Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer
File: 2n1fyh5GmSnUqLb1evPLzcY5o14.cer (raw, json)
Hash identifier: 7mlP3Kxx5UC256U/gL8jT9kkRXvx2Y6EsThVgZMsrIo=
Subject key identifier: DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0193AAF4DF97C528C934F3306C7738B70B5F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 09 Dec 2024 10:26:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210644
IP: 2a01:e5c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Dec 2024 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:aa:f4:df:97:c5:28:c9:34:f3:30:6c:77:38:b7:0b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Dec 9 10:26:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da7d5fca1e469929d4a8b6f57af3cbcdc639a35e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:19:2a:75:c6:cb:d0:10:a2:c8:05:ba:fd:a6:
1a:59:eb:d8:38:4e:d7:61:6d:a7:fa:8b:a1:0c:e4:
4b:2f:83:cc:a0:21:a7:ae:d0:f6:55:0d:09:2f:dc:
16:b0:1e:68:c9:90:7f:09:24:23:20:48:cf:59:83:
13:93:33:7f:e1:32:c8:5d:f2:69:7f:07:57:70:b3:
fa:4c:65:ae:cf:7d:e6:a5:7a:a5:ff:0a:d1:8c:da:
5f:80:98:fa:8a:0e:b6:9d:97:fd:ea:7f:cf:c9:0a:
1d:7e:77:e5:63:3a:c0:a0:77:e7:1a:fe:5b:2b:4e:
0a:89:28:89:51:2f:8e:06:74:1d:b1:e4:86:3b:4b:
eb:e8:93:0f:17:28:de:3e:62:08:a4:a3:c5:51:d1:
e3:95:f4:81:dc:cc:78:7f:ae:20:ea:33:f9:81:43:
8d:4e:f7:3b:6f:97:31:6f:5c:0c:1c:36:1d:9d:45:
9f:26:3c:90:0f:df:5d:c7:4e:4d:fc:48:e4:a9:27:
f6:ce:db:f1:19:74:09:12:40:43:0e:ed:de:a4:09:
b4:e8:11:be:63:f6:fc:f2:4b:ed:ee:0a:a3:97:13:
a3:44:44:b5:8d:b2:d7:5a:e1:08:ec:da:5b:cc:e1:
fa:ed:31:93:96:3d:7c:34:f8:1c:0b:88:4c:ba:47:
8e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e5c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210644
Signature Algorithm: sha256WithRSAEncryption
83:ed:6f:67:3f:0f:a0:49:5a:f9:40:85:88:7d:3a:b6:87:dc:
36:93:fb:e9:f1:09:3e:1a:ae:35:7b:22:68:04:46:ba:02:c7:
10:8e:20:43:99:2b:13:2c:e6:c5:26:13:89:0c:fa:6e:53:aa:
f2:09:92:fe:18:bc:cc:69:c8:5e:df:92:19:cc:10:a4:6a:d5:
73:9f:c7:62:44:f6:6e:24:7d:06:65:13:58:5b:b8:c9:ba:0e:
14:b1:47:4a:71:3c:95:56:4e:a2:6c:99:24:f3:35:13:78:72:
c8:f4:f2:7e:1c:25:44:8c:6d:4f:b1:50:a7:88:b9:9e:c0:19:
21:dd:0c:9f:86:6c:c1:0e:5c:1a:e9:e9:db:a5:92:e0:0a:60:
66:2d:83:27:cc:9d:26:6c:5d:6e:9d:f0:95:49:0b:62:78:de:
44:3b:c1:a4:03:d3:68:55:e6:7b:11:56:bf:ff:60:cb:78:4b:
8a:e3:dd:4f:b2:e1:d7:57:b1:9a:30:0f:d7:3d:56:50:81:d3:
d6:e2:8c:62:65:a4:0e:d2:4b:c2:b8:36:9d:4f:a4:01:f4:8e:
19:7a:a4:13:0c:ea:d3:3f:2c:8d:40:88:54:94:0d:28:49:31:
4b:a5:46:ff:ed:ad:14:ec:c7:0f:b6:d3:d6:24:c4:8d:c7:7a:
15:e3:69:6c
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgISAZOq9N+XxSjJNPMwbHc4twtfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQxMjA5MTAyNjM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTdkNWZjYTFlNDY5OTI5ZDRhOGI2ZjU3YWYzY2JjZGM2MzlhMzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxkqdcbL0BCiyAW6/aYaWevYOE7X
YW2n+ouhDORLL4PMoCGnrtD2VQ0JL9wWsB5oyZB/CSQjIEjPWYMTkzN/4TLIXfJp
fwdXcLP6TGWuz33mpXql/wrRjNpfgJj6ig62nZf96n/PyQodfnflYzrAoHfnGv5b
K04KiSiJUS+OBnQdseSGO0vr6JMPFyjePmIIpKPFUdHjlfSB3Mx4f64g6jP5gUON
Tvc7b5cxb1wMHDYdnUWfJjyQD99dx05N/EjkqSf2ztvxGXQJEkBDDu3epAm06BG+
Y/b88kvt7gqjlxOjRES1jbLXWuEI7NpbzOH67TGTlj18NPgcC4hMukeOTwIDAQAB
o4ICoTCCAp0wHQYDVR0OBBYEFNp9X8oeRpkp1Ki29Xrzy83GOaNeMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I0LzA2MGYz
Mi1hNDhiLTQ2NTctYTU4Yi00MWI3MzAzMjdjNzgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjQvMDYwZjMy
LWE0OGItNDY1Ny1hNThiLTQxYjczMDMyN2M3OC8xLzJuMWZ5aDVHbVNuVXFMYjFl
dlBMemNZNW8xNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUDKgHlwDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMDNtQwDQYJKoZIhvcNAQELBQADggEBAIPtb2c/D6BJWvlAhYh9OraH3DaT++nx
CT4arjV7ImgERroCxxCOIEOZKxMs5sUmE4kM+m5TqvIJkv4YvMxpyF7fkhnMEKRq
1XOfx2JE9m4kfQZlE1hbuMm6DhSxR0pxPJVWTqJsmSTzNRN4csj08n4cJUSMbU+x
UKeIuZ7AGSHdDJ+GbMEOXBrp6dulkuAKYGYtgyfMnSZsXW6d8JVJC2J43kQ7waQD
02hV5nsRVr//YMt4S4rj3U+y4ddXsZowD9c9VlCB09bijGJlpA7SS8K4Np1PpAH0
jhl6pBMM6tM/LI1AiFSUDShJMUulRv/trRTsxw+209YkxI3HehXjaWw=
-----END CERTIFICATE-----
Generated at Thu Dec 26 16:51:36 2024 by rpki-client on console-fra.rpki-client.org