Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5kUwj3KJ_AgEwKaiRh5eTe8jFsE.cer
File: 5kUwj3KJ_AgEwKaiRh5eTe8jFsE.cer (raw, json)
Hash identifier: 5NYHLlbbKkg1VUeAEMtCoZ10XLioInzrFb/gbP9qRTY=
Subject key identifier: E6:45:30:8F:72:89:FC:08:04:C0:A6:A2:46:1E:5E:4D:EF:23:16:C1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E5B4858B7B2BE792031F198DCA6A9F8E8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/aa/3db02b-95f3-49c8-b4ed-d5bf63ec0985/1/5kUwj3KJ_AgEwKaiRh5eTe8jFsE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/aa/3db02b-95f3-49c8-b4ed-d5bf63ec0985/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 20 Mar 2024 09:54:11 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2a12:b280::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:5b:48:58:b7:b2:be:79:20:31:f1:98:dc:a6:a9:f8:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 20 09:54:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e645308f7289fc0804c0a6a2461e5e4def2316c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c0:65:f0:e5:5a:1b:62:3a:46:2a:22:bd:ef:
33:ee:13:11:63:90:59:8a:51:78:5c:bc:d0:31:bb:
0b:b8:c1:49:c5:53:39:9f:0e:9e:f1:4d:90:30:fc:
a5:71:a9:ad:8d:86:76:70:1c:91:f8:84:76:d9:ae:
08:bf:49:ab:e9:b4:15:7f:ef:d4:03:0a:e4:f3:c0:
87:c3:f9:f9:0e:90:21:42:23:6b:18:3c:17:2a:42:
de:53:50:af:21:8d:40:66:5e:72:ed:ae:14:0d:b9:
92:86:b3:fd:26:01:16:bc:6c:55:18:a7:8d:8e:a2:
04:97:f0:1a:af:46:c0:5f:ad:9e:0d:a8:9e:df:0e:
88:c2:32:7a:b3:40:29:d2:87:cf:34:aa:6f:ee:aa:
04:9e:10:02:3a:c5:1b:3d:eb:f3:52:bb:73:7f:26:
af:7b:e3:c8:b4:4f:b8:37:1a:69:49:8f:62:90:31:
4c:0a:e5:7a:05:b4:6f:b0:c2:04:c9:22:95:3c:2a:
ee:02:d6:e7:6f:7f:09:c2:c6:ed:27:67:aa:77:de:
76:ef:c5:cd:0f:59:58:1c:c3:ef:19:33:2b:be:2e:
54:2f:5b:91:0d:c3:81:2a:f5:47:38:4a:aa:24:51:
58:63:e4:80:a5:2a:8d:58:55:3e:5b:36:7c:56:a4:
a0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:45:30:8F:72:89:FC:08:04:C0:A6:A2:46:1E:5E:4D:EF:23:16:C1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/3db02b-95f3-49c8-b4ed-d5bf63ec0985/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/3db02b-95f3-49c8-b4ed-d5bf63ec0985/1/5kUwj3KJ_AgEwKaiRh5eTe8jFsE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:b280::/29
Signature Algorithm: sha256WithRSAEncryption
2c:eb:19:54:63:d7:a1:e5:62:4d:51:00:01:a1:06:c6:0f:84:
bc:74:4d:4c:ff:e4:82:1f:a3:8f:ed:15:b8:10:1f:02:53:af:
2c:ef:bf:85:c0:dd:ea:ce:99:b4:d5:87:5d:96:4a:ec:63:07:
3f:d9:b7:96:4c:f1:b0:d5:2e:f7:9a:2c:4f:ca:a4:68:6a:41:
ab:f8:ff:e5:ac:18:e3:ff:d8:0c:9c:f7:74:b3:80:5a:30:22:
72:d9:fc:44:d9:3c:35:b7:5e:e4:be:7b:fd:ef:68:5e:a1:1b:
bb:5d:bd:27:4b:bc:2a:c6:2b:5a:94:dc:0e:6b:be:38:b2:d8:
2c:5f:7f:75:6a:a3:c3:db:7e:aa:f2:ce:5c:f1:05:5b:b0:98:
c3:a5:5a:82:2d:19:72:77:db:9c:24:a9:fe:a7:26:9e:1a:03:
45:f3:72:76:77:cf:19:b6:cd:1f:56:89:ee:14:f5:09:24:0b:
c7:33:24:e0:b6:c8:cf:3a:2e:aa:3d:6f:47:77:46:1e:5c:64:
4f:ba:db:83:76:f7:f9:97:9e:bd:30:9d:12:9e:b6:a9:2d:ce:
e6:8e:80:d0:73:53:0c:dd:bd:c5:6c:11:fd:36:11:e4:a0:5b:
93:8b:42:4f:73:ab:12:d6:de:1b:e5:67:90:95:31:d7:e5:e9:
99:ad:db:97
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgISAY5bSFi3sr55IDHxmNymqfjoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMzIwMDk1NDExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjQ1MzA4ZjcyODlmYzA4MDRjMGE2YTI0NjFlNWU0ZGVmMjMxNmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsBl8OVaG2I6Rioive8z7hMRY5BZ
ilF4XLzQMbsLuMFJxVM5nw6e8U2QMPylcamtjYZ2cByR+IR22a4Iv0mr6bQVf+/U
Awrk88CHw/n5DpAhQiNrGDwXKkLeU1CvIY1AZl5y7a4UDbmShrP9JgEWvGxVGKeN
jqIEl/Aar0bAX62eDaie3w6IwjJ6s0Ap0ofPNKpv7qoEnhACOsUbPevzUrtzfyav
e+PItE+4NxppSY9ikDFMCuV6BbRvsMIEySKVPCruAtbnb38JwsbtJ2eqd95278XN
D1lYHMPvGTMrvi5UL1uRDcOBKvVHOEqqJFFYY+SApSqNWFU+WzZ8VqSg/wIDAQAB
o4IChTCCAoEwHQYDVR0OBBYEFOZFMI9yifwIBMCmokYeXk3vIxbBMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FhLzNkYjAy
Yi05NWYzLTQ5YzgtYjRlZC1kNWJmNjNlYzA5ODUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWEvM2RiMDJi
LTk1ZjMtNDljOC1iNGVkLWQ1YmY2M2VjMDk4NS8xLzVrVXdqM0tKX0FnRXdLYWlS
aDVlVGU4akZzRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUDKhKygDANBgkqhkiG9w0BAQsFAAOCAQEALOsZ
VGPXoeViTVEAAaEGxg+EvHRNTP/kgh+jj+0VuBAfAlOvLO+/hcDd6s6ZtNWHXZZK
7GMHP9m3lkzxsNUu95osT8qkaGpBq/j/5awY4//YDJz3dLOAWjAictn8RNk8Nbde
5L57/e9oXqEbu129J0u8KsYrWpTcDmu+OLLYLF9/dWqjw9t+qvLOXPEFW7CYw6Va
gi0ZcnfbnCSp/qcmnhoDRfNydnfPGbbNH1aJ7hT1CSQLxzMk4LbIzzouqj1vR3dG
HlxkT7rbg3b3+ZeevTCdEp62qS3O5o6A0HNTDN29xWwR/TYR5KBbk4tCT3OrEtbe
G+VnkJUx1+Xpma3blw==
-----END CERTIFICATE-----
Generated at Fri May 3 11:09:32 2024 by rpki-client on console-ams.rpki-client.org