Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5zcPsJ5SI60eRI9MDxYv6plae1Y.cer
File: 5zcPsJ5SI60eRI9MDxYv6plae1Y.cer (raw, json)
Hash identifier: GlgzSQPqUebGCoGCBp8mkF731qXJIZ7ILNCRN2QpCQ4=
Subject key identifier: E7:37:0F:B0:9E:52:23:AD:1E:44:8F:4C:0F:16:2F:EA:99:5A:7B:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB563A1078B255762316E72289883B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:30:03 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 34521
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:56:3a:10:78:b2:55:76:23:16:e7:22:89:88:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e7370fb09e5223ad1e448f4c0f162fea995a7b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:94:5b:85:d2:b3:d5:59:9f:03:ef:a3:ff:da:
a7:74:74:09:ed:1a:45:ce:de:76:fd:a7:f8:3c:23:
cf:92:84:16:3a:92:92:4e:99:d4:5b:05:52:2c:ce:
0d:01:69:74:3f:0c:0d:4e:53:c9:d9:b3:17:69:dd:
b8:90:5b:b3:9f:24:5e:67:b2:e9:db:62:20:cc:36:
1e:3e:75:e9:d2:f9:fa:80:ab:4e:01:28:1c:fb:fc:
e1:f7:cf:0f:88:e0:ea:78:f5:2e:eb:e6:fb:24:ba:
b0:4a:e3:ef:1c:6d:a6:8c:ca:18:e2:03:a7:28:5e:
3d:ca:bf:32:7d:bc:14:d6:3e:61:75:4d:80:a4:39:
a6:92:c9:bd:9b:60:79:a2:43:1d:46:f2:88:99:63:
c4:09:27:3f:17:5a:b3:37:70:7f:00:10:a4:a0:f3:
3a:64:db:eb:9f:8f:b9:8b:4d:65:db:fb:84:94:1d:
6e:87:a9:83:1d:6e:d7:1b:97:37:3d:fb:a4:8c:73:
82:47:43:e3:90:d1:e0:d9:de:c5:69:dd:e4:77:00:
cc:d5:79:71:65:83:59:1f:37:83:c3:f9:8b:2e:3d:
40:95:b4:9e:a6:31:e4:af:fe:d6:f6:17:8c:f8:a4:
79:6d:25:f4:90:66:4a:d4:80:ac:81:92:d4:0c:67:
82:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:37:0F:B0:9E:52:23:AD:1E:44:8F:4C:0F:16:2F:EA:99:5A:7B:56
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34521
Signature Algorithm: sha256WithRSAEncryption
71:d5:c7:4f:21:4f:1b:5a:92:87:e3:6a:b4:d7:41:c9:c2:d2:
90:f7:3f:91:4d:58:6a:28:2a:f9:9b:15:8f:5e:0f:32:00:35:
71:a7:95:47:6f:27:62:eb:fd:89:ef:d5:5b:3c:32:8d:72:9f:
79:19:d7:9e:1d:61:9b:f3:86:6c:d0:c1:02:ac:5c:93:70:e1:
b6:b7:85:81:91:4a:03:3e:91:80:c0:fd:17:8a:54:d3:4e:21:
03:27:43:c1:e1:56:3a:36:65:16:21:9a:4b:7d:0b:33:c4:1c:
2f:30:ce:cd:64:89:44:83:12:ae:64:5b:c3:2a:1a:ad:34:14:
7d:4a:3a:41:d2:99:af:a7:3d:bf:02:74:43:04:fd:8b:8c:02:
ac:46:84:49:3e:87:ae:ef:87:c6:59:27:5a:bd:b2:4b:48:2e:
a7:e1:cc:6c:cd:87:3c:fc:e3:43:3f:1c:ed:4d:27:80:c2:b1:
d1:f3:91:53:76:b3:7e:06:da:16:84:4e:4b:e7:f2:2d:8c:d1:
fa:2d:91:31:eb:fb:ac:6b:bd:1f:ed:72:4b:ad:b3:a6:8a:59:
a3:40:15:5e:50:5c:63:cb:c0:9b:b2:e0:79:6b:29:d7:6d:6a:
bc:73:1d:43:56:52:f1:bf:18:22:52:4d:ce:56:37:29:16:74:
12:71:bc:5d
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYzC21Y6EHiyVXYjFuciiYg7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDIzMDAzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzM3MGZiMDllNTIyM2FkMWU0NDhmNGMwZjE2MmZlYTk5NWE3YjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5RbhdKz1VmfA++j/9qndHQJ7RpF
zt52/af4PCPPkoQWOpKSTpnUWwVSLM4NAWl0PwwNTlPJ2bMXad24kFuznyReZ7Lp
22IgzDYePnXp0vn6gKtOASgc+/zh988PiODqePUu6+b7JLqwSuPvHG2mjMoY4gOn
KF49yr8yfbwU1j5hdU2ApDmmksm9m2B5okMdRvKImWPECSc/F1qzN3B/ABCkoPM6
ZNvrn4+5i01l2/uElB1uh6mDHW7XG5c3PfukjHOCR0PjkNHg2d7Fad3kdwDM1Xlx
ZYNZHzeDw/mLLj1AlbSepjHkr/7W9heM+KR5bSX0kGZK1ICsgZLUDGeCAQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFOc3D7CeUiOtHkSPTA8WL+qZWntWMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg4LzhmMjI5
My03ZGJhLTQzN2ItYWY4NS05N2UzNTVlNTFlZjMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODgvOGYyMjkz
LTdkYmEtNDM3Yi1hZjg1LTk3ZTM1NWU1MWVmMy8xLzV6Y1BzSjVTSTYwZVJJOU1E
eFl2NnBsYWUxWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwCG2TANBgkqhkiG9w0BAQsFAAOCAQEAcdXHTyFPG1qS
h+NqtNdBycLSkPc/kU1Yaigq+ZsVj14PMgA1caeVR28nYuv9ie/VWzwyjXKfeRnX
nh1hm/OGbNDBAqxck3DhtreFgZFKAz6RgMD9F4pU004hAydDweFWOjZlFiGaS30L
M8QcLzDOzWSJRIMSrmRbwyoarTQUfUo6QdKZr6c9vwJ0QwT9i4wCrEaEST6Hru+H
xlknWr2yS0gup+HMbM2HPPzjQz8c7U0ngMKx0fORU3azfgbaFoROS+fyLYzR+i2R
Mev7rGu9H+1yS62zpopZo0AVXlBcY8vAm7LgeWsp121qvHMdQ1ZS8b8YIlJNzlY3
KRZ0EnG8XQ==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:43:20 2024 by rpki-client on console-fra.rpki-client.org