Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0WvbquPjCjoSaBh8YiaL0w8wtLM.cer
File: 0WvbquPjCjoSaBh8YiaL0w8wtLM.cer (raw, json)
Hash identifier: NwBHw1URxDYQLGr+zrvCkJYhKUZb08UkZtTY/3kDVxM=
Subject key identifier: D1:6B:DB:AA:E3:E3:0A:3A:12:68:18:7C:62:26:8B:D3:0F:30:B4:B3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94E6C5E131733AEC1EE3B206D11427B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/9e82c2-44ea-4ac0-a9c0-95d20cf9d504/1/0WvbquPjCjoSaBh8YiaL0w8wtLM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/9e82c2-44ea-4ac0-a9c0-95d20cf9d504/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:33:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 59449
AS: 198923
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:6c:5e:13:17:33:ae:c1:ee:3b:20:6d:11:42:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:33:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d16bdbaae3e30a3a1268187c62268bd30f30b4b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ec:26:a5:eb:2b:47:ab:66:d1:ba:79:65:79:
1e:8b:02:4e:f8:3c:4b:8a:18:bf:4c:b1:3c:bb:2b:
d0:9f:53:83:de:fc:2f:7f:44:7b:f2:db:5e:08:cc:
cc:65:02:47:68:c9:1e:cd:48:6f:8b:5e:68:31:af:
50:d9:4a:2e:22:91:f1:a8:83:7f:06:ca:9c:02:5b:
90:ee:ef:22:32:df:56:b3:a2:c3:74:a0:3b:70:13:
15:05:6a:e1:8d:02:d7:59:35:d6:18:00:f6:55:aa:
5a:b4:b5:13:11:bf:e6:96:2b:9e:fb:c7:2c:26:e5:
0b:1b:24:4b:e9:19:10:61:19:2c:e6:90:9a:b2:9b:
71:5d:a6:bd:d1:55:db:cf:f2:1b:9d:f1:2c:ff:67:
7c:81:3f:77:b5:f2:ad:0f:9e:1e:ae:17:6d:8e:87:
31:50:11:91:f6:06:fc:54:19:da:a1:2b:04:21:e8:
be:81:ef:a9:3b:60:3d:65:5b:13:95:98:d8:80:30:
8c:57:7a:68:41:43:c3:cd:d7:f2:f3:83:89:78:3c:
df:51:75:5c:06:d2:c3:45:8f:c7:e8:c6:dd:93:fd:
aa:7d:5e:8d:4d:9b:69:39:5f:92:3d:30:56:cc:28:
b5:b3:ea:fb:ac:d5:89:4f:1e:38:92:9b:aa:37:2f:
77:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6B:DB:AA:E3:E3:0A:3A:12:68:18:7C:62:26:8B:D3:0F:30:B4:B3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9e82c2-44ea-4ac0-a9c0-95d20cf9d504/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9e82c2-44ea-4ac0-a9c0-95d20cf9d504/1/0WvbquPjCjoSaBh8YiaL0w8wtLM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59449
198923
Signature Algorithm: sha256WithRSAEncryption
29:a3:c7:cf:29:89:5e:9b:2f:b4:53:d5:a8:50:97:25:12:9d:
8c:05:a1:6a:45:e6:48:24:a4:20:5a:3a:c4:8f:8b:91:c1:95:
d8:b1:d7:29:d7:c5:43:91:27:e6:23:97:43:f9:b8:06:4d:5d:
e1:ed:d1:cf:a9:6a:f7:b9:aa:18:b1:46:72:61:56:25:2a:75:
3c:a5:dc:fb:a0:d5:3b:ec:12:f4:bf:f7:ba:e3:47:c4:e0:ed:
1a:79:4c:bb:7f:4c:7b:6f:fb:ea:a3:a8:ad:7b:d6:1f:cb:c7:
0b:d5:fe:ff:54:04:72:95:c3:4c:b2:8f:10:0a:16:b3:10:98:
f4:c0:c8:58:a7:9e:56:a6:1f:e7:2b:d7:ad:d4:26:88:06:d2:
52:70:43:21:34:44:3c:bc:37:32:b6:39:4e:3d:1c:c5:b6:b3:
59:8d:e1:b4:dd:98:9f:f1:e0:f7:99:d0:94:f2:97:9e:08:72:
1e:6e:1f:cc:fe:65:ca:59:8c:8a:25:48:5c:2b:7b:9e:ca:10:
2c:11:2d:3a:db:17:85:6f:e7:72:3e:c9:f1:8a:c2:84:e9:40:
ba:85:56:c2:93:72:1e:0d:35:f6:c3:d8:8d:4b:b7:e2:db:a7:
11:10:d2:9f:e2:2a:6e:3e:4a:73:e1:bd:9f:62:bc:f0:79:01:
cc:1b:c2:b8
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzJTmxeExczrsHuOyBtEUJ7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDgzMzI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTZiZGJhYWUzZTMwYTNhMTI2ODE4N2M2MjI2OGJkMzBmMzBiNGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOwmpesrR6tm0bp5ZXkeiwJO+DxL
ihi/TLE8uyvQn1OD3vwvf0R78tteCMzMZQJHaMkezUhvi15oMa9Q2UouIpHxqIN/
BsqcAluQ7u8iMt9Ws6LDdKA7cBMVBWrhjQLXWTXWGAD2VapatLUTEb/mliue+8cs
JuULGyRL6RkQYRks5pCasptxXaa90VXbz/IbnfEs/2d8gT93tfKtD54erhdtjocx
UBGR9gb8VBnaoSsEIei+ge+pO2A9ZVsTlZjYgDCMV3poQUPDzdfy84OJeDzfUXVc
BtLDRY/H6Mbdk/2qfV6NTZtpOV+SPTBWzCi1s+r7rNWJTx44kpuqNy93KwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFNFr26rj4wo6EmgYfGImi9MPMLSzMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YxLzllODJj
Mi00NGVhLTRhYzAtYTljMC05NWQyMGNmOWQ1MDQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjEvOWU4MmMy
LTQ0ZWEtNGFjMC1hOWMwLTk1ZDIwY2Y5ZDUwNC8xLzBXdmJxdVBqQ2pvU2FCaDhZ
aWFMMHc4d3RMTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEIAQH/BBAwDqAMMAoCAwDoOQIDAwkLMA0GCSqGSIb3DQEBCwUAA4IBAQApo8fP
KYlemy+0U9WoUJclEp2MBaFqReZIJKQgWjrEj4uRwZXYsdcp18VDkSfmI5dD+bgG
TV3h7dHPqWr3uaoYsUZyYVYlKnU8pdz7oNU77BL0v/e640fE4O0aeUy7f0x7b/vq
o6ite9Yfy8cL1f7/VARylcNMso8QChazEJj0wMhYp55Wph/nK9et1CaIBtJScEMh
NEQ8vDcytjlOPRzFtrNZjeG03Zif8eD3mdCU8peeCHIebh/M/mXKWYyKJUhcK3ue
yhAsES062xeFb+dyPsnxisKE6UC6hVbCk3IeDTX2w9iNS7fi26cRENKf4ipuPkpz
4b2fYrzweQHMG8K4
-----END CERTIFICATE-----
Generated at Fri May 3 09:15:47 2024 by rpki-client on console-fra.rpki-client.org