Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
File: zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer (raw, json)
Hash identifier: n/91tshDbqXcnE8kiv4ocs1VkvBWNiFLk/w9jz0uH9Y=
Subject key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7947AD2B4E9C902C095057024141515
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:30:45 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.145.152.0/22
IP: 80.83.80.0 -- 80.83.89.255
IP: 80.83.91.0 -- 80.83.95.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:7a:d2:b4:e9:c9:02:c0:95:05:70:24:14:15:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cec5afe769b94346e1cd362eb85f875b23b17277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ce:59:2f:2b:10:21:2e:cc:6f:8e:76:87:05:
61:0c:7a:81:26:8d:a3:e7:ba:17:cc:47:c0:e9:42:
29:0c:9f:c2:cb:ad:a0:c4:d9:9b:d9:b7:9e:4d:7d:
4a:9c:7d:18:60:8b:c6:e2:01:ee:90:2b:34:8a:79:
97:39:e7:52:a0:cd:69:1b:68:98:82:55:f1:8f:dc:
b5:78:94:43:50:cc:6a:01:96:b5:c8:81:25:1e:96:
77:f4:81:91:80:c8:64:18:9d:21:5d:d1:aa:8f:e7:
4c:f1:4d:86:a1:f3:be:bb:ca:e0:d7:d9:a9:3c:d4:
84:11:26:05:cf:32:b4:01:f4:a5:58:47:db:3a:5e:
46:f2:ab:6a:93:97:5a:a6:5d:d4:cc:ec:c8:8a:57:
27:3b:25:f5:39:2a:0d:c4:c2:cd:cd:6c:a5:62:a6:
72:8d:b0:6b:37:e7:44:0b:50:34:34:fa:39:fd:31:
b7:8e:ce:4c:a3:e7:8a:68:04:1f:28:f3:9b:81:91:
97:bc:ed:1c:9a:e5:65:9a:eb:81:a0:00:27:b8:01:
ba:17:3d:c4:b2:a8:d5:fc:5c:6b:d9:81:fe:7c:c0:
a5:5a:a6:f6:a5:30:b6:05:81:e0:db:68:7d:f5:a6:
24:d7:de:fb:8e:4a:be:1f:6d:6c:89:6e:13:b4:b8:
1e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.152.0/22
80.83.80.0-80.83.89.255
80.83.91.0-80.83.95.255
Signature Algorithm: sha256WithRSAEncryption
a0:76:18:c9:a2:c8:0c:1d:bd:67:28:3b:74:9e:93:27:97:00:
62:30:99:3c:12:d4:c9:1c:c4:3d:8a:cb:f5:c8:86:82:80:c8:
85:a9:59:11:42:8c:ea:af:ec:67:fb:17:d7:43:9a:ad:28:fe:
8b:c0:ef:f1:e7:83:db:c2:1d:60:54:84:43:82:a0:12:fb:e4:
c8:ed:9b:02:d4:38:41:b3:e8:7e:7d:da:bd:b3:36:2b:18:04:
b6:9d:8a:4a:9d:01:46:31:22:48:b1:26:c8:fb:26:59:1e:31:
28:9c:c1:e5:7f:59:e1:6c:57:02:76:7d:10:b7:1f:74:6d:5f:
24:dd:9c:bd:2f:79:f3:44:1e:16:77:11:55:b0:44:cb:0d:9b:
6e:4a:b9:9c:5f:11:8f:1e:75:fa:de:33:83:20:71:47:49:aa:
f8:87:1b:84:0a:8b:b3:4c:78:28:fd:eb:0e:76:bf:82:19:8f:
cf:af:77:ba:5f:51:a9:f6:77:45:24:58:52:b4:7f:5f:2c:23:
48:0c:bf:d3:8b:04:f9:43:c6:88:5f:1e:78:f1:30:db:24:ef:
34:f5:73:82:b2:94:60:32:42:ad:25:c4:ed:e0:fe:ff:06:7a:
1e:19:d9:d1:96:36:87:ff:8c:10:35:01:d8:0b:18:1d:b7:6f:
fd:89:2a:ea
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYzHlHrStOnJAsCVBXAkFBUVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDAzMDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZWM1YWZlNzY5Yjk0MzQ2ZTFjZDM2MmViODVmODc1YjIzYjE3Mjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl85ZLysQIS7Mb452hwVhDHqBJo2j
57oXzEfA6UIpDJ/Cy62gxNmb2beeTX1KnH0YYIvG4gHukCs0inmXOedSoM1pG2iY
glXxj9y1eJRDUMxqAZa1yIElHpZ39IGRgMhkGJ0hXdGqj+dM8U2GofO+u8rg19mp
PNSEESYFzzK0AfSlWEfbOl5G8qtqk5dapl3UzOzIilcnOyX1OSoNxMLNzWylYqZy
jbBrN+dEC1A0NPo5/TG3js5Mo+eKaAQfKPObgZGXvO0cmuVlmuuBoAAnuAG6Fz3E
sqjV/Fxr2YH+fMClWqb2pTC2BYHg22h99aYk1977jkq+H21siW4TtLgeMQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFM7Fr+dpuUNG4c02Lrhfh1sjsXJ3MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhiLzNkNTY5
Yy0xOTA3LTRkMmMtYWNlZC0zMzI0N2M4ZTFjMWYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGIvM2Q1Njlj
LTE5MDctNGQyYy1hY2VkLTMzMjQ3YzhlMWMxZi8xL3pzV3Y1Mm01UTBiaHpUWXV1
Ri1IV3lPeGNuYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF
BwEHAQH/BCwwKjAoBAIAATAiAwQCLZGYMAwDBARQU1ADBAFQU1gwDAMEAFBTWwME
BVBTQDANBgkqhkiG9w0BAQsFAAOCAQEAoHYYyaLIDB29Zyg7dJ6TJ5cAYjCZPBLU
yRzEPYrL9ciGgoDIhalZEUKM6q/sZ/sX10OarSj+i8Dv8eeD28IdYFSEQ4KgEvvk
yO2bAtQ4QbPofn3avbM2KxgEtp2KSp0BRjEiSLEmyPsmWR4xKJzB5X9Z4WxXAnZ9
ELcfdG1fJN2cvS9580QeFncRVbBEyw2bbkq5nF8Rjx51+t4zgyBxR0mq+IcbhAqL
s0x4KP3rDna/ghmPz693ul9RqfZ3RSRYUrR/XywjSAy/04sE+UPGiF8eePEw2yTv
NPVzgrKUYDJCrSXE7eD+/wZ6HhnZ0ZY2h/+MEDUB2AsYHbdv/Ykq6g==
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:59:06 2024 by rpki-client on console-fra.rpki-client.org