Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zR5W5MTEpRjyOIpay1rwRSzCpZU.cer
File: zR5W5MTEpRjyOIpay1rwRSzCpZU.cer (raw, json)
Hash identifier: buVwrAFGvYE/8wq7/cTan1BKPZQWRf4K0oblWNBJpiA=
Subject key identifier: CD:1E:56:E4:C4:C4:A5:18:F2:38:8A:5A:CB:5A:F0:45:2C:C2:A5:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DCCF77CBB4D032C96053E4460DFC46
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/zR5W5MTEpRjyOIpay1rwRSzCpZU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:30:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 61246
IP: 185.14.80.0/22
IP: 2a02:f900::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:cf:77:cb:b4:d0:32:c9:60:53:e4:46:0d:fc:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd1e56e4c4c4a518f2388a5acb5af0452cc2a595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:64:b3:56:c8:04:e5:67:27:77:de:a3:a8:89:
b3:b5:f0:d7:dd:19:1d:51:03:d7:24:a6:85:bf:7d:
e8:ad:66:da:80:6c:62:55:de:87:67:f4:ec:4e:44:
1f:cb:60:7c:77:ef:1c:72:67:0d:9a:ab:20:4f:e5:
c2:98:c2:64:ed:41:28:1c:1d:da:d6:c0:43:af:78:
8e:95:46:7e:e9:ad:42:20:35:1c:bc:07:0a:41:d2:
e0:31:43:a2:68:7b:71:00:26:8d:b6:86:00:02:5b:
d8:22:5b:4c:90:da:f8:af:ed:54:10:09:86:36:74:
bc:11:79:11:08:7e:a3:c9:a8:47:e2:81:8a:4b:85:
02:a6:e3:91:60:97:64:10:27:80:96:ec:9a:25:1f:
c4:61:58:4d:43:ac:cc:b7:7b:28:2f:72:02:08:94:
81:12:4e:d7:04:71:40:96:4b:85:9f:08:fb:d3:76:
91:8f:c7:0e:70:84:5d:b6:34:2e:4e:80:bb:fd:21:
56:93:41:62:6e:26:a3:41:cf:26:9c:4c:9e:60:86:
59:78:a0:ae:5c:d6:6a:75:4f:6b:80:1b:bc:74:ed:
45:31:cf:2e:27:7a:86:32:8f:2a:f9:cb:11:bc:86:
42:f9:95:a1:4b:25:da:4e:c0:6f:a7:7d:ab:2f:ae:
25:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:1E:56:E4:C4:C4:A5:18:F2:38:8A:5A:CB:5A:F0:45:2C:C2:A5:95
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/zR5W5MTEpRjyOIpay1rwRSzCpZU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.80.0/22
IPv6:
2a02:f900::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61246
Signature Algorithm: sha256WithRSAEncryption
7e:4e:de:ca:43:6e:11:4e:78:c3:72:89:04:d4:32:87:be:8b:
46:4f:fb:99:a6:64:a5:41:7c:ff:97:13:47:87:28:45:b4:1e:
b7:10:6b:ab:75:6b:57:ec:58:18:cb:a9:4b:1c:9e:92:d4:01:
a9:23:6f:7e:43:80:8b:76:ce:10:95:5f:8c:1b:77:0c:96:d0:
87:fe:50:c7:73:d7:ae:8a:78:49:67:d1:04:62:ff:6a:5a:51:
39:26:72:f8:92:1a:f1:c0:c7:b6:1a:96:f3:42:ff:e9:68:ec:
00:18:a6:c3:7a:a0:28:f3:8b:f2:5b:58:b4:a1:25:40:39:b9:
8a:3e:74:41:69:21:cb:05:63:19:8c:3e:24:ec:f0:c8:42:bf:
70:c0:e7:ea:3d:79:4b:2e:90:87:bb:c0:66:b5:85:9f:4a:1c:
0c:9f:23:d9:b9:3f:e4:1e:ed:f0:6e:7c:63:bb:76:8c:61:fa:
ad:e4:f7:c8:5a:bb:61:f7:37:e4:fa:92:a6:8f:79:bc:de:3b:
8c:70:fe:61:be:fc:4a:c3:ed:93:75:9f:20:5a:8e:21:73:a0:
03:3b:c7:d1:8e:74:48:01:61:c3:b0:e5:03:0e:8c:7a:e6:c9:
70:f8:72:62:5e:56:68:df:59:55:5a:d3:ec:74:99:85:03:85:
ad:62:53:1f
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzF3M93y7TQMslgU+RGDfxGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTYzMDMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDFlNTZlNGM0YzRhNTE4ZjIzODhhNWFjYjVhZjA0NTJjYzJhNTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGSzVsgE5Wcnd96jqImztfDX3Rkd
UQPXJKaFv33orWbagGxiVd6HZ/TsTkQfy2B8d+8ccmcNmqsgT+XCmMJk7UEoHB3a
1sBDr3iOlUZ+6a1CIDUcvAcKQdLgMUOiaHtxACaNtoYAAlvYIltMkNr4r+1UEAmG
NnS8EXkRCH6jyahH4oGKS4UCpuORYJdkECeAluyaJR/EYVhNQ6zMt3soL3ICCJSB
Ek7XBHFAlkuFnwj703aRj8cOcIRdtjQuToC7/SFWk0FibiajQc8mnEyeYIZZeKCu
XNZqdU9rgBu8dO1FMc8uJ3qGMo8q+csRvIZC+ZWhSyXaTsBvp32rL64lBwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFM0eVuTExKUY8jiKWsta8EUswqWVMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IwL2MwODdl
OS1kMTFkLTQ0YTYtOGM0ZC0yODU3ZjE3MDM3YTEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAvYzA4N2U5
LWQxMWQtNDRhNi04YzRkLTI4NTdmMTcwMzdhMS8xL3pSNVc1TVRFcFJqeU9JcGF5
MXJ3UlN6Q3BaVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuQ5QMA0EAgACMAcDBQMqAvkAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDvPjANBgkqhkiG9w0BAQsFAAOCAQEAfk7eykNuEU54
w3KJBNQyh76LRk/7maZkpUF8/5cTR4coRbQetxBrq3VrV+xYGMupSxyektQBqSNv
fkOAi3bOEJVfjBt3DJbQh/5Qx3PXrop4SWfRBGL/alpROSZy+JIa8cDHthqW80L/
6WjsABimw3qgKPOL8ltYtKElQDm5ij50QWkhywVjGYw+JOzwyEK/cMDn6j15Sy6Q
h7vAZrWFn0ocDJ8j2bk/5B7t8G58Y7t2jGH6reT3yFq7Yfc35PqSpo95vN47jHD+
Yb78SsPtk3WfIFqOIXOgAzvH0Y50SAFhw7DlAw6MeubJcPhyYl5WaN9ZVVrT7HSZ
hQOFrWJTHw==
-----END CERTIFICATE-----
Generated at Fri May 3 03:52:09 2024 by rpki-client on console-fra.rpki-client.org