Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0jYWAW5P6vVGHkCeVhTvGd8BX6w.cer
File: 0jYWAW5P6vVGHkCeVhTvGd8BX6w.cer (raw, json)
Hash identifier: XpWcD+kXmEF0ddB7h0w0E+3Y6FFhgQlL1NqmD767eTg=
Subject key identifier: D2:36:16:01:6E:4F:EA:F5:46:1E:40:9E:56:14:EF:19:DF:01:5F:AC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA297F0D771ABF0C644B9B4C56382DD2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/03b7c0-d1fd-4281-a9ce-b2edcd3d61e6/1/0jYWAW5P6vVGHkCeVhTvGd8BX6w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/03b7c0-d1fd-4281-a9ce-b2edcd3d61e6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:32:46 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 203168
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Apr 2024 16:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:7f:0d:77:1a:bf:0c:64:4b:9b:4c:56:38:2d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:32:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d23616016e4feaf5461e409e5614ef19df015fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7a:81:6e:88:9a:75:6d:a1:90:ea:ea:3a:81:
a1:de:f3:30:78:80:19:b5:40:78:22:e2:2b:d6:38:
0e:5a:00:10:f8:e0:43:ad:2a:10:fc:23:c5:cf:dd:
4c:e3:3f:42:ba:5d:9d:2e:54:00:f7:8a:97:d8:8d:
c6:1d:0c:c4:1b:cf:5d:6d:10:28:c2:35:e4:92:15:
a1:4c:d3:75:24:76:b3:cf:0a:87:e4:77:28:3c:9c:
53:3e:4e:37:52:30:5c:72:ca:40:13:7d:d7:5f:ae:
1e:ff:eb:b2:b3:bf:55:8b:d2:c9:5b:ae:e2:0e:e2:
a5:f8:cd:cb:4a:95:05:80:3c:32:07:3a:d9:d2:23:
d8:ea:35:20:bf:84:7f:d2:8a:7b:d6:25:9a:95:9d:
71:8e:2c:82:05:0c:08:d1:b2:01:f5:cf:19:ba:0d:
0e:ee:9b:9e:e9:e0:33:a2:4a:f1:99:0e:2c:0e:e6:
ac:d4:7a:77:dc:f7:eb:38:ea:7e:af:0f:f4:15:f2:
2f:89:1f:72:4c:a9:f9:1b:95:4d:cf:9b:15:bb:9b:
5c:b0:30:a0:e5:0a:5b:5e:f1:ee:93:35:8b:f2:19:
16:71:c9:20:89:41:eb:8a:9d:dd:c3:48:db:dc:a8:
88:69:58:92:28:2a:f5:0d:d2:2f:9e:98:42:df:b0:
5f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:36:16:01:6E:4F:EA:F5:46:1E:40:9E:56:14:EF:19:DF:01:5F:AC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/03b7c0-d1fd-4281-a9ce-b2edcd3d61e6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/03b7c0-d1fd-4281-a9ce-b2edcd3d61e6/1/0jYWAW5P6vVGHkCeVhTvGd8BX6w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203168
Signature Algorithm: sha256WithRSAEncryption
ae:ad:8f:a3:39:c7:0c:35:f3:67:35:dd:a2:5d:c2:e0:7d:38:
0f:8b:35:74:01:3a:c6:d5:53:b9:7c:5e:ae:24:f7:76:b1:ee:
a8:b3:61:15:60:5a:72:f6:44:be:69:ca:a9:36:73:f7:7a:a5:
f3:e8:7d:3b:57:31:ff:f2:01:4c:df:ac:73:c3:8c:41:a4:0e:
45:be:de:04:0b:10:85:5c:a7:48:ae:31:c6:c5:3e:08:84:ee:
ae:30:95:78:ad:d5:0f:ed:aa:15:7f:11:cc:da:a8:9b:aa:6d:
8f:02:76:17:cc:bd:66:d3:ba:65:4c:03:37:a3:2f:00:11:5b:
0d:a3:53:3b:f5:3d:ab:3c:00:1c:03:0d:32:af:b7:c4:a9:99:
f2:97:1d:cb:31:90:30:b7:b9:3e:a1:f5:77:e4:5a:5a:c1:ee:
dc:e4:e4:14:96:bc:e4:ed:ab:c9:68:b3:a1:25:26:65:e7:fc:
a8:cf:dc:fb:1e:71:95:24:01:76:c9:8c:0d:b9:ea:99:c0:b8:
10:ec:2f:54:7c:79:4d:f1:c5:6a:a9:27:03:4c:4c:bf:51:bf:
84:7c:5f:a0:37:ce:b3:09:7a:c7:76:e9:bf:d3:20:67:b6:6b:
75:14:ef:20:d2:ad:1d:71:57:f4:ed:87:96:7e:64:9c:45:68:
bc:0e:b4:2e
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYzKKX8Ndxq/DGRLm0xWOC3SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTIzMjQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjM2MTYwMTZlNGZlYWY1NDYxZTQwOWU1NjE0ZWYxOWRmMDE1ZmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHqBboiadW2hkOrqOoGh3vMweIAZ
tUB4IuIr1jgOWgAQ+OBDrSoQ/CPFz91M4z9Cul2dLlQA94qX2I3GHQzEG89dbRAo
wjXkkhWhTNN1JHazzwqH5HcoPJxTPk43UjBccspAE33XX64e/+uys79Vi9LJW67i
DuKl+M3LSpUFgDwyBzrZ0iPY6jUgv4R/0op71iWalZ1xjiyCBQwI0bIB9c8Zug0O
7pue6eAzokrxmQ4sDuas1Hp33PfrOOp+rw/0FfIviR9yTKn5G5VNz5sVu5tcsDCg
5QpbXvHukzWL8hkWcckgiUHrip3dw0jb3KiIaViSKCr1DdIvnphC37BfLwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFNI2FgFuT+r1Rh5AnlYU7xnfAV+sMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RlLzAzYjdj
MC1kMWZkLTQyODEtYTljZS1iMmVkY2QzZDYxZTYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGUvMDNiN2Mw
LWQxZmQtNDI4MS1hOWNlLWIyZWRjZDNkNjFlNi8xLzBqWVdBVzVQNnZWR0hrQ2VW
aFR2R2Q4Qlg2dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMZoDANBgkqhkiG9w0BAQsFAAOCAQEArq2PoznHDDXz
ZzXdol3C4H04D4s1dAE6xtVTuXxeriT3drHuqLNhFWBacvZEvmnKqTZz93ql8+h9
O1cx//IBTN+sc8OMQaQORb7eBAsQhVynSK4xxsU+CITurjCVeK3VD+2qFX8RzNqo
m6ptjwJ2F8y9ZtO6ZUwDN6MvABFbDaNTO/U9qzwAHAMNMq+3xKmZ8pcdyzGQMLe5
PqH1d+RaWsHu3OTkFJa85O2ryWizoSUmZef8qM/c+x5xlSQBdsmMDbnqmcC4EOwv
VHx5TfHFaqknA0xMv1G/hHxfoDfOswl6x3bpv9MgZ7ZrdRTvINKtHXFX9O2Hln5k
nEVovA60Lg==
-----END CERTIFICATE-----
Generated at Tue Apr 16 17:47:02 2024 by rpki-client on console-ams.rpki-client.org