Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41ilc3za79__HmejgucHy67e-fc.cer
File: 41ilc3za79__HmejgucHy67e-fc.cer (raw, json)
Hash identifier: PUPuf455iPqA+uQOjWIHzf4exE8vYyeDXVPIjShf54Y=
Subject key identifier: E3:58:A5:73:7C:DA:EF:DF:FF:1E:67:A3:82:E7:07:CB:AE:DE:F9:F7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC493762D2C0BDBFCEAD449799CAF8F81
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/7eb2c2-87d1-4f0a-959f-ff0f5f6a2ad1/1/41ilc3za79__HmejgucHy67e-fc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/7eb2c2-87d1-4f0a-959f-ff0f5f6a2ad1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:47 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 213316
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:76:2d:2c:0b:db:fc:ea:d4:49:79:9c:af:8f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e358a5737cdaefdfff1e67a382e707cbaedef9f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0e:67:0a:5d:dc:de:fd:7f:3a:f7:03:dc:31:
04:bd:db:3c:c4:bd:61:20:2e:47:f9:1c:6c:d2:82:
55:5d:24:e0:e3:58:88:d5:5f:fd:21:b9:8f:86:42:
c4:3e:29:33:fd:26:16:5a:1a:f7:12:88:5d:e1:b4:
05:9b:f5:90:79:df:a6:c5:51:1a:b4:b2:29:5a:86:
2f:0b:5f:3a:70:20:97:5a:89:32:44:f4:6e:48:57:
45:0d:6f:4f:e2:be:b4:a5:50:ec:64:54:02:2b:c4:
c0:b7:bc:5d:97:11:06:9b:21:87:e4:ab:a8:37:77:
85:45:02:93:f0:34:1f:a1:14:0e:df:a7:ae:42:be:
73:0e:77:a8:85:41:60:07:22:a6:a9:fd:7d:55:47:
6c:38:04:33:e4:dc:51:24:d8:3b:9d:09:b8:03:58:
f4:3d:c5:d3:a7:ae:6f:3d:61:7e:12:52:b5:28:94:
a2:a4:21:99:0e:09:f0:02:ae:ad:26:07:d5:94:9c:
46:a5:d5:ff:d9:b5:b0:41:45:33:a5:86:83:44:f4:
41:6a:03:78:0b:69:46:9c:3e:25:ff:08:1f:17:63:
bc:57:64:be:31:37:50:6a:c7:40:dc:a9:d7:b7:60:
0d:70:54:22:b9:27:15:7d:49:5a:73:30:18:58:49:
5a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:58:A5:73:7C:DA:EF:DF:FF:1E:67:A3:82:E7:07:CB:AE:DE:F9:F7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7eb2c2-87d1-4f0a-959f-ff0f5f6a2ad1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7eb2c2-87d1-4f0a-959f-ff0f5f6a2ad1/1/41ilc3za79__HmejgucHy67e-fc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213316
Signature Algorithm: sha256WithRSAEncryption
6e:39:72:b9:ba:d2:cc:35:c7:f4:66:46:1f:27:bf:43:65:23:
a6:e7:48:bb:2f:b5:24:fc:8f:9d:26:d4:02:49:d6:ef:6c:15:
9d:63:68:0e:99:df:ed:76:47:4f:d0:ed:52:f9:fd:0f:b3:17:
be:ba:e7:47:c2:27:39:a6:2d:c6:e2:e0:40:ee:66:a0:c5:94:
3c:bd:ed:e9:e0:cf:e0:80:d5:6f:3f:22:fc:45:de:37:32:52:
bc:b1:51:fb:74:2f:99:d1:2d:c1:fa:87:91:de:e8:04:a1:4e:
5a:8f:1d:f3:6b:38:fe:70:8d:82:47:d4:f0:54:41:df:a1:da:
a5:96:e9:03:c9:72:d0:1b:cf:5a:e2:d2:a8:52:da:a1:e6:c7:
b9:43:bd:09:e1:4c:29:67:15:71:ba:82:70:f4:e1:2f:07:8f:
5a:2a:a3:76:11:b7:fc:81:18:94:e6:a1:e1:33:f2:51:a7:d0:
c5:78:fc:d4:91:78:a2:38:70:a0:c7:49:d6:de:0f:56:98:20:
e8:ca:8d:15:3c:0b:ae:9e:e5:01:c6:94:18:d8:7d:09:be:21:
7c:69:28:4d:f4:ee:69:9e:36:67:56:49:fb:07:2a:b6:be:19:
fe:a2:29:bd:7a:68:66:34:6c:f1:37:4a:a1:e3:db:41:f2:ab:
b7:f9:cf:a1
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYzEk3YtLAvb/OrUSXmcr4+BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTAzMDQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzU4YTU3MzdjZGFlZmRmZmYxZTY3YTM4MmU3MDdjYmFlZGVmOWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3g5nCl3c3v1/OvcD3DEEvds8xL1h
IC5H+Rxs0oJVXSTg41iI1V/9IbmPhkLEPikz/SYWWhr3Eohd4bQFm/WQed+mxVEa
tLIpWoYvC186cCCXWokyRPRuSFdFDW9P4r60pVDsZFQCK8TAt7xdlxEGmyGH5Kuo
N3eFRQKT8DQfoRQO36euQr5zDneohUFgByKmqf19VUdsOAQz5NxRJNg7nQm4A1j0
PcXTp65vPWF+ElK1KJSipCGZDgnwAq6tJgfVlJxGpdX/2bWwQUUzpYaDRPRBagN4
C2lGnD4l/wgfF2O8V2S+MTdQasdA3KnXt2ANcFQiuScVfUlaczAYWElaDQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFONYpXN82u/f/x5no4LnB8uu3vn3MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U0LzdlYjJj
Mi04N2QxLTRmMGEtOTU5Zi1mZjBmNWY2YTJhZDEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTQvN2ViMmMy
LTg3ZDEtNGYwYS05NTlmLWZmMGY1ZjZhMmFkMS8xLzQxaWxjM3phNzlfX0htZWpn
dWNIeTY3ZS1mYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNBRDANBgkqhkiG9w0BAQsFAAOCAQEAbjlyubrSzDXH
9GZGHye/Q2UjpudIuy+1JPyPnSbUAknW72wVnWNoDpnf7XZHT9DtUvn9D7MXvrrn
R8InOaYtxuLgQO5moMWUPL3t6eDP4IDVbz8i/EXeNzJSvLFR+3QvmdEtwfqHkd7o
BKFOWo8d82s4/nCNgkfU8FRB36HapZbpA8ly0BvPWuLSqFLaoebHuUO9CeFMKWcV
cbqCcPThLwePWiqjdhG3/IEYlOah4TPyUafQxXj81JF4ojhwoMdJ1t4PVpgg6MqN
FTwLrp7lAcaUGNh9Cb4hfGkoTfTuaZ42Z1ZJ+wcqtr4Z/qIpvXpoZjRs8TdKoePb
QfKrt/nPoQ==
-----END CERTIFICATE-----
Generated at Fri Apr 26 11:32:29 2024 by rpki-client on console-ams.rpki-client.org