Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-7u3Y4wHQaNDo3ec23CaBKq0FVQ.cer
File: 1-7u3Y4wHQaNDo3ec23CaBKq0FVQ.cer (raw, json)
Hash identifier: sFijkxkYeOcdPuvie7u/JSW6zbYfjB+/z6x6MxfVKyc=
Subject key identifier: FB:BB:B7:63:8C:07:41:A3:43:A3:77:9C:DB:70:9A:04:AA:B4:15:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E803B2E780B9A7CA1F4C127E0226699D2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/445602-fe77-41cc-a687-10d6058b4761/1/1-7u3Y4wHQaNDo3ec23CaBKq0FVQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/445602-fe77-41cc-a687-10d6058b4761/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 27 Mar 2024 14:05:45 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215228
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:80:3b:2e:78:0b:9a:7c:a1:f4:c1:27:e0:22:66:99:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 27 14:05:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fbbbb7638c0741a343a3779cdb709a04aab41554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b2:5d:d9:51:dc:a3:b1:f4:a2:3a:9d:d1:30:
1e:0d:43:28:6d:fe:53:99:c4:39:fa:12:71:ee:7c:
a8:75:45:cc:40:38:b9:97:33:8b:85:83:60:25:85:
c2:0b:d1:37:76:c7:d7:ca:24:8f:3f:53:1e:c7:49:
2b:38:06:df:93:e8:53:bb:b5:a8:14:cc:6c:c9:7c:
35:19:21:c5:d2:5d:38:a7:49:44:3d:ef:b2:4e:b3:
e0:52:e3:d0:11:ea:11:82:e2:1b:fd:8d:c9:03:d0:
22:f3:24:dd:59:e3:bc:13:d6:94:21:e5:b9:de:34:
5b:f8:06:ec:7f:3e:e5:44:48:a9:fe:1e:23:ad:f5:
0e:3b:9e:ca:1f:fb:4a:01:e2:f1:bf:ef:65:fc:4e:
a1:2c:b2:18:d0:d4:88:78:0b:c1:de:db:b7:e0:e4:
38:08:31:96:91:d8:77:8a:a7:a9:59:d9:07:28:37:
21:22:95:83:2c:7a:19:b6:b2:34:bf:7c:43:a7:0e:
ac:bc:de:4e:fd:b0:68:02:d4:fe:c0:fb:0f:83:cf:
af:6b:24:dd:15:da:57:ac:11:2f:56:bd:86:68:ea:
0a:6f:8c:3d:e6:97:e0:36:9c:e0:66:84:bb:59:6a:
fb:49:43:7c:e9:6c:35:c3:48:e8:cc:70:b0:7c:b0:
a3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BB:B7:63:8C:07:41:A3:43:A3:77:9C:DB:70:9A:04:AA:B4:15:54
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/445602-fe77-41cc-a687-10d6058b4761/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/445602-fe77-41cc-a687-10d6058b4761/1/1-7u3Y4wHQaNDo3ec23CaBKq0FVQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215228
Signature Algorithm: sha256WithRSAEncryption
5e:b2:33:06:3a:c9:03:66:72:02:b5:9b:51:21:fe:ab:f4:e5:
33:0e:2a:7b:47:4f:3c:e6:62:46:d7:1a:a0:10:ae:78:4b:15:
a9:0b:8c:50:6b:13:78:1a:46:60:e5:88:2b:30:e0:b8:93:f9:
eb:ca:3d:89:7b:6f:3a:01:73:ba:8b:d9:fd:cb:c2:5b:50:98:
3e:8d:a1:fa:ce:a7:7d:4f:df:51:63:62:3d:27:05:80:fb:76:
23:9f:1e:95:3d:69:57:12:b1:71:0f:7f:64:59:bf:e1:04:96:
e0:44:5a:3f:db:3a:a1:1b:95:7b:1c:07:b8:7d:52:a9:44:ec:
8b:92:ab:7f:21:8a:c5:e2:54:7e:e8:64:9d:5c:c7:e6:9a:1d:
3e:ca:ca:56:f1:5f:91:70:6e:27:91:1e:7a:6f:54:72:93:ae:
c2:77:03:36:49:32:0a:98:58:99:93:92:13:8c:f6:af:72:af:
02:05:20:17:95:40:3a:75:0b:44:25:d5:9e:fe:69:af:9a:85:
bb:3f:a6:a4:b6:e1:26:80:ba:61:54:12:2e:bf:a9:3c:fa:c0:
4a:60:50:a2:8a:be:32:1b:2b:a5:c2:4c:cc:bc:d3:c3:5f:f7:
ac:38:7a:c5:33:3e:6b:e6:bc:ec:40:05:b3:ce:36:1d:27:f3:
c8:b0:68:9b
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgISAY6AOy54C5p8ofTBJ+AiZpnSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMzI3MTQwNTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYmJiYjc2MzhjMDc0MWEzNDNhMzc3OWNkYjcwOWEwNGFhYjQxNTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrJd2VHco7H0ojqd0TAeDUMobf5T
mcQ5+hJx7nyodUXMQDi5lzOLhYNgJYXCC9E3dsfXyiSPP1Mex0krOAbfk+hTu7Wo
FMxsyXw1GSHF0l04p0lEPe+yTrPgUuPQEeoRguIb/Y3JA9Ai8yTdWeO8E9aUIeW5
3jRb+Absfz7lREip/h4jrfUOO57KH/tKAeLxv+9l/E6hLLIY0NSIeAvB3tu34OQ4
CDGWkdh3iqepWdkHKDchIpWDLHoZtrI0v3xDpw6svN5O/bBoAtT+wPsPg8+vayTd
FdpXrBEvVr2GaOoKb4w95pfgNpzgZoS7WWr7SUN86Ww1w0jozHCwfLCj6wIDAQAB
o4ICgDCCAnwwHQYDVR0OBBYEFPu7t2OMB0GjQ6N3nNtwmgSqtBVUMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYwLzQ0NTYw
Mi1mZTc3LTQxY2MtYTY4Ny0xMGQ2MDU4YjQ3NjEvMS8wfQYIKwYBBQUHMAqGcXJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjAvNDQ1NjAy
LWZlNzctNDFjYy1hNjg3LTEwZDYwNThiNDc2MS8xLzEtN3UzWTR3SFFhTkRvM2Vj
MjNDYUJLcTBGVlEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u
ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD
MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEF
BQcBCAEB/wQLMAmgBzAFAgMDSLwwDQYJKoZIhvcNAQELBQADggEBAF6yMwY6yQNm
cgK1m1Eh/qv05TMOKntHTzzmYkbXGqAQrnhLFakLjFBrE3gaRmDliCsw4LiT+evK
PYl7bzoBc7qL2f3LwltQmD6NofrOp31P31FjYj0nBYD7diOfHpU9aVcSsXEPf2RZ
v+EEluBEWj/bOqEblXscB7h9UqlE7IuSq38hisXiVH7oZJ1cx+aaHT7KylbxX5Fw
bieRHnpvVHKTrsJ3AzZJMgqYWJmTkhOM9q9yrwIFIBeVQDp1C0Ql1Z7+aa+ahbs/
pqS24SaAumFUEi6/qTz6wEpgUKKKvjIbK6XCTMy808Nf96w4esUzPmvmvOxABbPO
Nh0n88iwaJs=
-----END CERTIFICATE-----
Generated at Fri May 3 12:19:53 2024 by rpki-client on console-fra.rpki-client.org