Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5wVXsySVkhfZJZvs0aBUm2_6n2U.cer
File: 5wVXsySVkhfZJZvs0aBUm2_6n2U.cer (raw, json)
Hash identifier: yP1q5dNvPV6yjbguMJB/n9ssbAP/ojOZHdbMcp4RYMk=
Subject key identifier: E7:05:57:B3:24:95:92:17:D9:25:9B:EC:D1:A0:54:9B:6F:FA:9F:65
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0191CA6645D2BD1FFA0D7487E7B3FF453F48
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 07 Sep 2024 02:53:05 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 39277
IP: 194.117.230.0/23
IP: 195.2.246.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ca:66:45:d2:bd:1f:fa:0d:74:87:e7:b3:ff:45:3f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 7 02:53:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e70557b324959217d9259becd1a0549b6ffa9f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:92:a2:cc:c6:e7:07:bd:ad:37:c3:10:be:21:
d4:1c:d2:57:71:b8:dc:64:97:db:21:d8:ef:29:1f:
0c:fa:99:8b:10:42:0e:04:95:c5:00:31:f1:91:29:
30:48:91:bb:96:ac:c7:11:69:ce:db:97:e9:52:41:
34:92:b2:06:83:c5:a0:0e:f1:1d:9c:6f:32:27:a4:
74:03:79:b9:e4:10:0a:4e:fd:aa:ee:3d:e2:c8:5a:
4a:eb:ec:ee:00:4a:fc:68:fd:f8:81:f4:33:aa:8e:
39:79:83:97:2c:89:9a:ad:0a:6e:3b:03:ab:7e:38:
a5:7e:aa:99:3f:7f:b0:05:64:b5:35:21:09:c2:3e:
8f:e7:fa:0f:0e:a8:7f:2f:26:07:a2:35:53:23:fa:
19:de:04:2d:27:63:ce:d2:f6:db:8a:e2:c0:7c:22:
f1:81:59:d1:d8:bd:b9:15:dd:8c:16:d0:c3:ae:75:
97:fb:0e:9d:e5:88:08:c7:b1:f4:0a:87:d6:71:50:
4f:39:0c:a8:74:fd:7c:5a:4b:eb:42:02:ee:46:e1:
ac:3e:58:d2:05:fc:d3:0e:c5:b2:48:61:4c:89:62:
81:bb:12:99:d2:53:a8:af:b0:02:87:c4:5a:45:7d:
3f:7b:77:a0:7c:f8:d7:cf:d1:2c:92:b3:08:45:d3:
e3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:05:57:B3:24:95:92:17:D9:25:9B:EC:D1:A0:54:9B:6F:FA:9F:65
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.117.230.0/23
195.2.246.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39277
Signature Algorithm: sha256WithRSAEncryption
2a:41:fa:9b:fc:18:c6:85:b4:7b:e1:50:7c:dd:4b:b4:60:67:
6c:fb:ee:6f:cc:8e:4f:03:28:56:8c:1f:99:d0:e8:f9:ee:d4:
a5:73:68:8b:0e:67:e5:23:ff:ec:82:9f:b0:65:e5:1d:e7:45:
00:c1:05:93:df:88:fa:6a:b3:4f:fe:4a:57:c7:31:0b:cb:e3:
3f:dd:f6:b7:25:64:74:a4:23:ed:f0:63:b5:2f:cb:ff:15:80:
f9:9a:72:db:94:43:4d:3e:27:c9:2c:b2:71:c8:82:e5:c1:df:
6e:bf:77:de:5e:c7:80:c5:b4:c8:f3:7f:ac:55:35:3a:4d:c3:
d7:ad:53:b3:78:cf:e9:69:38:3e:d8:eb:62:0d:f9:91:0b:b4:
9c:9d:18:a3:14:3e:81:3f:9a:1e:5d:24:fc:8d:fc:fd:e2:7c:
96:b6:d5:8c:67:aa:c4:18:f8:72:49:0e:9f:92:43:70:6e:56:
37:44:52:bf:95:ac:36:f6:d9:21:b7:a6:2c:f6:bb:af:c5:fb:
4a:c7:2e:29:be:dc:3c:d3:66:bd:4d:24:b8:00:a0:f3:5a:e3:
fe:d3:c2:c1:6c:e3:28:8d:3f:43:b2:12:7a:cc:96:6e:bc:3e:
26:9d:25:c8:66:cd:4e:40:41:4b:0f:87:98:0a:7c:b3:f1:33:
d0:0e:0d:11
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAZHKZkXSvR/6DXSH57P/RT9IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwOTA3MDI1MzA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzA1NTdiMzI0OTU5MjE3ZDkyNTliZWNkMWEwNTQ5YjZmZmE5ZjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpKizMbnB72tN8MQviHUHNJXcbjc
ZJfbIdjvKR8M+pmLEEIOBJXFADHxkSkwSJG7lqzHEWnO25fpUkE0krIGg8WgDvEd
nG8yJ6R0A3m55BAKTv2q7j3iyFpK6+zuAEr8aP34gfQzqo45eYOXLImarQpuOwOr
fjilfqqZP3+wBWS1NSEJwj6P5/oPDqh/LyYHojVTI/oZ3gQtJ2PO0vbbiuLAfCLx
gVnR2L25Fd2MFtDDrnWX+w6d5YgIx7H0CofWcVBPOQyodP18WkvrQgLuRuGsPljS
BfzTDsWySGFMiWKBuxKZ0lOor7ACh8RaRX0/e3egfPjXz9EskrMIRdPjowIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFOcFV7MklZIX2SWb7NGgVJtv+p9lMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E3L2VjZDE0
Yi1kMmE5LTQwZjktYjYzMS1kNWMyMDhlYTdlN2UvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcvZWNkMTRi
LWQyYTktNDBmOS1iNjMxLWQ1YzIwOGVhN2U3ZS8xLzV3VlhzeVNWa2hmWkpadnMw
YUJVbTJfNm4yVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQBwnXmAwQBwwL2MBoGCCsGAQUFBwEIAQH/BAsw
CaAHMAUCAwCZbTANBgkqhkiG9w0BAQsFAAOCAQEAKkH6m/wYxoW0e+FQfN1LtGBn
bPvub8yOTwMoVowfmdDo+e7UpXNoiw5n5SP/7IKfsGXlHedFAMEFk9+I+mqzT/5K
V8cxC8vjP932tyVkdKQj7fBjtS/L/xWA+Zpy25RDTT4nySyycciC5cHfbr933l7H
gMW0yPN/rFU1Ok3D161Ts3jP6Wk4PtjrYg35kQu0nJ0YoxQ+gT+aHl0k/I38/eJ8
lrbVjGeqxBj4ckkOn5JDcG5WN0RSv5WsNvbZIbemLPa7r8X7SscuKb7cPNNmvU0k
uACg81rj/tPCwWzjKI0/Q7ISesyWbrw+Jp0lyGbNTkBBSw+HmAp8s/Ez0A4NEQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:41:08 2024 by rpki-client on console-ams.rpki-client.org