b6:64:95:3a:17:
72:57:0a:e2:57:43:c0:d7:c2:f6:e2:fc:f8:8d:49:
bc:cb:71:07:e6:ce:4e:7e:fd:0b:04:d9:12:46:da:
94:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:73:F7:BD:9C:D9:93:68:1E:30:FE:C5:C5:9B:47:56:52:2B:A3:1C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0b0d7f-8196-4275-a911-7a793992fba0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0b0d7f-8196-4275-a911-7a793992fba0/1/z3P3vZzZk2geMP7FxZtHVlIroxw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.129.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:1a:ec:ef:c8:35:79:fc:1c:4a:44:b3:14:5c:62:0c:95:44:
bd:eb:5d:8d:e6:f4:65:42:76:ba:b8:7e:d7:4e:bb:5a:cf:f0:
22:93:c4:3a:ed:18:6b:5a:ec:6c:e9:b5:5f:a3:20:86:68:d4:
ac:95:02:0c:cc:bd:aa:19:bc:dc:76:6f:41:59:e7:b5:5e:53:
aa:f0:e0:95:b1:e2:97:85:c3:da:47:1b:fa:4f:0c:3d:96:8a:
3b:e7:62:3e:e8:1c:12:7c:e7:59:f7:ef:77:95:2a:61:f4:77:
4d:1a:75:e8:f4:a3:85:af:b9:2e:00:32:bb:a5:ef:3b:1b:0a:
c1:8a:ae:e5:b5:b2:2c:6f:9d:c9:a8:fc:0f:b9:be:59:45:92:
b5:cd:4a:84:5f:c1:40:04:04:1e:80:8a:e3:78:f3:2f:1a:60:
1a:18:06:ff:54:18:1e:92:96:fd:4e:0b:06:b9:46:50:19:3e:
6c:dd:fb:48:51:2e:d3:a2:27:14:7e:74:82:b5:66:e4:c4:08:
94:e0:f4:fa:ba:6a:b1:a0:56:43:d9:ad:15:d2:29:8b:49:38:
39:d9:4c:f7:53:bb:5f:12:27:77:30:41:22:01:d2:ba:3a:22:
0d:d0:53:9e:98:d8:0a:d3:5b:27:95:25:fa:15:48:69:da:a8:
60:03:07:d8
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzDSI5+EnoqXvu+DUJ1qwHGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDQyOTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjczZjdiZDljZDk5MzY4MWUzMGZlYzVjNTliNDc1NjUyMmJhMzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqItSpnt1evMObg2XGPxK6xq7vF/H
Z+YpHgkNx5q9WM8Gl7pwZnOE3WysZBL+pTawXofyplJoD0H0CP6yJ0gsfQRLavye
0vrJonv+h3Kd5hy0hw7FDmflW2CzoMWCRhtqzwfH0R61DE2g1/AAkBBt6PbH9+27
nN9E1O/4wD9DddLProiflqoLTano6VkVJIoEB7UYfN4Y1FvqWcDklDvQzSN5xT3J
dojmyolGLWPe/ht/H0Sequ0pboPgdFeajzCKC8vMwWSNHbg3HRM01MW826+Va0DO
hNkLY3vLtmSVOhdyVwriV0PA18L24vz4jUm8y3EH5s5Ofv0LBNkSRtqUkwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFM9z972c2ZNoHjD+xcWbR1ZSK6McMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RmLzBiMGQ3
Zi04MTk2LTQyNzUtYTkxMS03YTc5Mzk5MmZiYTAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYvMGIwZDdm
LTgxOTYtNDI3NS1hOTExLTdhNzkzOTkyZmJhMC8xL3ozUDN2WnpaazJnZU1QN0Z4
WnRIVmxJcm94dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW9yBMA0GCSqGSIb3DQEBCwUAA4IBAQA/Guzv
yDV5/BxKRLMUXGIMlUS9612N5vRlQna6uH7XTrtaz/Aik8Q67RhrWuxs6bVfoyCG
aNSslQIMzL2qGbzcdm9BWee1XlOq8OCVseKXhcPaRxv6Tww9loo752I+6BwSfOdZ
9+93lSph9HdNGnXo9KOFr7kuADK7pe87GwrBiq7ltbIsb53JqPwPub5ZRZK1zUqE
X8FABAQegIrjePMvGmAaGAb/VBgekpb9TgsGuUZQGT5s3ftIUS7ToicUfnSCtWbk
xAiU4PT6umqxoFZD2a0V0imLSTg52Uz3U7tfEid3MEEiAdK6OiIN0FOemNgK01sn
lSX6FUhp2qhgAwfY
-----END CERTIFICATE-----
Generated at Fri May 3 07:36:08 2024 by rpki-client on console-ams.rpki-client.org