Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-uEVwwK-C0uLzKCzKoKToFxp1ws.cer
File: 1-uEVwwK-C0uLzKCzKoKToFxp1ws.cer (raw, json)
Hash identifier: qCiDMybesMQc9mFKtWIN6+17DjRaBY6gyMdIhj7WLUw=
Subject key identifier: FA:E1:15:C3:02:BE:0B:4B:8B:CC:A0:B3:2A:82:93:A0:5C:69:D7:0B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019256A849E2005A1CDD3686103992B81D1D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 04 Oct 2024 08:32:02 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 84.205.32.0/19
IP: 91.123.32.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:56:a8:49:e2:00:5a:1c:dd:36:86:10:39:92:b8:1d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 4 08:32:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fae115c302be0b4b8bcca0b32a8293a05c69d70b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e1:68:8f:b9:e6:51:9f:9b:0a:83:e0:38:e7:
8c:c6:19:f2:df:8f:a7:40:fa:c4:2b:06:71:f6:91:
dc:1e:38:6b:ce:f6:08:08:c2:2f:1b:21:6d:37:a7:
71:32:66:d8:2d:3f:65:b4:1e:b2:77:71:ff:79:08:
78:0a:9c:d1:b6:53:66:aa:32:a1:30:89:be:42:cc:
7d:cf:f7:c9:8c:ab:03:1a:69:85:e4:f7:b2:65:9d:
ef:70:64:e4:1a:a5:55:cc:61:13:89:00:2e:fb:18:
59:9d:cc:38:5a:90:2c:5b:a6:03:fc:40:9e:3d:7b:
36:b4:6b:28:5c:f9:5c:f0:6a:6b:05:dc:ee:20:3a:
e7:12:51:ef:f8:ac:eb:5f:73:ff:80:fc:db:ba:92:
85:f9:83:4a:b4:63:ea:2d:12:3c:d2:cb:2e:89:bd:
d0:9a:92:92:88:87:78:b4:b3:51:9a:d4:21:12:af:
86:4b:42:58:a3:de:56:61:88:4e:3d:ca:14:59:23:
67:7d:57:83:91:e1:5d:6e:b2:74:a1:1f:62:d4:00:
8d:f9:5b:78:49:a2:25:1b:9c:d3:7e:6b:ac:1b:44:
9f:29:46:f3:5a:7b:73:61:ad:ca:12:d5:af:6e:30:
03:a3:9f:6d:ff:3f:21:9c:70:3c:b5:29:f2:a7:27:
32:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E1:15:C3:02:BE:0B:4B:8B:CC:A0:B3:2A:82:93:A0:5C:69:D7:0B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.205.32.0/19
91.123.32.0/20
Signature Algorithm: sha256WithRSAEncryption
10:2c:d0:a9:79:e7:1d:7f:ce:ea:c2:80:ee:6b:a1:f5:a8:ee:
a6:90:8c:c8:a2:b0:7f:47:bd:72:4d:fe:f2:50:9d:c5:bd:55:
13:1b:16:95:f2:b4:36:4b:21:17:9e:d1:4b:49:18:01:3b:b6:
b8:3c:a7:e4:11:29:bd:80:8b:bd:00:9d:0d:4c:27:c1:10:72:
fd:7a:58:6c:d0:c4:19:ff:0d:05:b9:2d:b4:21:01:31:a2:6c:
8c:e9:52:f1:a6:a8:31:1d:11:ca:a2:5f:36:95:4e:72:5f:29:
03:19:f9:e5:14:e5:01:eb:9b:59:c7:a6:bc:26:5e:d6:ab:7e:
e0:a5:36:79:dd:93:1c:ce:32:82:3f:ca:bc:3a:66:aa:f0:84:
bd:7d:48:6a:d8:33:fa:7b:60:14:72:ad:12:09:81:35:c6:6b:
2e:4f:b9:9a:08:5b:56:70:b0:49:7e:1d:30:e9:ab:b4:1e:d1:
77:0b:91:f0:35:41:82:90:ce:39:33:22:31:6d:3d:78:38:ec:
33:00:76:2a:da:26:9d:8e:ab:e8:ef:73:cf:4f:d8:1e:5b:e8:
57:38:94:da:69:02:46:db:8b:95:22:4e:a9:ee:43:d3:8b:5e:
70:fe:e3:92:11:13:5c:02:df:cb:f8:19:a7:f7:8a:f8:30:a2:
15:2d:38:0b
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgISAZJWqEniAFoc3TaGEDmSuB0dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQxMDA0MDgzMjAyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWUxMTVjMzAyYmUwYjRiOGJjY2EwYjMyYTgyOTNhMDVjNjlkNzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOFoj7nmUZ+bCoPgOOeMxhny34+n
QPrEKwZx9pHcHjhrzvYICMIvGyFtN6dxMmbYLT9ltB6yd3H/eQh4CpzRtlNmqjKh
MIm+Qsx9z/fJjKsDGmmF5PeyZZ3vcGTkGqVVzGETiQAu+xhZncw4WpAsW6YD/ECe
PXs2tGsoXPlc8GprBdzuIDrnElHv+KzrX3P/gPzbupKF+YNKtGPqLRI80ssuib3Q
mpKSiId4tLNRmtQhEq+GS0JYo95WYYhOPcoUWSNnfVeDkeFdbrJ0oR9i1ACN+Vt4
SaIlG5zTfmusG0SfKUbzWntzYa3KEtWvbjADo59t/z8hnHA8tSnypycy7wIDAQAB
o4ICizCCAocwHQYDVR0OBBYEFPrhFcMCvgtLi8ygsyqCk6BcadcLMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI4L2RkZWI3
OS02YWI4LTQ3ZTEtYTVmZS1kMGY3MDRlMDMwOWYvMS8wfQYIKwYBBQUHMAqGcXJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgvZGRlYjc5
LTZhYjgtNDdlMS1hNWZlLWQwZjcwNGUwMzA5Zi8xLzEtdUVWd3dLLUMwdUx6S0N6
S29LVG9GeHAxd3MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u
ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD
MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEF
BQcBBwEB/wQWMBQwEgQCAAEwDAMEBVTNIAMEBFt7IDANBgkqhkiG9w0BAQsFAAOC
AQEAECzQqXnnHX/O6sKA7muh9ajuppCMyKKwf0e9ck3+8lCdxb1VExsWlfK0Nksh
F57RS0kYATu2uDyn5BEpvYCLvQCdDUwnwRBy/XpYbNDEGf8NBbkttCEBMaJsjOlS
8aaoMR0RyqJfNpVOcl8pAxn55RTlAeubWcemvCZe1qt+4KU2ed2THM4ygj/KvDpm
qvCEvX1Iatgz+ntgFHKtEgmBNcZrLk+5mghbVnCwSX4dMOmrtB7RdwuR8DVBgpDO
OTMiMW09eDjsMwB2KtomnY6r6O9zz0/YHlvoVziU2mkCRtuLlSJOqe5D04tecP7j
khETXALfy/gZp/eK+DCiFS04Cw==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:13:37 2024 by rpki-client on console-ams.rpki-client.org