Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4WXiYQLs1LriDDtz6T4hNxWZEnE.cer
File: 4WXiYQLs1LriDDtz6T4hNxWZEnE.cer (raw, json)
Hash identifier: tCcYdTYvBWu895TNUWAErVluOvUYzB6dCAvIN+1FOsI=
Subject key identifier: E1:65:E2:61:02:EC:D4:BA:E2:0C:3B:73:E9:3E:21:37:15:99:12:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86FE09D19EC680C8138C187901D8AF3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c9efb-cba8-4940-9259-2cd3d6eba969/1/4WXiYQLs1LriDDtz6T4hNxWZEnE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c9efb-cba8-4940-9259-2cd3d6eba969/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:30:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 199763
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:e0:9d:19:ec:68:0c:81:38:c1:87:90:1d:8a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e165e26102ecd4bae20c3b73e93e213715991271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:71:ea:d5:1c:10:a3:45:da:f4:49:fc:f2:5d:
e9:89:ff:17:ad:8f:9b:a9:6c:58:86:21:2c:c6:78:
47:6f:67:ac:e4:47:25:54:1c:9d:b7:19:52:56:4a:
44:22:f2:bc:1f:9a:f4:28:7f:cb:65:81:03:29:1e:
7b:8e:f6:34:24:82:88:6e:07:5f:78:82:99:da:38:
c2:b8:ab:56:4d:ef:62:6f:25:8c:8d:0b:ac:1f:d8:
3f:a3:e0:08:8e:40:d8:f1:34:7a:5b:4a:da:3d:c1:
76:43:1b:ce:a2:53:c0:78:8b:be:1c:60:98:97:22:
a4:0b:a3:d3:eb:fe:0b:61:c4:0a:df:22:25:3d:19:
11:00:45:f2:4e:e6:fb:66:f7:4a:9e:3e:7f:cd:d1:
00:d6:02:18:34:28:0e:ff:5a:6d:64:76:39:ce:59:
b2:c8:cc:b9:c2:b9:68:bd:66:a8:2f:6b:de:fb:d6:
82:82:1e:bf:9b:7d:78:67:67:e6:94:8e:7a:1e:87:
3e:c5:ac:54:c4:77:4e:c6:c0:59:29:cc:85:5f:52:
da:0a:8a:3a:f1:6e:8d:ad:ce:fe:26:74:43:a0:de:
9a:ea:3f:31:11:35:32:0e:97:02:9b:58:7e:aa:0d:
0d:43:ae:8f:01:fb:11:d6:78:d2:65:63:53:ca:7e:
a8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:65:E2:61:02:EC:D4:BA:E2:0C:3B:73:E9:3E:21:37:15:99:12:71
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c9efb-cba8-4940-9259-2cd3d6eba969/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c9efb-cba8-4940-9259-2cd3d6eba969/1/4WXiYQLs1LriDDtz6T4hNxWZEnE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199763
Signature Algorithm: sha256WithRSAEncryption
38:d9:97:b7:84:7a:2c:15:41:b1:68:3e:7e:85:09:8f:9b:fb:
ed:42:3a:38:4a:f1:eb:80:48:5c:21:40:ec:61:0a:f4:b1:2e:
c7:57:bd:9f:97:4a:8b:62:6e:0e:ce:e9:03:68:fa:e7:de:d6:
4f:3f:a3:63:19:58:f7:4e:d6:97:e2:c7:70:ab:21:51:94:b5:
dc:96:ce:10:48:ce:4f:c4:54:fd:a7:47:42:dc:c8:f7:d3:09:
43:8b:23:09:92:a2:b0:70:62:3a:04:d7:3d:c9:f3:7b:4c:c4:
43:c7:d2:01:f0:67:cb:1d:cd:81:c5:b1:64:29:c7:04:94:4c:
6b:35:46:8e:05:d0:a6:8d:e5:41:14:44:bd:9a:ec:84:ef:ec:
4e:88:a6:b0:a7:0d:71:2c:17:91:0e:9d:0d:0b:80:4f:57:e8:
fc:54:a7:e1:b3:37:b9:3b:85:1c:c7:9a:6c:1d:09:e6:3a:a7:
7f:b2:7d:c6:a8:ef:07:c6:e7:21:67:a8:df:05:25:a9:dd:80:
be:a3:99:22:59:fe:7c:66:42:a8:37:05:c5:c1:2c:28:d4:df:
6f:51:35:3a:eb:d8:3a:fe:6e:21:68:21:0e:65:0c:9c:4f:66:
df:ec:66:e2:aa:45:08:90:fc:07:b7:10:bf:cc:e5:75:6f:17:
7d:fe:29:95
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYzIb+CdGexoDIE4wYeQHYrzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDQzMDI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTY1ZTI2MTAyZWNkNGJhZTIwYzNiNzNlOTNlMjEzNzE1OTkxMjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnHq1RwQo0Xa9En88l3pif8XrY+b
qWxYhiEsxnhHb2es5EclVBydtxlSVkpEIvK8H5r0KH/LZYEDKR57jvY0JIKIbgdf
eIKZ2jjCuKtWTe9ibyWMjQusH9g/o+AIjkDY8TR6W0raPcF2QxvOolPAeIu+HGCY
lyKkC6PT6/4LYcQK3yIlPRkRAEXyTub7ZvdKnj5/zdEA1gIYNCgO/1ptZHY5zlmy
yMy5wrlovWaoL2ve+9aCgh6/m314Z2fmlI56Hoc+xaxUxHdOxsBZKcyFX1LaCoo6
8W6Nrc7+JnRDoN6a6j8xETUyDpcCm1h+qg0NQ66PAfsR1njSZWNTyn6o4QIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFOFl4mEC7NS64gw7c+k+ITcVmRJxMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q3LzljOWVm
Yi1jYmE4LTQ5NDAtOTI1OS0yY2QzZDZlYmE5NjkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDcvOWM5ZWZi
LWNiYTgtNDk0MC05MjU5LTJjZDNkNmViYTk2OS8xLzRXWGlZUUxzMUxyaUREdHo2
VDRoTnhXWkVuRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMMUzANBgkqhkiG9w0BAQsFAAOCAQEAONmXt4R6LBVB
sWg+foUJj5v77UI6OErx64BIXCFA7GEK9LEux1e9n5dKi2JuDs7pA2j6597WTz+j
YxlY907Wl+LHcKshUZS13JbOEEjOT8RU/adHQtzI99MJQ4sjCZKisHBiOgTXPcnz
e0zEQ8fSAfBnyx3NgcWxZCnHBJRMazVGjgXQpo3lQRREvZrshO/sToimsKcNcSwX
kQ6dDQuAT1fo/FSn4bM3uTuFHMeabB0J5jqnf7J9xqjvB8bnIWeo3wUlqd2AvqOZ
Iln+fGZCqDcFxcEsKNTfb1E1OuvYOv5uIWghDmUMnE9m3+xm4qpFCJD8B7cQv8zl
dW8Xff4plQ==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:18:00 2024 by rpki-client on console-ams.rpki-client.org