Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2x3NeuqJI6iq_So40dw9BmhAeaY.cer
File: 2x3NeuqJI6iq_So40dw9BmhAeaY.cer (raw, json)
Hash identifier: 5U3hp/Oqb+w3wqud8vfqs6TTLHP0/sZrxpp2iZhN+ds=
Subject key identifier: DB:1D:CD:7A:EA:89:23:A8:AA:FD:2A:38:D1:DC:3D:06:68:40:79:A6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B6210C26249E5A3B349C9A193E7C5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:31:18 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 50330
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:62:10:c2:62:49:e5:a3:b3:49:c9:a1:93:e7:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db1dcd7aea8923a8aafd2a38d1dc3d06684079a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d0:52:e8:03:08:de:b1:28:2f:28:d5:45:2e:
26:37:a3:36:1a:05:9e:e4:22:eb:5f:33:32:04:9a:
d1:26:aa:fd:47:c0:48:dc:c2:4f:18:61:9d:2a:70:
c5:16:62:af:bc:f1:91:7c:2d:4a:03:b4:fc:00:3a:
dc:92:a6:68:c3:04:29:46:d5:ca:d2:87:01:21:dc:
9b:e4:41:34:cf:c9:b4:c1:45:3c:3e:88:6a:3d:0f:
cb:83:8d:7e:8a:c2:66:8e:ce:f3:61:d3:dc:27:a5:
01:44:47:e0:a5:57:73:b7:35:4d:fb:bd:cb:33:60:
07:64:f7:7e:7e:13:b1:ae:18:1f:bb:f4:aa:a1:52:
2c:1f:9b:cf:dc:f9:59:69:ec:f3:f9:db:1e:d5:cc:
2a:d1:e4:c5:e0:31:10:41:21:74:e6:5c:03:3c:bd:
15:c7:40:5f:51:0b:03:4f:63:70:f0:ca:93:06:49:
da:f8:c5:2c:c8:0e:b9:9b:f6:4a:04:be:79:89:43:
b6:33:46:7e:11:be:1c:dc:27:e5:50:3b:77:7f:72:
50:78:62:b0:f2:db:cd:70:ce:36:76:9d:6a:01:b6:
04:24:be:1a:92:fa:71:80:62:9f:86:3e:98:2c:16:
27:9d:c1:3d:74:72:f0:aa:29:0d:69:53:a9:28:43:
3a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:1D:CD:7A:EA:89:23:A8:AA:FD:2A:38:D1:DC:3D:06:68:40:79:A6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50330
Signature Algorithm: sha256WithRSAEncryption
2f:b3:dd:eb:a3:6e:0c:a2:da:b7:98:a0:a8:62:98:87:f0:26:
dc:31:2f:87:b1:59:55:f2:a4:12:7d:06:b2:85:c0:1d:42:b5:
f0:c6:3c:b9:d0:a6:2c:b5:4c:7a:3a:32:03:9b:d1:66:c8:d7:
25:7e:6c:7d:29:f2:6f:fc:b8:f7:0a:27:bf:f0:ea:16:5e:46:
d4:8b:e1:cc:2e:cc:83:d6:16:56:12:c7:0b:92:78:20:f8:9b:
ba:cb:97:a5:e5:e2:35:ae:ce:e5:d1:89:d8:e4:a4:6f:f1:ea:
b8:4e:f5:f2:3c:81:dd:f0:03:17:e2:b5:6c:3e:5a:9e:4e:4c:
3d:9d:02:df:5a:4d:75:e9:f2:9e:88:5a:19:f2:b4:d9:47:1a:
8d:08:3e:f0:27:99:35:87:b6:fa:9a:98:f1:3e:bf:88:c6:fb:
6b:48:35:a5:02:ce:2c:58:51:6e:a8:f4:99:9c:ff:3a:52:81:
c5:8c:c1:b0:1f:bb:bd:e4:28:ea:89:51:67:35:c3:d6:be:b3:
e0:a8:12:e3:a4:ab:ae:48:6f:ee:c1:d1:e0:07:9f:2c:75:cd:
c8:f4:17:f0:14:67:b9:77:e2:10:7b:dd:e0:05:aa:22:24:7b:
ce:13:38:03:00:b0:bd:98:af:90:d3:f7:c4:da:e1:89:e8:a0:
2f:38:3d:5e
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYzGS2IQwmJJ5aOzScmhk+fFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTgzMTE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjFkY2Q3YWVhODkyM2E4YWFmZDJhMzhkMWRjM2QwNjY4NDA3OWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9BS6AMI3rEoLyjVRS4mN6M2GgWe
5CLrXzMyBJrRJqr9R8BI3MJPGGGdKnDFFmKvvPGRfC1KA7T8ADrckqZowwQpRtXK
0ocBIdyb5EE0z8m0wUU8PohqPQ/Lg41+isJmjs7zYdPcJ6UBREfgpVdztzVN+73L
M2AHZPd+fhOxrhgfu/SqoVIsH5vP3PlZaezz+dse1cwq0eTF4DEQQSF05lwDPL0V
x0BfUQsDT2Nw8MqTBkna+MUsyA65m/ZKBL55iUO2M0Z+Eb4c3CflUDt3f3JQeGKw
8tvNcM42dp1qAbYEJL4akvpxgGKfhj6YLBYnncE9dHLwqikNaVOpKEM6nQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFNsdzXrqiSOoqv0qONHcPQZoQHmmMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdlLzM1YWQ2
ZS00ZDZiLTRmOWMtOTBmMy05MGIxOGNhOGMyMGMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2UvMzVhZDZl
LTRkNmItNGY5Yy05MGYzLTkwYjE4Y2E4YzIwYy8xLzJ4M05ldXFKSTZpcV9TbzQw
ZHc5Qm1oQWVhWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDEmjANBgkqhkiG9w0BAQsFAAOCAQEAL7Pd66NuDKLa
t5igqGKYh/Am3DEvh7FZVfKkEn0GsoXAHUK18MY8udCmLLVMejoyA5vRZsjXJX5s
fSnyb/y49wonv/DqFl5G1IvhzC7Mg9YWVhLHC5J4IPibusuXpeXiNa7O5dGJ2OSk
b/HquE718jyB3fADF+K1bD5ank5MPZ0C31pNdenynohaGfK02UcajQg+8CeZNYe2
+pqY8T6/iMb7a0g1pQLOLFhRbqj0mZz/OlKBxYzBsB+7veQo6olRZzXD1r6z4KgS
46Srrkhv7sHR4AefLHXNyPQX8BRnuXfiEHvd4AWqIiR7zhM4AwCwvZivkNP3xNrh
ieigLzg9Xg==
-----END CERTIFICATE-----
Generated at Fri Apr 26 11:28:51 2024 by rpki-client on console-ams.rpki-client.org