Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
File: 1-k5AU1miExcI_AJDjUclaOLANHA.cer (raw, json)
Hash identifier: 9KfSv712lFgBmNqwHMZpQ+M9E165C+A1zn6Al3tbAdQ=
Subject key identifier: FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86F73C3BCFE30986550CA823E05390E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:29:56 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2a10:8800::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 14:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:73:c3:bc:fe:30:98:65:50:ca:82:3e:05:39:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa4e405359a2131708fc02438d472568e2c03470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:94:8b:96:a0:8f:a4:e9:a4:4f:b9:24:53:be:
d3:8b:58:14:63:3b:ad:a0:27:44:a0:10:4c:77:f2:
b7:ca:e6:cc:bb:64:eb:8e:cf:f9:76:fb:33:89:f7:
d4:5d:eb:b3:7d:9f:97:e6:f1:55:f0:9b:35:c7:31:
d0:81:af:dd:49:5a:18:dc:18:d8:3d:7a:64:7b:c8:
b2:54:41:ed:fc:28:d3:0a:f2:34:0a:d7:cd:10:d9:
5d:f7:6e:12:27:ca:25:79:c5:da:26:f8:c4:46:94:
2e:bc:b1:f3:72:53:8a:ca:19:98:8b:f7:30:d0:bb:
4d:16:a6:0f:87:93:f4:ac:75:1e:14:b3:ba:14:12:
c6:81:91:d2:cc:06:57:e8:ab:13:3f:48:47:67:aa:
ee:e4:c1:43:5d:d5:c4:23:d9:bc:25:d2:10:22:20:
aa:34:ed:61:dc:6b:9b:37:16:9f:79:2c:f5:f8:b3:
a9:90:79:1f:c4:05:65:60:67:f0:dc:93:19:65:35:
e3:e4:0a:29:99:d6:86:d1:48:a8:51:04:45:0b:37:
7a:c1:15:72:92:29:4c:27:32:bf:a7:27:08:34:f3:
45:31:d2:7f:93:c9:c9:ba:68:bc:8c:82:f9:56:df:
01:61:7e:fc:20:43:69:3e:35:8e:24:8e:7b:de:d0:
61:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:8800::/29
Signature Algorithm: sha256WithRSAEncryption
01:7f:71:4f:ed:74:85:e3:28:07:21:eb:02:0c:f0:ea:f0:e1:
e7:a0:22:b3:0a:b3:65:ff:71:6a:eb:d0:86:3e:5d:a5:82:f6:
a0:30:48:f9:99:69:86:f0:ae:aa:04:a8:0c:86:f6:ba:cb:ca:
e0:b3:ce:94:ce:63:12:21:4c:88:88:48:6d:79:55:2f:23:96:
2d:3e:85:2a:2a:c9:a3:11:d7:77:74:83:c6:b1:ff:6f:1c:34:
3b:5d:0d:53:6c:19:f5:c4:96:11:b5:4d:11:eb:8d:74:b9:f0:
d0:f0:82:2f:35:45:2f:f8:d1:96:8a:bc:0f:8c:ca:0b:c0:04:
db:f1:f7:b6:06:c5:df:cf:6e:57:52:77:c4:14:a2:70:2a:0d:
ad:ee:a8:21:f4:c5:b8:6f:7c:98:27:11:2b:68:72:2f:d4:4e:
39:a0:be:c3:c0:26:b8:60:51:bb:00:e4:82:cb:c5:2f:ef:2b:
f9:05:68:3c:8f:4e:f8:c6:ed:e0:bb:6f:47:9d:3c:dc:7e:3e:
fa:b7:29:b9:9a:8e:67:cb:e2:ea:c3:b7:47:cb:76:06:5e:bc:
cf:82:89:bb:e7:42:c8:fb:9e:3e:04:1e:32:d0:58:a5:bd:cd:
3f:1a:cc:6f:e3:0c:a7:e0:31:0e:55:49:8d:73:35:af:a2:68:
22:8d:2d:68
-----BEGIN CERTIFICATE-----
MIIFejCCBGKgAwIBAgISAYzIb3PDvP4wmGVQyoI+BTkOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDQyOTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTRlNDA1MzU5YTIxMzE3MDhmYzAyNDM4ZDQ3MjU2OGUyYzAzNDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZSLlqCPpOmkT7kkU77Ti1gUYzut
oCdEoBBMd/K3yubMu2Trjs/5dvsziffUXeuzfZ+X5vFV8Js1xzHQga/dSVoY3BjY
PXpke8iyVEHt/CjTCvI0CtfNENld924SJ8olecXaJvjERpQuvLHzclOKyhmYi/cw
0LtNFqYPh5P0rHUeFLO6FBLGgZHSzAZX6KsTP0hHZ6ru5MFDXdXEI9m8JdIQIiCq
NO1h3GubNxafeSz1+LOpkHkfxAVlYGfw3JMZZTXj5AopmdaG0UioUQRFCzd6wRVy
kilMJzK/pycINPNFMdJ/k8nJumi8jIL5Vt8BYX78IENpPjWOJI573tBhuQIDAQAB
o4IChjCCAoIwHQYDVR0OBBYEFPpOQFNZohMXCPwCQ41HJWjiwDRwMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA3LzZhM2Yz
NS0zNWI4LTQ5ZTAtOWY0NC1iODE4ZmFlY2I3MTcvMS8wfQYIKwYBBQUHMAqGcXJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDcvNmEzZjM1
LTM1YjgtNDllMC05ZjQ0LWI4MThmYWVjYjcxNy8xLzEtazVBVTFtaUV4Y0lfQUpE
alVjbGFPTEFOSEEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u
ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD
MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEF
BQcBBwEB/wQRMA8wDQQCAAIwBwMFAyoQiAAwDQYJKoZIhvcNAQELBQADggEBAAF/
cU/tdIXjKAch6wIM8Orw4eegIrMKs2X/cWrr0IY+XaWC9qAwSPmZaYbwrqoEqAyG
9rrLyuCzzpTOYxIhTIiISG15VS8jli0+hSoqyaMR13d0g8ax/28cNDtdDVNsGfXE
lhG1TRHrjXS58NDwgi81RS/40ZaKvA+MygvABNvx97YGxd/PbldSd8QUonAqDa3u
qCH0xbhvfJgnEStoci/UTjmgvsPAJrhgUbsA5ILLxS/vK/kFaDyPTvjG7eC7b0ed
PNx+Pvq3KbmajmfL4urDt0fLdgZevM+CibvnQsj7nj4EHjLQWKW9zT8azG/jDKfg
MQ5VSY1zNa+iaCKNLWg=
-----END CERTIFICATE-----
Generated at Wed Apr 24 21:31:57 2024 by rpki-client on console-ams.rpki-client.org