Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2hRDVmHw7j5o-ph9D0oUNBvh_oU.cer
File: 2hRDVmHw7j5o-ph9D0oUNBvh_oU.cer (raw, json)
Hash identifier: LmGh23laO3/gom/iD60kQJjPX5wHz23NT6CfsovW+BE=
Subject key identifier: DA:14:43:56:61:F0:EE:3E:68:FA:98:7D:0F:4A:14:34:1B:E1:FE:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC331FD9C125B7AFAD8AE79EFFD3BF02B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/1/DA14435661F0EE3E68FA987D0F4A14341BE1FE85.mft
caRepository: rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/1/
Notify URL: https://rrdp-rps.arin.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:04:42 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 60301
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:31:fd:9c:12:5b:7a:fa:d8:ae:79:ef:fd:3b:f0:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:04:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da14435661f0ee3e68fa987d0f4a14341be1fe85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:82:cc:2c:34:43:ca:66:ab:00:f6:33:fd:52:
2d:8f:24:b7:14:8e:c6:bd:8a:b1:f6:ea:d4:af:c0:
bc:f0:10:87:83:4c:94:96:77:69:a0:a4:12:c4:9a:
4c:9d:43:3d:93:b9:b1:8b:35:4b:88:ce:d1:be:38:
41:bf:fb:82:b0:d8:35:f8:17:8b:6e:90:06:60:31:
03:39:3b:91:91:b8:6e:c8:a1:23:e2:f1:98:b9:33:
eb:23:a1:bb:bf:91:d5:5e:22:1b:d4:e4:01:c7:c8:
fc:d0:64:93:3f:98:7a:c7:d7:af:9f:e4:28:b1:87:
7e:13:08:e6:d3:05:38:25:8d:be:2f:c1:16:21:ab:
e5:06:c2:60:2b:94:f1:4f:93:93:a2:c6:36:a8:ab:
f0:9e:ad:c4:f3:af:40:c2:c5:00:1c:9b:e5:d1:e2:
de:f7:f3:d5:27:bf:af:27:68:0d:9e:0d:2d:15:b3:
30:ce:db:b7:b3:38:a2:ac:e7:de:be:0a:e1:61:be:
72:85:86:0c:9d:72:be:ca:0a:42:d7:c9:d3:fb:9f:
32:4b:80:e4:0d:1c:d5:c9:fe:f9:b0:06:53:bc:8c:
1a:09:53:a1:5b:54:66:0a:5a:13:33:21:a4:71:5e:
4a:70:b6:fe:ca:49:fc:cc:13:d2:cc:dc:67:99:cf:
e4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:14:43:56:61:F0:EE:3E:68:FA:98:7D:0F:4A:14:34:1B:E1:FE:85
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/1/
RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/1/DA14435661F0EE3E68FA987D0F4A14341BE1FE85.mft
RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60301
Signature Algorithm: sha256WithRSAEncryption
32:3a:16:bb:c8:0f:80:83:8f:5e:c2:01:a2:11:46:c6:32:ea:
81:b4:90:7a:ad:e2:5e:7f:32:c4:ac:02:90:40:b6:1a:8d:db:
8a:46:99:f5:fa:d8:fe:17:e7:60:03:1f:b9:d5:6c:2d:02:0c:
31:56:c3:77:5d:1d:36:37:8d:c9:29:db:8b:3f:d2:75:4f:03:
10:69:6a:4f:5e:b7:a9:25:0d:93:c0:c9:08:5a:da:98:53:89:
4b:32:30:a8:42:31:96:38:33:ca:c1:f6:63:72:1a:54:1a:cc:
d0:59:57:ed:30:7d:cb:fd:2c:08:62:bb:77:90:35:89:ca:d5:
01:70:5b:1e:ec:0c:23:42:e2:7a:86:3f:f8:e9:3f:a2:d5:de:
51:b6:e9:fa:81:60:92:88:d7:56:fc:fc:75:d2:44:f1:39:4b:
4b:a6:72:f4:26:d5:ed:8c:f9:d7:fd:e8:e3:18:c3:65:3a:49:
fe:57:c6:da:89:a9:38:25:46:11:48:b9:93:c2:5e:f8:74:ab:
cd:d6:41:1e:f4:a6:b8:21:c1:cd:fe:b4:35:e5:dc:41:42:2b:
7f:3d:f4:38:b8:c7:24:be:b7:ec:b4:fa:a1:8d:5a:d9:85:49:
0f:a4:a5:80:bb:ca:df:e8:73:e6:50:50:83:bf:0f:b9:ac:37:
05:e7:2c:c9
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYzDMf2cElt6+tiuee/9O/ArMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDQwNDQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTE0NDM1NjYxZjBlZTNlNjhmYTk4N2QwZjRhMTQzNDFiZTFmZTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5YLMLDRDymarAPYz/VItjyS3FI7G
vYqx9urUr8C88BCHg0yUlndpoKQSxJpMnUM9k7mxizVLiM7RvjhBv/uCsNg1+BeL
bpAGYDEDOTuRkbhuyKEj4vGYuTPrI6G7v5HVXiIb1OQBx8j80GSTP5h6x9evn+Qo
sYd+Ewjm0wU4JY2+L8EWIavlBsJgK5TxT5OTosY2qKvwnq3E869AwsUAHJvl0eLe
9/PVJ7+vJ2gNng0tFbMwztu3sziirOfevgrhYb5yhYYMnXK+ygpC18nT+58yS4Dk
DRzVyf75sAZTvIwaCVOhW1RmCloTMyGkcV5KcLb+ykn8zBPSzNxnmc/kQwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFNoUQ1Zh8O4+aPqYfQ9KFDQb4f6FMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMFQGCCsGAQUFBzAFhkhy
c3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4OWQw
OTVhZTAxODlkMzA4N2ZkZDAzMjYvMS8wgYAGCCsGAQUFBzAKhnRyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4OWQwOTVhZTAxODlk
MzA4N2ZkZDAzMjYvMS9EQTE0NDM1NjYxRjBFRTNFNjhGQTk4N0QwRjRBMTQzNDFC
RTFGRTg1Lm1mdDA2BggrBgEFBQcwDYYqaHR0cHM6Ly9ycmRwLXJwcy5hcmluLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDrjTANBgkqhkiG9w0BAQsFAAOCAQEAMjoWu8gPgIOP
XsIBohFGxjLqgbSQeq3iXn8yxKwCkEC2Go3bikaZ9frY/hfnYAMfudVsLQIMMVbD
d10dNjeNySnbiz/SdU8DEGlqT163qSUNk8DJCFramFOJSzIwqEIxljgzysH2Y3Ia
VBrM0FlX7TB9y/0sCGK7d5A1icrVAXBbHuwMI0LieoY/+Ok/otXeUbbp+oFgkojX
Vvz8ddJE8TlLS6Zy9CbV7Yz51/3o4xjDZTpJ/lfG2ompOCVGEUi5k8Je+HSrzdZB
HvSmuCHBzf60NeXcQUIrfz30OLjHJL637LT6oY1a2YVJD6SlgLvK3+hz5lBQg78P
uaw3BecsyQ==
-----END CERTIFICATE-----
Generated at Fri May 3 13:11:12 2024 by rpki-client on console-ams.rpki-client.org