Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2AtWXXc2dT2-f2YkvfHSvBiW98A.cer
File: 2AtWXXc2dT2-f2YkvfHSvBiW98A.cer (raw, json)
Hash identifier: R2eS7W6QNvJdKAvILpskrDi2kEm1rOHJaM23b5vsUUQ=
Subject key identifier: D8:0B:56:5D:77:36:75:3D:BE:7F:66:24:BD:F1:D2:BC:18:96:F7:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8020D24DFE041C09E8DDD03CB4093EA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:30:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210854
IP: 31.210.17.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Dec 2024 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:0d:24:df:e0:41:c0:9e:8d:dd:03:cb:40:93:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d80b565d7736753dbe7f6624bdf1d2bc1896f7c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:91:c3:b8:a6:be:fc:fb:b5:c2:23:fd:a3:a5:
e3:12:12:6b:62:9b:59:c8:32:f2:e4:4d:7f:5c:89:
b1:dd:77:12:37:71:74:6a:55:b7:ab:97:13:f6:b9:
68:ae:c2:ce:ac:e0:69:36:e7:07:09:5d:a6:04:c4:
20:e1:a3:80:2c:0b:7d:d0:bc:1c:b5:fb:ab:3c:d6:
56:00:1f:f0:ea:51:e4:ed:30:28:af:09:b6:75:82:
d6:f3:ab:aa:2c:cd:a5:92:bf:b3:fa:19:22:06:26:
ff:92:7a:98:75:e3:50:93:26:a4:7d:2c:ec:a0:e7:
14:48:b2:9c:eb:ab:75:8e:74:26:9a:53:ca:41:15:
c6:92:76:d2:46:44:3d:0e:a5:92:74:ae:7c:98:a9:
1b:8f:c2:18:00:cc:1e:14:de:52:c9:a1:2b:30:0b:
85:29:3e:1e:3c:b8:e1:19:e3:ff:49:b4:4a:98:55:
19:86:85:2a:77:73:11:93:bf:75:4a:3c:56:3c:c0:
69:42:e3:e2:17:b2:37:07:d4:ea:1e:4e:15:66:23:
47:c0:b9:de:d9:70:27:3e:0d:12:20:49:2e:e1:20:
82:58:9a:bc:9e:4c:8e:f3:32:59:c8:2a:5a:3c:46:
61:dd:94:12:6b:d4:a5:82:fa:73:99:d7:ce:ef:4a:
4f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:0B:56:5D:77:36:75:3D:BE:7F:66:24:BD:F1:D2:BC:18:96:F7:C0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.17.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210854
Signature Algorithm: sha256WithRSAEncryption
7e:df:ec:85:03:76:cd:f5:a8:98:ec:45:12:a9:b6:6c:34:95:
e6:42:d0:b9:92:3c:de:6d:12:ef:85:ac:46:f0:06:14:c2:56:
d4:55:05:55:82:27:6f:97:a2:ad:31:e0:aa:4e:6e:29:01:fb:
54:e8:2d:93:75:41:ae:54:41:5e:4d:fc:9e:f7:0f:bf:60:d9:
9e:b4:4f:f3:4c:b6:e3:d0:1f:d4:4a:ef:f8:3d:ba:9e:c4:01:
2a:aa:fb:d8:0c:47:f9:79:96:c7:0d:ce:50:f2:1c:d9:9f:30:
30:3b:52:fd:be:35:6a:fe:82:2e:cd:26:58:a1:58:57:60:ed:
19:72:ca:39:62:9d:1e:36:9e:bf:c3:98:8a:d5:32:c4:b5:11:
00:e2:67:e3:66:28:bd:1b:fe:2e:2e:59:89:a7:c2:e7:04:56:
4d:be:af:b0:da:6f:d6:f2:9b:74:ab:04:16:3e:ad:7a:df:72:
28:19:fa:de:00:a2:34:b9:39:c4:4c:83:15:6f:ea:3d:c1:0d:
8c:8e:4d:09:a6:da:9a:0a:af:00:11:75:24:83:43:90:f4:6f:
94:50:79:46:92:f0:c6:d3:12:ef:58:02:f3:1f:0d:80:22:c1:
70:10:03:28:7d:2b:7a:d2:77:c7:dc:a6:74:c9:22:58:39:03:
2d:38:5e:97
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYzIAg0k3+BBwJ6N3QPLQJPqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDIzMDI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODBiNTY1ZDc3MzY3NTNkYmU3ZjY2MjRiZGYxZDJiYzE4OTZmN2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpHDuKa+/Pu1wiP9o6XjEhJrYptZ
yDLy5E1/XImx3XcSN3F0alW3q5cT9rlorsLOrOBpNucHCV2mBMQg4aOALAt90Lwc
tfurPNZWAB/w6lHk7TAorwm2dYLW86uqLM2lkr+z+hkiBib/knqYdeNQkyakfSzs
oOcUSLKc66t1jnQmmlPKQRXGknbSRkQ9DqWSdK58mKkbj8IYAMweFN5SyaErMAuF
KT4ePLjhGeP/SbRKmFUZhoUqd3MRk791SjxWPMBpQuPiF7I3B9TqHk4VZiNHwLne
2XAnPg0SIEku4SCCWJq8nkyO8zJZyCpaPEZh3ZQSa9SlgvpzmdfO70pPFQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFNgLVl13NnU9vn9mJL3x0rwYlvfAMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RmL2Y3NjMz
OS0xNzE0LTQwM2ItOTkyNy0yMzI3NzgyMmZlZmEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYvZjc2MzM5
LTE3MTQtNDAzYi05OTI3LTIzMjc3ODIyZmVmYS8xLzJBdFdYWGMyZFQyLWYyWWt2
ZkhTdkJpVzk4QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAH9IRMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwM3pjANBgkqhkiG9w0BAQsFAAOCAQEAft/shQN2zfWomOxFEqm2bDSV5kLQuZI8
3m0S74WsRvAGFMJW1FUFVYInb5eirTHgqk5uKQH7VOgtk3VBrlRBXk38nvcPv2DZ
nrRP80y249Af1Erv+D26nsQBKqr72AxH+XmWxw3OUPIc2Z8wMDtS/b41av6CLs0m
WKFYV2DtGXLKOWKdHjaev8OYitUyxLURAOJn42YovRv+Li5ZiafC5wRWTb6vsNpv
1vKbdKsEFj6tet9yKBn63gCiNLk5xEyDFW/qPcENjI5NCabamgqvABF1JINDkPRv
lFB5RpLwxtMS71gC8x8NgCLBcBADKH0retJ3x9ymdMkiWDkDLThelw==
-----END CERTIFICATE-----
Generated at Thu Dec 26 16:51:01 2024 by rpki-client on console-fra.rpki-client.org