Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-ffHe85FSH3uf6wDiab3Tbw8PAE.cer
File: 1-ffHe85FSH3uf6wDiab3Tbw8PAE.cer (raw, json)
Hash identifier: UdHvQrplrfQfQSIYpXja7qTIg8wKiQiPT4nsvO7B2+U=
Subject key identifier: F9:F7:C7:7B:CE:45:48:7D:EE:7F:AC:03:89:A6:F7:4D:BC:3C:3C:01
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2A2B29D2E614110FE562EAB84BA11A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d2/9eac7f-9c21-4877-b0a0-0e9b687b5692/1/1-ffHe85FSH3uf6wDiab3Tbw8PAE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d2/9eac7f-9c21-4877-b0a0-0e9b687b5692/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:33:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 203521
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:2b:29:d2:e6:14:11:0f:e5:62:ea:b8:4b:a1:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:33:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f9f7c77bce45487dee7fac0389a6f74dbc3c3c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:08:7d:81:3d:ef:56:1b:d1:77:ab:f3:25:87:
e0:53:5b:d1:22:fd:6c:73:29:53:18:41:b5:23:0e:
2c:c7:73:86:cf:c1:90:bf:4e:5d:84:ac:89:6a:c6:
49:3a:75:7b:a6:bc:ed:5b:31:ae:38:fa:15:43:57:
4d:a1:7f:2d:94:f7:da:78:e0:a8:00:f8:7b:da:64:
81:4c:0f:59:48:58:8d:bf:3a:c8:65:56:cb:89:13:
88:7c:b5:f8:4c:23:3a:99:75:2d:d8:31:e0:af:3b:
7c:d9:70:97:e2:b6:46:91:2d:14:3b:d2:de:21:04:
26:8b:5d:b5:b4:94:a2:62:34:ad:78:f8:62:80:33:
24:2e:d6:55:bf:e1:9e:22:3d:04:dd:bd:5d:22:6f:
66:34:5f:a8:59:4e:45:ab:b1:ad:c1:80:8f:f8:57:
01:d7:a7:7f:4f:28:54:63:80:1d:86:ee:f2:15:18:
25:87:a0:85:54:ea:72:5e:e7:4e:9c:31:eb:37:27:
9d:fc:31:4a:be:14:6c:f1:e7:11:f7:0d:82:46:e6:
61:c5:db:18:df:99:19:59:ca:e0:f4:f3:58:32:9a:
45:e1:79:bf:09:85:fa:46:77:47:ed:12:a4:5a:04:
9d:11:19:dc:aa:a0:61:1a:18:e8:8f:66:74:73:cc:
e5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F7:C7:7B:CE:45:48:7D:EE:7F:AC:03:89:A6:F7:4D:BC:3C:3C:01
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/9eac7f-9c21-4877-b0a0-0e9b687b5692/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/9eac7f-9c21-4877-b0a0-0e9b687b5692/1/1-ffHe85FSH3uf6wDiab3Tbw8PAE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203521
Signature Algorithm: sha256WithRSAEncryption
56:95:d3:fb:b7:90:2e:85:86:ed:d6:fa:02:c6:fc:31:c1:92:
9b:39:68:77:9e:b7:f6:9a:97:bb:b2:6e:ca:70:66:6b:d8:7d:
b6:04:09:10:8a:5f:0b:2e:4e:f8:76:08:6d:2a:e0:26:0f:f0:
18:b9:5f:ec:fe:b8:16:63:39:50:7b:a7:0b:6d:dd:e9:a8:4b:
4b:9e:d7:8d:5f:c1:97:7c:bf:9e:fc:d4:88:b4:50:b4:1e:a0:
d2:fb:1e:4c:8e:2d:ce:4b:50:dc:c8:9b:68:1d:30:e7:4e:6c:
0f:67:bc:a1:41:43:4b:cd:37:27:d4:b9:21:ba:7a:ae:94:f1:
40:f5:28:b8:dd:0f:da:d7:e9:f4:dd:a2:f5:d1:41:cb:8b:2f:
59:d2:be:92:d7:b4:d8:a4:90:0e:20:22:ef:8d:f4:5c:6b:d0:
98:f4:9f:af:f7:b2:32:af:69:e5:ac:e0:2c:43:9c:cb:5e:84:
a1:62:14:b3:b6:4c:b5:ac:50:2b:71:19:0d:f6:08:3d:e4:4c:
af:81:63:71:3b:35:59:9d:10:8a:a4:04:f8:d8:07:6e:a9:68:
f5:94:5b:5c:44:7f:fd:46:db:50:2b:90:24:89:aa:ac:83:43:
ca:95:ad:7a:e9:d6:12:39:c2:35:b6:c4:49:95:c3:ec:9c:61:
af:f9:7a:73
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgISAYzKKisp0uYUEQ/lYuq4S6EaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTIzMzMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOWY3Yzc3YmNlNDU0ODdkZWU3ZmFjMDM4OWE2Zjc0ZGJjM2MzYzAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAh9gT3vVhvRd6vzJYfgU1vRIv1s
cylTGEG1Iw4sx3OGz8GQv05dhKyJasZJOnV7prztWzGuOPoVQ1dNoX8tlPfaeOCo
APh72mSBTA9ZSFiNvzrIZVbLiROIfLX4TCM6mXUt2DHgrzt82XCX4rZGkS0UO9Le
IQQmi121tJSiYjStePhigDMkLtZVv+GeIj0E3b1dIm9mNF+oWU5Fq7GtwYCP+FcB
16d/TyhUY4Adhu7yFRglh6CFVOpyXudOnDHrNyed/DFKvhRs8ecR9w2CRuZhxdsY
35kZWcrg9PNYMppF4Xm/CYX6RndH7RKkWgSdERncqqBhGhjoj2Z0c8zlcwIDAQAB
o4ICgDCCAnwwHQYDVR0OBBYEFPn3x3vORUh97n+sA4mm9028PDwBMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QyLzllYWM3
Zi05YzIxLTQ4NzctYjBhMC0wZTliNjg3YjU2OTIvMS8wfQYIKwYBBQUHMAqGcXJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIvOWVhYzdm
LTljMjEtNDg3Ny1iMGEwLTBlOWI2ODdiNTY5Mi8xLzEtZmZIZTg1RlNIM3VmNndE
aWFiM1RidzhQQUUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u
ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD
MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEF
BQcBCAEB/wQLMAmgBzAFAgMDGwEwDQYJKoZIhvcNAQELBQADggEBAFaV0/u3kC6F
hu3W+gLG/DHBkps5aHeet/aal7uybspwZmvYfbYECRCKXwsuTvh2CG0q4CYP8Bi5
X+z+uBZjOVB7pwtt3emoS0ue141fwZd8v5781Ii0ULQeoNL7HkyOLc5LUNzIm2gd
MOdObA9nvKFBQ0vNNyfUuSG6eq6U8UD1KLjdD9rX6fTdovXRQcuLL1nSvpLXtNik
kA4gIu+N9Fxr0Jj0n6/3sjKvaeWs4CxDnMtehKFiFLO2TLWsUCtxGQ32CD3kTK+B
Y3E7NVmdEIqkBPjYB26paPWUW1xEf/1G21ArkCSJqqyDQ8qVrXrp1hI5wjW2xEmV
w+ycYa/5enM=
-----END CERTIFICATE-----
Generated at Wed May 22 23:43:23 2024 by rpki-client on console-fra.rpki-client.org