Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.cer
File: 1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.cer (raw, json)
Hash identifier: 2+s9vQOjderRkpZBoyH6eUuCovHGMmiHiy7RErpGKPw=
Subject key identifier: F9:A1:6D:1F:4C:7A:65:3E:3E:20:F8:4D:9B:A5:9F:DB:27:C2:A6:1F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC431158783115D391DF389E30A55F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 199552
IP: 2001:67c:2abc::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:43:11:58:78:31:15:d3:91:df:38:9e:30:a5:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f9a16d1f4c7a653e3e20f84d9ba59fdb27c2a61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a6:91:9f:7a:5c:22:97:09:43:fa:fb:f0:dc:
87:4d:cd:ad:5e:19:5f:79:37:2a:fe:c2:d0:92:9d:
af:4e:5c:21:9c:be:f9:5e:49:52:6a:0d:e5:d4:5e:
ae:a0:47:fb:91:e9:c1:85:f3:3c:52:95:03:a5:72:
22:8a:53:63:a5:08:42:41:c2:55:11:87:0c:a2:85:
d5:d9:e3:21:73:c2:2d:98:bb:c7:d1:b1:d0:73:38:
b3:7f:a6:89:15:fc:8e:14:d9:6b:cb:ce:29:99:1d:
ff:22:09:15:c5:fd:d5:50:99:48:8b:50:85:df:8a:
4e:2c:00:28:b6:69:79:de:57:4b:42:9a:82:59:be:
12:56:ef:73:7f:0a:9e:5c:3f:e3:e3:c7:0b:2c:03:
90:dc:30:25:1e:59:46:41:96:cd:21:9e:6a:01:f8:
82:12:fc:82:aa:9d:13:0e:92:0e:10:76:4d:6b:bd:
50:c0:3d:79:d6:74:cf:ba:bf:66:46:e2:db:72:d8:
43:d6:d4:63:cd:c9:8d:80:66:05:82:65:01:dc:30:
0c:b2:7b:10:65:7b:50:ec:f2:22:c1:15:22:7a:1e:
02:1e:8c:c3:cb:d5:a2:79:ed:94:aa:39:22:71:fd:
bc:05:41:d5:f4:52:06:fe:42:c4:07:36:24:3f:ba:
3a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A1:6D:1F:4C:7A:65:3E:3E:20:F8:4D:9B:A5:9F:DB:27:C2:A6:1F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2abc::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199552
Signature Algorithm: sha256WithRSAEncryption
86:8d:ab:32:fc:8e:6b:7a:9c:26:40:ba:70:89:bc:84:46:61:
65:22:e8:bd:c9:cd:00:dd:04:27:28:c1:cc:b9:60:0b:9d:3d:
c6:07:9e:20:c7:cc:09:41:54:da:60:17:ed:ec:49:c7:45:bf:
64:7d:e4:55:d0:1a:9f:d9:e5:96:6c:e8:84:f7:99:91:40:25:
1a:04:5e:a5:5b:e2:09:d2:28:a5:1f:cf:8c:f2:f8:58:60:f7:
97:a0:8e:82:33:20:13:0c:38:af:53:51:f8:19:f4:eb:b8:a3:
54:71:2a:dd:c2:d3:31:0a:f5:68:05:e0:d9:e8:7e:ef:85:05:
00:17:3d:32:da:59:7a:94:dc:b1:f2:84:9f:b4:cd:54:fd:8c:
c6:d7:aa:b3:92:7d:d6:d7:d7:c4:df:de:76:c7:bc:8b:1c:26:
02:aa:ee:c2:21:10:e0:81:20:25:1c:f4:ab:81:86:c1:46:62:
78:59:a0:cd:c6:3d:35:ec:e0:cf:0d:39:83:44:50:16:d9:db:
ad:c6:91:36:53:56:9c:21:a3:5c:e4:98:b5:56:80:be:46:d3:
73:a3:ce:eb:88:7c:f3:f3:a9:4a:31:44:b0:4b:8b:9a:53:cb:
98:3a:54:05:82:d1:a4:e2:8a:92:64:56:31:5f:69:60:27:8a:
b5:02:92:86
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgISAYzF3EMRWHgxFdOR3zieMKVfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTYyOTU1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOWExNmQxZjRjN2E2NTNlM2UyMGY4NGQ5YmE1OWZkYjI3YzJhNjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aaRn3pcIpcJQ/r78NyHTc2tXhlf
eTcq/sLQkp2vTlwhnL75XklSag3l1F6uoEf7kenBhfM8UpUDpXIiilNjpQhCQcJV
EYcMooXV2eMhc8ItmLvH0bHQczizf6aJFfyOFNlry84pmR3/IgkVxf3VUJlIi1CF
34pOLAAotml53ldLQpqCWb4SVu9zfwqeXD/j48cLLAOQ3DAlHllGQZbNIZ5qAfiC
EvyCqp0TDpIOEHZNa71QwD151nTPur9mRuLbcthD1tRjzcmNgGYFgmUB3DAMsnsQ
ZXtQ7PIiwRUieh4CHozDy9Wiee2Uqjkicf28BUHV9FIG/kLEBzYkP7o6PwIDAQAB
o4ICpDCCAqAwHQYDVR0OBBYEFPmhbR9MemU+PiD4TZuln9snwqYfMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZmLzk4YzFi
NS0zMzk2LTRkOWMtYmNhYy05OTI2MjdlZWE5ZWEvMS8wfQYIKwYBBQUHMAqGcXJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmYvOThjMWI1
LTMzOTYtNGQ5Yy1iY2FjLTk5MjYyN2VlYTllYS8xLzEtYUZ0SDB4NlpUNC1JUGhO
bTZXZjJ5ZkNwaDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u
ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD
MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBnwqvDAaBggrBgEFBQcBCAEB/wQLMAmg
BzAFAgMDC4AwDQYJKoZIhvcNAQELBQADggEBAIaNqzL8jmt6nCZAunCJvIRGYWUi
6L3JzQDdBCcowcy5YAudPcYHniDHzAlBVNpgF+3sScdFv2R95FXQGp/Z5ZZs6IT3
mZFAJRoEXqVb4gnSKKUfz4zy+Fhg95egjoIzIBMMOK9TUfgZ9Ou4o1RxKt3C0zEK
9WgF4Nnofu+FBQAXPTLaWXqU3LHyhJ+0zVT9jMbXqrOSfdbX18Tf3nbHvIscJgKq
7sIhEOCBICUc9KuBhsFGYnhZoM3GPTXs4M8NOYNEUBbZ263GkTZTVpwho1zkmLVW
gL5G03OjzuuIfPPzqUoxRLBLi5pTy5g6VAWC0aTiipJkVjFfaWAnirUCkoY=
-----END CERTIFICATE-----
Generated at Thu Apr 25 03:57:26 2024 by rpki-client on console-fra.rpki-client.org