Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2mWPd2BVawKd9aKVkzfVa9Xgx_k.cer
File: 2mWPd2BVawKd9aKVkzfVa9Xgx_k.cer (raw, json)
Hash identifier: 6VfjjAg7821SdtFOwjX4Alh+O4m3yjGyfCJqMUZeR08=
Subject key identifier: DA:65:8F:77:60:55:6B:02:9D:F5:A2:95:93:37:D5:6B:D5:E0:C7:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26CEEC6B911CC96FCFFB81309F70595
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/03/ff87ea-d9a1-49d3-84a9-6751c8cf99b5/1/2mWPd2BVawKd9aKVkzfVa9Xgx_k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/03/ff87ea-d9a1-49d3-84a9-6751c8cf99b5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 197657
IP: 2001:67c:cc8::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:ee:c6:b9:11:cc:96:fc:ff:b8:13:09:f7:05:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da658f7760556b029df5a2959337d56bd5e0c7f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:80:80:12:23:a8:60:5e:9a:3a:f4:a9:28:3c:
f5:65:9c:f2:67:95:5c:2c:26:66:31:93:5f:93:fa:
52:20:db:4c:d6:93:2a:0a:0e:e6:8d:ab:37:51:2f:
d7:fe:96:fc:a1:34:06:68:31:fa:0d:5a:ff:18:5d:
e8:91:22:e1:ca:76:a8:93:f5:7c:76:c9:c8:0c:a3:
66:58:3f:c4:95:ec:9e:f3:cd:06:59:4f:12:2e:14:
67:f0:c2:84:f1:b7:7e:2b:81:32:ee:69:9c:d9:7a:
d5:db:39:38:3c:9c:ce:98:e9:cd:22:63:13:9c:44:
00:3f:fa:90:a4:70:d3:5a:76:0e:3a:41:dd:1f:8a:
03:54:e8:85:14:4f:b0:94:88:7d:64:32:67:b7:75:
0e:7a:01:54:36:1b:a2:63:0d:38:20:03:99:ff:5d:
82:52:c6:23:be:80:6a:16:de:08:81:3f:23:92:73:
79:c9:17:5a:b9:b4:ff:ab:5e:59:72:da:10:ba:85:
46:e0:d5:bb:9d:53:5e:c0:bc:4a:34:e6:63:f2:ad:
98:7e:4b:ec:25:0b:76:0c:20:0c:bf:69:ac:32:05:
47:80:f2:40:37:0d:7b:92:04:7f:f2:c1:36:b4:9a:
a1:3e:c0:31:ba:31:14:47:bf:d1:5b:9a:a6:07:36:
b4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:65:8F:77:60:55:6B:02:9D:F5:A2:95:93:37:D5:6B:D5:E0:C7:F9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/ff87ea-d9a1-49d3-84a9-6751c8cf99b5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/ff87ea-d9a1-49d3-84a9-6751c8cf99b5/1/2mWPd2BVawKd9aKVkzfVa9Xgx_k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:cc8::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197657
Signature Algorithm: sha256WithRSAEncryption
51:93:f5:9e:ec:a2:65:f9:99:3a:67:c4:1c:df:1c:0a:d9:71:
28:88:bd:f8:92:64:cb:8e:f7:0e:b4:3c:4f:51:ea:c1:77:c3:
35:ab:e4:c3:c0:32:f3:19:7d:03:88:fd:3a:12:23:38:b3:8c:
bc:31:a4:cf:2e:21:60:e2:41:be:21:08:cd:4e:06:72:c8:02:
4a:af:4b:88:21:11:c7:19:e7:e5:41:3e:4b:c9:c5:42:75:2b:
4a:66:dd:1c:67:57:b6:86:d5:0f:ea:f7:51:4d:2f:6f:0d:cd:
df:b3:c8:ff:45:24:21:06:04:ed:f3:ea:1f:b4:bf:2f:6d:cf:
0f:e1:d9:d6:82:d7:92:cc:46:40:2a:7b:98:a3:6b:8b:7a:95:
02:ad:1c:84:94:91:e6:17:75:d9:f8:a5:f7:10:10:8b:21:f6:
63:4d:13:43:89:9f:e8:c6:e1:71:19:fe:4c:1c:52:2d:7a:19:
06:70:63:dc:84:6e:fb:e7:a5:47:88:66:e9:df:4e:42:13:ef:
a2:41:c7:4c:3b:20:31:ad:aa:3e:6f:ee:2e:e1:d3:f4:9e:2f:
63:75:6b:0d:7b:34:9c:10:61:20:1c:b1:e5:73:c9:63:05:66:
89:d5:89:f6:78:68:17:7b:b6:97:31:db:79:3b:c4:15:c4:99:
a1:4a:62:97
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgISAYzCbO7GuRHMlvz/uBMJ9wWVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDAyOTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTY1OGY3NzYwNTU2YjAyOWRmNWEyOTU5MzM3ZDU2YmQ1ZTBjN2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YCAEiOoYF6aOvSpKDz1ZZzyZ5Vc
LCZmMZNfk/pSINtM1pMqCg7mjas3US/X/pb8oTQGaDH6DVr/GF3okSLhynaok/V8
dsnIDKNmWD/Eleye880GWU8SLhRn8MKE8bd+K4Ey7mmc2XrV2zk4PJzOmOnNImMT
nEQAP/qQpHDTWnYOOkHdH4oDVOiFFE+wlIh9ZDJnt3UOegFUNhuiYw04IAOZ/12C
UsYjvoBqFt4IgT8jknN5yRdaubT/q15ZctoQuoVG4NW7nVNewLxKNOZj8q2Yfkvs
JQt2DCAMv2msMgVHgPJANw17kgR/8sE2tJqhPsAxujEUR7/RW5qmBza0OQIDAQAB
o4ICozCCAp8wHQYDVR0OBBYEFNplj3dgVWsCnfWilZM31WvV4Mf5MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAzL2ZmODdl
YS1kOWExLTQ5ZDMtODRhOS02NzUxYzhjZjk5YjUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMvZmY4N2Vh
LWQ5YTEtNDlkMy04NGE5LTY3NTFjOGNmOTliNS8xLzJtV1BkMkJWYXdLZDlhS1Zr
emZWYTlYZ3hfay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAzIMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwMEGTANBgkqhkiG9w0BAQsFAAOCAQEAUZP1nuyiZfmZOmfEHN8cCtlxKIi9
+JJky473DrQ8T1HqwXfDNavkw8Ay8xl9A4j9OhIjOLOMvDGkzy4hYOJBviEIzU4G
csgCSq9LiCERxxnn5UE+S8nFQnUrSmbdHGdXtobVD+r3UU0vbw3N37PI/0UkIQYE
7fPqH7S/L23PD+HZ1oLXksxGQCp7mKNri3qVAq0chJSR5hd12fil9xAQiyH2Y00T
Q4mf6MbhcRn+TBxSLXoZBnBj3IRu++elR4hm6d9OQhPvokHHTDsgMa2qPm/uLuHT
9J4vY3VrDXs0nBBhIByx5XPJYwVmidWJ9nhoF3u2lzHbeTvEFcSZoUpilw==
-----END CERTIFICATE-----
Generated at Fri May 3 12:29:24 2024 by rpki-client on console-fra.rpki-client.org