Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2jqEPf4emgiI_5tbQWQnRQvWjcE.cer
File: 2jqEPf4emgiI_5tbQWQnRQvWjcE.cer (raw, json)
Hash identifier: 8FsEB4oDaFj/PNelCuEPBxgFGm62NgglWS/8pOgHVQ0=
Subject key identifier: DA:3A:84:3D:FE:1E:9A:08:88:FF:9B:5B:41:64:27:45:0B:D6:8D:C1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E984F77960FEB206495660231126B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2e/aae29e-1ff4-4415-94a9-f7f2937dd305/1/2jqEPf4emgiI_5tbQWQnRQvWjcE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2e/aae29e-1ff4-4415-94a9-f7f2937dd305/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:08 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 201818
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Apr 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:98:4f:77:96:0f:eb:20:64:95:66:02:31:12:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da3a843dfe1e9a0888ff9b5b416427450bd68dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:35:33:05:0b:1e:a8:25:9d:56:5e:97:2f:7c:
05:6c:8f:60:36:b0:34:f0:b2:15:2c:1b:ee:75:e4:
f9:85:a7:e0:ae:35:79:22:cc:b7:de:5c:66:72:ed:
62:03:88:5b:6d:71:3d:af:b6:af:44:5b:2c:2c:ac:
ff:26:76:6b:5f:f7:26:3f:3b:c4:c5:1c:26:bb:6d:
11:18:6f:11:1b:87:96:30:dc:f5:9c:dd:77:71:f3:
04:58:8a:bc:f4:0d:ef:38:8f:15:b8:d6:37:35:80:
62:ac:36:7e:ad:ba:35:a3:c0:88:a9:70:a1:ac:1a:
ee:05:10:2d:59:d9:31:ea:f9:36:6d:54:6a:87:ec:
b9:a6:ac:b9:2c:52:af:ef:44:94:00:0d:55:81:c8:
a8:81:88:fc:4e:b1:11:c1:23:c9:62:33:77:ef:9d:
e9:4e:d5:b0:3f:f5:ff:29:44:eb:dd:63:93:2e:2c:
95:57:ae:10:89:d1:b7:28:33:28:5c:df:a8:1a:60:
19:b1:69:a3:59:84:f2:41:7e:79:81:8c:d4:8a:32:
ae:0b:b9:2c:53:c9:cd:e6:7b:93:3f:a0:9a:43:74:
f4:48:dd:af:33:76:2c:30:7c:10:7b:f8:6e:6b:05:
20:9b:94:95:b8:d9:b6:7f:74:59:bd:ac:fa:1e:2e:
f4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:3A:84:3D:FE:1E:9A:08:88:FF:9B:5B:41:64:27:45:0B:D6:8D:C1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/aae29e-1ff4-4415-94a9-f7f2937dd305/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/aae29e-1ff4-4415-94a9-f7f2937dd305/1/2jqEPf4emgiI_5tbQWQnRQvWjcE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201818
Signature Algorithm: sha256WithRSAEncryption
87:f5:ed:81:1e:45:26:37:6f:44:3e:4d:4b:5e:a7:f8:92:21:
ed:0c:77:ce:2d:3d:d0:0d:9a:8a:d4:f0:6c:90:bf:fa:2f:52:
04:2f:21:5f:8d:e2:a4:e7:76:1b:6e:be:9f:ea:7d:49:f2:3c:
6a:08:67:cf:61:48:ac:f3:52:20:c4:dc:7f:f6:6a:a7:76:43:
5f:2f:e2:ea:b9:e7:45:aa:ab:a5:5b:47:ed:0e:ab:03:dc:ca:
9c:33:2a:a8:df:99:bb:36:d1:a1:25:95:fc:46:d2:bd:4f:c5:
a1:ba:dc:12:0d:54:7f:8a:2c:c9:35:41:ec:5c:b2:04:ab:47:
44:e9:cb:f3:0d:d1:a9:69:d0:87:17:d1:9c:0d:b6:32:6e:5b:
27:49:78:79:a9:06:f4:20:e0:29:04:2d:d7:b3:7d:80:81:17:
b3:2a:1c:7c:99:54:aa:d1:05:17:cd:b5:d2:1f:08:fd:52:6e:
a3:3d:40:8e:cc:56:67:b2:45:89:52:1b:55:41:60:d4:93:fa:
86:ee:0a:37:54:dc:c1:93:0b:04:b4:86:60:94:79:27:64:88:
01:08:ed:9f:82:bb:bc:05:5d:7d:1c:b6:be:61:17:ce:c7:8e:
2c:9a:3e:c5:b7:da:d9:ab:dd:b0:9a:4c:1e:e4:5d:18:04:63:
26:d7:61:04
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYzFbphPd5YP6yBklWYCMRJrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTQzMDA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTNhODQzZGZlMWU5YTA4ODhmZjliNWI0MTY0Mjc0NTBiZDY4ZGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzUzBQseqCWdVl6XL3wFbI9gNrA0
8LIVLBvudeT5hafgrjV5Isy33lxmcu1iA4hbbXE9r7avRFssLKz/JnZrX/cmPzvE
xRwmu20RGG8RG4eWMNz1nN13cfMEWIq89A3vOI8VuNY3NYBirDZ+rbo1o8CIqXCh
rBruBRAtWdkx6vk2bVRqh+y5pqy5LFKv70SUAA1VgciogYj8TrERwSPJYjN3753p
TtWwP/X/KUTr3WOTLiyVV64QidG3KDMoXN+oGmAZsWmjWYTyQX55gYzUijKuC7ks
U8nN5nuTP6CaQ3T0SN2vM3YsMHwQe/huawUgm5SVuNm2f3RZvaz6Hi706wIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFNo6hD3+HpoIiP+bW0FkJ0UL1o3BMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJlL2FhZTI5
ZS0xZmY0LTQ0MTUtOTRhOS1mN2YyOTM3ZGQzMDUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmUvYWFlMjll
LTFmZjQtNDQxNS05NGE5LWY3ZjI5MzdkZDMwNS8xLzJqcUVQZjRlbWdpSV81dGJR
V1FuUlF2V2pjRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMUWjANBgkqhkiG9w0BAQsFAAOCAQEAh/XtgR5FJjdv
RD5NS16n+JIh7Qx3zi090A2aitTwbJC/+i9SBC8hX43ipOd2G26+n+p9SfI8aghn
z2FIrPNSIMTcf/Zqp3ZDXy/i6rnnRaqrpVtH7Q6rA9zKnDMqqN+ZuzbRoSWV/EbS
vU/FobrcEg1Uf4osyTVB7FyyBKtHROnL8w3RqWnQhxfRnA22Mm5bJ0l4eakG9CDg
KQQt17N9gIEXsyocfJlUqtEFF8210h8I/VJuoz1AjsxWZ7JFiVIbVUFg1JP6hu4K
N1TcwZMLBLSGYJR5J2SIAQjtn4K7vAVdfRy2vmEXzseOLJo+xbfa2avdsJpMHuRd
GARjJtdhBA==
-----END CERTIFICATE-----
Generated at Tue Apr 16 20:30:32 2024 by rpki-client on console-ams.rpki-client.org