Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer
File: k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer (raw, json)
Hash identifier: Ilu4tHbNPS/iJrB8ut1wMOCLseiNRsihCk0/xYmPJbg=
Subject key identifier: 93:51:5F:25:98:6E:4B:57:2A:78:B1:09:D9:95:C9:DD:F5:DA:12:66
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7275AF346656CFB823F8718CF93F6B0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 143.126.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:5a:f3:46:65:6c:fb:82:3f:87:18:cf:93:f6:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93515f25986e4b572a78b109d995c9ddf5da1266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:20:05:2f:e8:9b:c6:83:ba:fc:85:1c:86:19:
00:6d:68:a7:2e:59:42:2a:d2:4b:b7:18:cc:a4:08:
c2:4d:ff:69:d2:f0:25:64:21:32:eb:51:f2:fe:8b:
c4:bd:4c:4a:14:cb:87:9f:6f:84:1a:cc:29:d3:65:
03:20:8c:35:b8:ea:24:17:2d:eb:9a:47:85:ca:56:
53:0c:da:35:10:c0:cf:84:85:f2:42:ba:4d:38:76:
64:49:55:89:da:1b:ad:5a:93:77:f3:41:8b:8d:60:
3e:3b:3d:5e:0c:14:bf:c9:45:85:fb:7e:0c:c3:a8:
ae:1f:7a:4e:b4:3b:4d:67:ca:13:3b:ad:c2:60:79:
26:ab:e8:ca:af:9b:34:da:0e:98:23:ca:54:d8:97:
b1:a8:3d:1e:78:d5:75:1e:09:9c:24:46:87:1c:9c:
01:39:03:c0:c9:ee:88:88:4a:68:aa:c8:b8:ed:29:
51:fd:b2:85:47:21:02:c3:8e:0b:8f:cf:79:f0:54:
19:35:90:5c:30:db:b0:95:7d:6c:29:16:a6:46:13:
25:57:73:6b:83:7a:21:c2:f2:15:7e:a1:66:38:07:
e7:ac:ef:59:8c:cb:5a:17:3e:ba:70:39:b0:38:fb:
73:3a:ac:e1:90:ae:9d:7e:b4:16:45:69:cf:f6:7b:
b0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:51:5F:25:98:6E:4B:57:2A:78:B1:09:D9:95:C9:DD:F5:DA:12:66
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.126.0.0/16
Signature Algorithm: sha256WithRSAEncryption
75:76:82:ae:44:e1:7b:3d:87:7a:07:70:9a:20:91:85:c0:95:
0a:6e:7d:1c:a7:13:45:63:65:78:91:47:89:02:02:af:5b:ae:
00:01:00:2f:ca:74:f5:c2:81:5a:79:29:af:54:72:1f:8c:6a:
e4:c3:f7:cd:99:ca:54:86:42:61:a0:3d:83:55:a7:b4:63:10:
74:e6:87:03:56:9d:5b:3a:7c:53:99:7f:f7:bf:18:87:ba:f4:
af:65:a0:43:9a:57:7c:7e:7f:13:0a:f8:79:ac:db:08:14:7e:
8c:ba:49:f9:8a:fa:32:d1:9d:f3:4a:58:db:38:cf:46:99:78:
82:7d:62:04:08:8f:a4:cd:bc:5c:34:13:ee:a5:14:a4:f0:71:
9a:64:68:14:7b:35:a2:df:a3:17:a2:ca:ae:37:d3:bc:f4:2c:
59:02:23:83:a9:c6:5e:74:fc:59:d4:58:c8:a3:91:db:8b:78:
9d:fd:1e:dd:63:a8:ee:23:fd:2f:31:4b:ec:59:68:1b:cd:a9:
8d:bb:38:18:4a:e5:bd:e4:42:5e:6d:44:ac:a0:58:32:f3:18:
2d:07:54:ff:c4:90:8e:a4:db:d1:1a:a0:c4:7a:31:fb:77:15:
16:16:23:32:84:b9:a9:1f:ea:e9:99:a9:03:37:5b:bf:f4:a9:
e8:62:7c:31
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgISAYzHJ1rzRmVs+4I/hxjPk/awMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMjIzMTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzUxNWYyNTk4NmU0YjU3MmE3OGIxMDlkOTk1YzlkZGY1ZGExMjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCAFL+ibxoO6/IUchhkAbWinLllC
KtJLtxjMpAjCTf9p0vAlZCEy61Hy/ovEvUxKFMuHn2+EGswp02UDIIw1uOokFy3r
mkeFylZTDNo1EMDPhIXyQrpNOHZkSVWJ2hutWpN380GLjWA+Oz1eDBS/yUWF+34M
w6iuH3pOtDtNZ8oTO63CYHkmq+jKr5s02g6YI8pU2JexqD0eeNV1HgmcJEaHHJwB
OQPAye6IiEpoqsi47SlR/bKFRyECw44Lj8958FQZNZBcMNuwlX1sKRamRhMlV3Nr
g3ohwvIVfqFmOAfnrO9ZjMtaFz66cDmwOPtzOqzhkK6dfrQWRWnP9nuwPQIDAQAB
o4ICgzCCAn8wHQYDVR0OBBYEFJNRXyWYbktXKnixCdmVyd312hJmMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q5Lzg0YjAz
Yi01NjE5LTQyNzItOTQ3Zi0xM2Q1MTMyOGE5ZjcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDkvODRiMDNi
LTU2MTktNDI3Mi05NDdmLTEzZDUxMzI4YTlmNy8xL2sxRmZKWmh1UzFjcWVMRUoy
WlhKM2ZYYUVtWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF
BwEHAQH/BA8wDTALBAIAATAFAwMAj34wDQYJKoZIhvcNAQELBQADggEBAHV2gq5E
4Xs9h3oHcJogkYXAlQpufRynE0VjZXiRR4kCAq9brgABAC/KdPXCgVp5Ka9Uch+M
auTD982ZylSGQmGgPYNVp7RjEHTmhwNWnVs6fFOZf/e/GIe69K9loEOaV3x+fxMK
+Hms2wgUfoy6SfmK+jLRnfNKWNs4z0aZeIJ9YgQIj6TNvFw0E+6lFKTwcZpkaBR7
NaLfoxeiyq4307z0LFkCI4Opxl50/FnUWMijkduLeJ39Ht1jqO4j/S8xS+xZaBvN
qY27OBhK5b3kQl5tRKygWDLzGC0HVP/EkI6k29EaoMR6Mft3FRYWIzKEuakf6umZ
qQM3W7/0qehifDE=
-----END CERTIFICATE-----
Generated at Sat Nov 23 11:03:12 2024 by rpki-client on console-ams.rpki-client.org