Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3DU3KrVODfO_UU1fCMpS5De9kaQ.cer
File: 3DU3KrVODfO_UU1fCMpS5De9kaQ.cer (raw, json)
Hash identifier: n8ziTjaldZ3Z/MHgSLuD9b0K2qeqwUfZdB6Adw3YRQg=
Subject key identifier: DC:35:37:2A:B5:4E:0D:F3:BF:51:4D:5F:08:CA:52:E4:37:BD:91:A4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E04C7FC0FFF4CE31D39DD8E0CA9A02D38
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 03 Mar 2024 14:46:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215411
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:04:c7:fc:0f:ff:4c:e3:1d:39:dd:8e:0c:a9:a0:2d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 3 14:46:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc35372ab54e0df3bf514d5f08ca52e437bd91a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8f:eb:44:b0:1e:2b:fe:bf:9d:97:1b:e8:8c:
26:c1:00:6f:42:1f:a3:68:27:dc:38:38:0e:23:a0:
ca:81:ef:f4:91:33:ec:3c:0b:f1:7d:ca:82:f3:f8:
44:38:7e:ea:a1:13:67:c2:70:69:0c:e5:30:6b:a1:
db:f2:bf:0e:f6:65:00:aa:d3:d0:84:94:d1:9d:b9:
77:26:68:ff:aa:47:5c:07:93:6c:51:96:97:3b:28:
7b:c0:e9:63:e9:46:59:b2:ff:5e:b2:48:e6:51:a6:
69:ec:5e:9d:17:3f:f0:60:ea:5d:75:58:c3:c5:1e:
2c:01:c1:3b:4a:b7:cd:57:a1:76:47:e5:7a:be:48:
c4:67:e5:43:00:20:d1:a6:f0:f8:bf:4b:aa:09:11:
0b:6e:08:86:b6:06:5b:af:77:0e:81:f2:aa:cd:25:
7c:d3:b4:1d:18:2a:f8:16:5b:de:80:2a:59:0b:e7:
ed:fc:09:4e:9b:dd:0d:f7:72:3c:b4:45:88:18:e5:
e9:04:91:2a:32:45:2d:71:4b:ab:47:36:d2:ba:e9:
46:83:e4:7a:4b:65:09:fd:ba:c7:be:ba:d9:26:c0:
d4:88:9b:69:9a:65:15:0d:af:d0:7c:c6:3f:da:38:
bc:c0:e4:51:bb:44:60:fd:35:d6:5d:0f:ab:b9:c9:
40:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:35:37:2A:B5:4E:0D:F3:BF:51:4D:5F:08:CA:52:E4:37:BD:91:A4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215411
Signature Algorithm: sha256WithRSAEncryption
5f:07:4b:19:92:d5:cb:a5:c3:55:55:17:1c:e7:57:16:b6:77:
50:66:72:68:3a:e3:4a:c4:59:fa:0e:25:be:f5:cd:d5:21:9f:
6f:80:b3:b0:3a:74:54:69:13:cd:b6:8f:db:6b:75:54:cc:82:
b4:73:59:46:5d:51:ec:7b:63:40:58:51:8c:de:e6:45:2c:62:
2a:6b:c2:43:98:db:1d:3d:7c:df:ea:23:3e:3a:c2:bb:d6:f2:
19:4c:c1:d1:6a:35:1d:81:ef:bc:9e:52:37:18:52:97:46:6e:
e4:40:9b:46:0e:0c:40:85:0b:52:cd:dd:5f:5c:04:b1:c1:dd:
39:f8:a8:70:f8:bf:3a:79:e6:90:3e:89:45:44:2d:bd:29:ad:
fd:c0:e7:ac:c7:ed:4b:19:e8:82:69:d9:f8:9e:24:58:68:2f:
ef:e8:98:38:5d:01:67:fc:0d:43:ee:dd:87:1c:55:e9:70:15:
50:c2:0b:b9:08:14:27:35:4a:83:4b:b8:aa:47:71:4e:42:04:
c2:33:41:3e:01:88:5a:d6:30:34:00:82:42:a1:2c:f8:da:d3:
d9:c0:8d:f9:61:8f:6b:9c:27:f7:42:9b:72:9b:1d:19:fa:a8:
db:e5:8d:16:10:cb:a7:1f:50:f9:27:46:4c:08:5d:93:5a:4b:
4d:34:b2:cb
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAY4Ex/wP/0zjHTndjgypoC04MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMzAzMTQ0NjM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzM1MzcyYWI1NGUwZGYzYmY1MTRkNWYwOGNhNTJlNDM3YmQ5MWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyo/rRLAeK/6/nZcb6IwmwQBvQh+j
aCfcODgOI6DKge/0kTPsPAvxfcqC8/hEOH7qoRNnwnBpDOUwa6Hb8r8O9mUAqtPQ
hJTRnbl3Jmj/qkdcB5NsUZaXOyh7wOlj6UZZsv9eskjmUaZp7F6dFz/wYOpddVjD
xR4sAcE7SrfNV6F2R+V6vkjEZ+VDACDRpvD4v0uqCRELbgiGtgZbr3cOgfKqzSV8
07QdGCr4FlvegCpZC+ft/AlOm90N93I8tEWIGOXpBJEqMkUtcUurRzbSuulGg+R6
S2UJ/brHvrrZJsDUiJtpmmUVDa/QfMY/2ji8wORRu0Rg/TXWXQ+ruclAtQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFNw1Nyq1Tg3zv1FNXwjKUuQ3vZGkMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MxL2IxYTM0
Zi05M2EzLTQxYjAtYjA5Ni0xOTc3YWMyNGQyMTEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzEvYjFhMzRm
LTkzYTMtNDFiMC1iMDk2LTE5NzdhYzI0ZDIxMS8xLzNEVTNLclZPRGZPX1VVMWZD
TXBTNURlOWthUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNJczANBgkqhkiG9w0BAQsFAAOCAQEAXwdLGZLVy6XD
VVUXHOdXFrZ3UGZyaDrjSsRZ+g4lvvXN1SGfb4CzsDp0VGkTzbaP22t1VMyCtHNZ
Rl1R7HtjQFhRjN7mRSxiKmvCQ5jbHT183+ojPjrCu9byGUzB0Wo1HYHvvJ5SNxhS
l0Zu5ECbRg4MQIULUs3dX1wEscHdOfiocPi/OnnmkD6JRUQtvSmt/cDnrMftSxno
gmnZ+J4kWGgv7+iYOF0BZ/wNQ+7dhxxV6XAVUMILuQgUJzVKg0u4qkdxTkIEwjNB
PgGIWtYwNACCQqEs+NrT2cCN+WGPa5wn90KbcpsdGfqo2+WNFhDLpx9Q+SdGTAhd
k1pLTTSyyw==
-----END CERTIFICATE-----
Generated at Fri May 3 12:32:10 2024 by rpki-client on console-fra.rpki-client.org