Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
File: ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer (raw, json)
Hash identifier: yFNpycAHD5xQEgEx/xkPRi/eMMboy7Eaxvlgb+2ncb8=
Subject key identifier: CD:EE:78:AD:85:76:07:52:3B:50:B6:0A:CD:9E:22:CA:5A:10:78:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D4CA19AAA0D6ED43BFF79ABAEB878
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:52 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 34350
AS: 48455
IP: 80.70.48.0/20
IP: 195.162.2.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:4c:a1:9a:aa:0d:6e:d4:3b:ff:79:ab:ae:b8:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cdee78ad857607523b50b60acd9e22ca5a107854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f2:7a:c3:e7:fb:78:b2:52:e8:cb:67:5a:71:
72:44:18:b8:90:53:70:b6:fe:c3:bb:cf:09:fd:35:
ef:a6:18:07:6e:b1:94:78:72:8f:70:da:51:19:67:
32:a4:83:63:df:d6:07:74:b9:18:51:75:dd:e0:25:
ef:a5:b9:35:24:04:30:cc:be:7b:1c:57:7b:03:db:
9d:91:5a:b1:19:e3:04:e0:6b:e8:f1:74:c6:42:a5:
dd:a3:f2:49:05:e4:cf:27:44:52:1f:58:40:14:4d:
40:72:95:ea:31:2e:6b:87:8d:02:5f:d7:f8:4b:44:
4b:00:37:2b:3f:64:08:83:4d:a7:0a:3c:73:88:98:
78:fd:e4:48:c1:78:c5:8a:32:27:f8:11:73:eb:b7:
da:1b:a8:e9:92:dd:cf:8c:fb:e1:3b:a4:f3:d7:cc:
c4:5e:7c:83:92:66:b3:30:1d:ca:f2:91:c4:04:17:
f5:ea:b7:c4:34:30:0c:25:29:4e:63:12:cd:4a:81:
8d:fc:10:82:47:28:9e:9d:7f:94:6c:dc:e2:07:3e:
44:86:a4:b1:3c:97:d1:1d:b8:c0:29:7c:60:44:35:
92:f6:9b:9c:7d:17:04:0c:41:42:3e:a2:7a:68:90:
c5:64:10:57:93:62:34:00:64:5c:13:d8:ec:f6:1c:
db:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:EE:78:AD:85:76:07:52:3B:50:B6:0A:CD:9E:22:CA:5A:10:78:54
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.70.48.0/20
195.162.2.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34350
48455
Signature Algorithm: sha256WithRSAEncryption
5f:fd:f1:8f:a5:8b:d8:97:b8:fb:b5:ab:d5:e6:64:8a:aa:33:
8b:f0:46:2c:db:20:14:31:b6:3b:47:55:7b:b4:0f:65:05:d1:
12:06:7e:4a:4b:50:8d:fb:0d:8b:a2:9f:dd:18:f2:36:4f:37:
71:b9:04:15:77:3a:21:f5:a2:ed:b0:f1:e4:7b:31:b9:80:5b:
bb:4c:d8:05:39:a1:7b:d7:e8:8d:3e:09:1d:b6:71:96:88:9e:
fa:75:94:2d:e7:00:33:b1:22:6d:d7:96:f4:5f:b5:63:f2:99:
d6:ea:ec:c3:4e:fc:ab:d3:e2:b5:4a:46:53:90:15:54:c3:77:
6e:e6:1b:63:7f:61:30:95:a1:49:48:ef:be:67:8e:46:ef:bf:
f5:fd:ea:1c:39:04:e2:d4:d1:82:5c:26:c7:69:e0:07:ee:a3:
93:03:c8:3f:2a:c8:7a:c5:9b:58:67:e6:d0:da:1e:39:a4:88:
56:6d:3f:e0:e0:46:b7:a9:eb:64:4c:f7:df:08:1a:c1:09:eb:
2a:ce:ba:5f:48:fc:20:f6:d7:dc:fc:2e:ed:9b:f4:56:94:5a:
26:09:ff:7b:94:a9:78:a7:d5:20:2e:8c:d8:c7:c1:b0:76:f4:
48:86:e3:f4:41:0a:3f:0a:a4:49:81:a2:c6:de:93:f4:8d:56:
dd:e5:aa:58
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgISAYzCbUyhmqoNbtQ7/3mrrrh4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDAyOTUyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZGVlNzhhZDg1NzYwNzUyM2I1MGI2MGFjZDllMjJjYTVhMTA3ODU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fJ6w+f7eLJS6MtnWnFyRBi4kFNw
tv7Du88J/TXvphgHbrGUeHKPcNpRGWcypINj39YHdLkYUXXd4CXvpbk1JAQwzL57
HFd7A9udkVqxGeME4Gvo8XTGQqXdo/JJBeTPJ0RSH1hAFE1AcpXqMS5rh40CX9f4
S0RLADcrP2QIg02nCjxziJh4/eRIwXjFijIn+BFz67faG6jpkt3PjPvhO6Tz18zE
XnyDkmazMB3K8pHEBBf16rfENDAMJSlOYxLNSoGN/BCCRyienX+UbNziBz5EhqSx
PJfRHbjAKXxgRDWS9pucfRcEDEFCPqJ6aJDFZBBXk2I0AGRcE9js9hzblQIDAQAB
o4ICqzCCAqcwHQYDVR0OBBYEFM3ueK2FdgdSO1C2Cs2eIspaEHhUMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JjLzVhNDli
Zi1jMDU5LTRiZWEtODhkMy1jZjAxMjRjZWQ0ZDYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMvNWE0OWJm
LWMwNTktNGJlYS04OGQzLWNmMDEyNGNlZDRkNi8xL3plNTRyWVYyQjFJN1VMWUt6
WjRpeWxvUWVGUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQEUEYwAwQBw6ICMB8GCCsGAQUFBwEIAQH/BBAw
DqAMMAoCAwCGLgIDAL1HMA0GCSqGSIb3DQEBCwUAA4IBAQBf/fGPpYvYl7j7tavV
5mSKqjOL8EYs2yAUMbY7R1V7tA9lBdESBn5KS1CN+w2Lop/dGPI2TzdxuQQVdzoh
9aLtsPHkezG5gFu7TNgFOaF71+iNPgkdtnGWiJ76dZQt5wAzsSJt15b0X7Vj8pnW
6uzDTvyr0+K1SkZTkBVUw3du5htjf2EwlaFJSO++Z45G77/1/eocOQTi1NGCXCbH
aeAH7qOTA8g/Ksh6xZtYZ+bQ2h45pIhWbT/g4Ea3qetkTPffCBrBCesqzrpfSPwg
9tfc/C7tm/RWlFomCf97lKl4p9UgLozYx8GwdvRIhuP0QQo/CqRJgaLG3pP0jVbd
5apY
-----END CERTIFICATE-----
Generated at Fri May 3 09:43:33 2024 by rpki-client on console-ams.rpki-client.org