Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AnK9OzKuyvJsqO2zyHj-V5Xyq28.cer
File: AnK9OzKuyvJsqO2zyHj-V5Xyq28.cer (raw, json)
Hash identifier: ekwljfyXv/USG7kM0QlYLwDqw5cCo+MztGL9NOtqkFU=
Subject key identifier: 02:72:BD:3B:32:AE:CA:F2:6C:A8:ED:B3:C8:78:FE:57:95:F2:AB:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4247B2D4C5A269549F4FEF15E07B44A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/af2e75-ecee-48e1-8af6-12dede9d0c71/1/AnK9OzKuyvJsqO2zyHj-V5Xyq28.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/af2e75-ecee-48e1-8af6-12dede9d0c71/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 47741
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 14:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:7b:2d:4c:5a:26:95:49:f4:fe:f1:5e:07:b4:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0272bd3b32aecaf26ca8edb3c878fe5795f2ab6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a5:91:fa:0f:0c:36:53:36:ff:9e:01:2a:3a:
a1:57:a2:d9:1e:88:87:8e:f0:52:db:5c:4d:08:d4:
4a:d6:74:cb:0e:a5:75:68:e0:49:ad:49:11:9e:6e:
c3:91:90:46:51:69:d1:68:1b:74:0a:a7:78:19:50:
14:19:69:85:12:ad:f8:56:de:34:1b:13:d8:07:5c:
d2:30:dc:50:e0:6f:09:6a:c7:20:72:60:02:ac:23:
8e:3d:16:74:1c:a1:42:0f:fe:1c:bd:c1:21:21:d6:
06:0a:40:82:24:66:2f:fa:1d:7d:fb:83:36:7c:7b:
72:11:b5:39:20:8d:b8:4c:2f:a4:9e:88:ef:54:bd:
0b:db:e7:09:07:36:50:d4:82:88:90:90:17:bb:78:
f8:13:50:21:2e:37:e7:c0:94:20:2d:0e:32:5b:2d:
26:9c:93:3e:4f:5e:b3:45:c2:dc:98:64:f9:61:05:
3b:e9:e7:77:0a:4d:73:db:a9:e3:fa:4f:96:30:fd:
f5:b3:c2:df:a0:0b:bf:02:fa:65:be:a9:74:27:21:
af:44:08:23:7c:cf:0a:3d:de:63:75:0e:ea:af:a7:
93:92:7b:bb:97:45:b2:6c:a6:f2:86:f9:98:51:88:
0d:e8:93:b4:ce:c8:84:f0:e0:58:a3:de:ac:cc:1e:
90:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:72:BD:3B:32:AE:CA:F2:6C:A8:ED:B3:C8:78:FE:57:95:F2:AB:6F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/af2e75-ecee-48e1-8af6-12dede9d0c71/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/af2e75-ecee-48e1-8af6-12dede9d0c71/1/AnK9OzKuyvJsqO2zyHj-V5Xyq28.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47741
Signature Algorithm: sha256WithRSAEncryption
92:46:93:da:d5:d4:1f:ca:a3:ff:46:bd:04:82:7b:22:37:4c:
88:5c:b9:6d:89:f9:6b:00:53:50:9c:e9:ec:9c:b4:09:42:5f:
c5:e4:27:bb:de:03:93:39:71:e8:0f:39:c8:db:a9:66:af:38:
43:2b:5b:53:30:4e:dc:ee:fc:04:72:41:cf:3f:25:e9:69:11:
89:f4:34:2b:bb:b6:3d:4b:7b:38:ed:e4:c5:f5:ba:0a:a3:f2:
9a:28:36:0a:66:96:c5:54:7d:52:98:d6:ff:1e:02:d3:9a:fa:
05:0c:6c:8f:c0:4f:74:42:34:27:30:d1:6f:07:b8:03:89:72:
a4:77:73:49:74:8c:1b:5f:ae:4b:83:ac:ab:28:75:c8:c9:2a:
b9:6a:47:66:af:75:b0:f6:db:01:fa:d6:fc:68:b9:98:31:0c:
5c:9e:62:c8:72:62:be:0e:13:b5:f3:18:14:d3:ff:b3:ff:a6:
0d:47:42:64:72:16:28:c0:79:7b:2b:21:08:e5:a4:94:0a:2a:
12:ad:f6:62:1b:99:af:83:83:61:1f:af:74:30:3f:b1:9d:79:
c3:ad:71:67:e5:52:32:58:01:74:2d:4f:47:ee:89:3a:32:07:
02:94:a7:64:4e:25:37:80:e6:62:5e:17:8d:2d:09:6d:5c:ad:
f0:eb:7d:32
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYzEJHstTFomlUn0/vFeB7RKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDgyOTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjcyYmQzYjMyYWVjYWYyNmNhOGVkYjNjODc4ZmU1Nzk1ZjJhYjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16WR+g8MNlM2/54BKjqhV6LZHoiH
jvBS21xNCNRK1nTLDqV1aOBJrUkRnm7DkZBGUWnRaBt0Cqd4GVAUGWmFEq34Vt40
GxPYB1zSMNxQ4G8JascgcmACrCOOPRZ0HKFCD/4cvcEhIdYGCkCCJGYv+h19+4M2
fHtyEbU5II24TC+knojvVL0L2+cJBzZQ1IKIkJAXu3j4E1AhLjfnwJQgLQ4yWy0m
nJM+T16zRcLcmGT5YQU76ed3Ck1z26nj+k+WMP31s8LfoAu/Avplvql0JyGvRAgj
fM8KPd5jdQ7qr6eTknu7l0WybKbyhvmYUYgN6JO0zsiE8OBYo96szB6QSwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFAJyvTsyrsrybKjts8h4/leV8qtvMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhkL2FmMmU3
NS1lY2VlLTQ4ZTEtOGFmNi0xMmRlZGU5ZDBjNzEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGQvYWYyZTc1
LWVjZWUtNDhlMS04YWY2LTEyZGVkZTlkMGM3MS8xL0FuSzlPekt1eXZKc3FPMnp5
SGotVjVYeXEyOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwC6fTANBgkqhkiG9w0BAQsFAAOCAQEAkkaT2tXUH8qj
/0a9BIJ7IjdMiFy5bYn5awBTUJzp7Jy0CUJfxeQnu94Dkzlx6A85yNupZq84Qytb
UzBO3O78BHJBzz8l6WkRifQ0K7u2PUt7OO3kxfW6CqPymig2CmaWxVR9UpjW/x4C
05r6BQxsj8BPdEI0JzDRbwe4A4lypHdzSXSMG1+uS4Osqyh1yMkquWpHZq91sPbb
AfrW/Gi5mDEMXJ5iyHJivg4TtfMYFNP/s/+mDUdCZHIWKMB5eyshCOWklAoqEq32
YhuZr4ODYR+vdDA/sZ15w61xZ+VSMlgBdC1PR+6JOjIHApSnZE4lN4DmYl4XjS0J
bVyt8Ot9Mg==
-----END CERTIFICATE-----
Generated at Thu May 23 00:15:38 2024 by rpki-client on console-ams.rpki-client.org