Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51MPsdgjZlLNpjo9EFdK_HUpw9c.cer
File: 51MPsdgjZlLNpjo9EFdK_HUpw9c.cer (raw, json)
Hash identifier: FFkpiP530Qq95UQ7NDqjPw57dLOZ9NIxARB+CY6zldo=
Subject key identifier: E7:53:0F:B1:D8:23:66:52:CD:A6:3A:3D:10:57:4A:FC:75:29:C3:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018EC1564722E700718DF16767C1B421A6E9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/03/c4e5e9-1eee-442e-a57c-a8e2315e6cce/1/51MPsdgjZlLNpjo9EFdK_HUpw9c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/03/c4e5e9-1eee-442e-a57c-a8e2315e6cce/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 09 Apr 2024 05:30:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 205455
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c1:56:47:22:e7:00:71:8d:f1:67:67:c1:b4:21:a6:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 9 05:30:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e7530fb1d8236652cda63a3d10574afc7529c3d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6b:86:ae:b7:08:f0:52:e8:f2:22:a2:ab:9a:
53:4f:dc:80:ea:6e:de:8b:e1:cc:67:42:54:44:1f:
9f:b5:b9:0b:f9:a1:58:e4:d3:01:8f:82:31:ee:11:
05:6d:96:bc:3a:cb:a0:17:69:25:bb:90:53:d7:d5:
76:5d:df:de:6d:e6:47:e0:58:35:7f:b5:37:b9:7a:
07:3a:c4:93:2d:a3:77:10:ea:b1:07:b6:6d:99:1e:
1c:e3:9f:fb:90:dd:90:36:fd:75:bd:7b:15:bf:56:
6b:6d:3d:ea:1c:27:ca:80:cb:4f:63:1a:91:f4:c9:
21:f6:15:10:bc:3a:31:b5:37:da:32:da:62:45:78:
89:b9:cb:6e:9b:f3:1d:64:2e:ac:e9:7b:5e:7a:4e:
57:75:77:ac:2e:da:97:23:e8:f9:aa:e5:87:10:e5:
db:6a:1a:1b:20:15:41:e8:ed:26:1f:5a:49:73:55:
a1:72:52:cc:84:f8:3f:95:ec:ad:b5:93:ed:9c:fd:
21:f7:fe:15:53:2a:be:6e:b3:8f:90:bc:a0:03:2d:
9e:d3:6f:30:13:34:ab:fa:a3:52:ff:5b:78:a7:56:
62:cd:bb:0e:cb:a7:e1:a0:28:af:85:5d:0e:6f:74:
db:38:77:58:b9:8b:e5:03:7d:91:b1:1f:92:e5:da:
85:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:53:0F:B1:D8:23:66:52:CD:A6:3A:3D:10:57:4A:FC:75:29:C3:D7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/c4e5e9-1eee-442e-a57c-a8e2315e6cce/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/c4e5e9-1eee-442e-a57c-a8e2315e6cce/1/51MPsdgjZlLNpjo9EFdK_HUpw9c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205455
Signature Algorithm: sha256WithRSAEncryption
62:76:3f:44:60:8d:3b:f8:a2:40:16:5e:59:c6:85:81:ec:04:
9f:03:b7:7c:9f:8b:76:95:a9:10:52:62:5d:32:ee:f4:2f:2e:
2c:f6:fe:0f:62:47:8c:90:05:50:ca:84:a6:36:54:b7:cd:ac:
cc:bb:27:fa:b6:b4:71:51:13:50:7b:c0:4d:85:19:05:b1:b5:
f6:24:ef:f9:9d:f2:57:db:78:86:7b:ab:dc:0d:bf:eb:46:1c:
79:fc:37:01:b0:76:bb:73:5b:d7:4a:58:17:23:28:bd:97:39:
75:4c:82:21:7b:21:43:51:24:09:bd:17:29:a4:f7:d8:9a:26:
35:cc:ca:8b:25:49:79:dd:7a:e8:15:ae:3e:07:30:a9:ec:79:
84:6e:84:96:43:14:04:bb:a2:68:64:43:fc:d1:0d:0e:20:a7:
a0:84:76:3b:2f:ff:6c:ad:24:e0:b0:0d:2d:91:9d:5f:30:92:
70:f2:59:b8:95:1c:30:7d:f5:e1:9c:e0:24:f2:bf:c3:d1:2b:
8b:42:c5:61:20:b2:4d:c7:33:8f:a3:ad:7b:64:52:77:81:29:
b4:94:fe:0c:1b:54:fa:21:fd:11:81:e3:b5:fd:5e:c0:81:41:
51:c1:d0:53:06:8e:91:af:4d:9a:7b:dc:09:e9:56:35:f5:0d:
cd:b0:fb:2e
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAY7BVkci5wBxjfFnZ8G0IabpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNDA5MDUzMDQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzUzMGZiMWQ4MjM2NjUyY2RhNjNhM2QxMDU3NGFmYzc1MjljM2Q3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGuGrrcI8FLo8iKiq5pTT9yA6m7e
i+HMZ0JURB+ftbkL+aFY5NMBj4Ix7hEFbZa8OsugF2klu5BT19V2Xd/ebeZH4Fg1
f7U3uXoHOsSTLaN3EOqxB7ZtmR4c45/7kN2QNv11vXsVv1ZrbT3qHCfKgMtPYxqR
9Mkh9hUQvDoxtTfaMtpiRXiJuctum/MdZC6s6Xteek5XdXesLtqXI+j5quWHEOXb
ahobIBVB6O0mH1pJc1WhclLMhPg/leyttZPtnP0h9/4VUyq+brOPkLygAy2e028w
EzSr+qNS/1t4p1ZizbsOy6fhoCivhV0Ob3TbOHdYuYvlA32RsR+S5dqFTQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFOdTD7HYI2ZSzaY6PRBXSvx1KcPXMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAzL2M0ZTVl
OS0xZWVlLTQ0MmUtYTU3Yy1hOGUyMzE1ZTZjY2UvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMvYzRlNWU5
LTFlZWUtNDQyZS1hNTdjLWE4ZTIzMTVlNmNjZS8xLzUxTVBzZGdqWmxMTnBqbzlF
RmRLX0hVcHc5Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMijzANBgkqhkiG9w0BAQsFAAOCAQEAYnY/RGCNO/ii
QBZeWcaFgewEnwO3fJ+LdpWpEFJiXTLu9C8uLPb+D2JHjJAFUMqEpjZUt82szLsn
+ra0cVETUHvATYUZBbG19iTv+Z3yV9t4hnur3A2/60Ycefw3AbB2u3Nb10pYFyMo
vZc5dUyCIXshQ1EkCb0XKaT32JomNczKiyVJed166BWuPgcwqex5hG6ElkMUBLui
aGRD/NENDiCnoIR2Oy//bK0k4LANLZGdXzCScPJZuJUcMH314ZzgJPK/w9Eri0LF
YSCyTcczj6Ote2RSd4EptJT+DBtU+iH9EYHjtf1ewIFBUcHQUwaOka9NmnvcCelW
NfUNzbD7Lg==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:42:04 2024 by rpki-client on console-fra.rpki-client.org