Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
File: 7VKTzUpieoRq7WDKf7XVqQGarlE.cer (raw, json)
Hash identifier: Kww7SxzHklXFiN0MsbfDStK9cX/iH4JbS4LlhXyPWJo=
Subject key identifier: ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BB977E8F182C7081E5F92FAFA31754
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:32:43 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 157.27.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:97:7e:8f:18:2c:70:81:e5:f9:2f:af:a3:17:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:32:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed5293cd4a627a846aed60ca7fb5d5a9019aae51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d1:17:97:2f:bd:d0:b9:ea:b5:ed:9d:dc:4a:
7f:25:0b:eb:fa:5e:45:dd:c6:a4:75:01:5f:b2:91:
72:f6:14:20:f2:93:89:1a:24:48:74:21:9b:99:8e:
6a:0c:ce:33:c6:cf:ef:b9:f6:e1:6b:dc:36:45:58:
5e:4c:dc:58:7a:cf:62:68:88:20:9e:2d:50:38:8f:
9c:09:8d:8e:64:2d:b4:34:da:ad:80:46:ca:58:a6:
f2:89:2d:c3:4c:b5:b3:3d:fa:0b:ee:7b:8e:ba:bb:
46:d2:fa:6f:08:d8:7b:73:9b:f9:74:f2:6c:75:d3:
ea:ac:f4:f5:dc:e3:93:5c:a9:b3:5e:39:d6:2d:36:
77:5d:d8:15:1a:f8:94:4c:9d:90:1e:d7:cb:a4:dd:
3e:66:dc:95:a6:df:c7:20:6a:d9:8d:94:27:de:1f:
9a:eb:ea:de:d6:1e:0b:49:2b:37:c5:3e:7f:9f:20:
a8:48:6d:a2:bf:56:2b:e1:c6:d5:86:b3:d4:3a:b2:
4e:a0:a1:9d:aa:e4:6a:cf:b3:f1:01:1b:e1:f3:88:
d1:da:5c:72:f1:05:41:2b:bf:8d:66:59:60:22:26:
8b:ef:95:5e:f2:d9:c0:c1:b0:a3:f0:c5:38:6a:93:
54:d3:a4:9d:28:ec:65:76:c3:78:89:5c:4e:b3:7c:
53:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.27.0.0/16
Signature Algorithm: sha256WithRSAEncryption
55:7a:fd:0a:2a:a3:a7:13:c7:65:74:78:f2:63:6f:1e:b5:55:
99:d0:1a:ce:bd:b9:62:be:dd:e5:da:6f:20:18:a3:dd:bd:f1:
95:3a:1a:f3:42:0d:31:61:85:41:da:df:39:28:c4:84:7f:17:
15:0d:01:c8:97:40:95:8b:43:00:e0:26:b4:eb:7e:01:b4:d8:
b4:2c:83:93:ab:64:c0:79:be:68:e5:38:2b:2e:f6:73:3e:11:
e5:58:90:6f:0e:3c:30:40:99:fa:6d:45:ad:67:7c:57:dd:bb:
6d:d2:29:2c:fa:a5:f4:51:00:be:8a:2b:f8:69:6c:b7:be:e9:
4a:40:5b:87:b5:c6:3d:02:f2:b7:ce:2a:ae:ca:ba:7c:77:be:
da:62:5d:79:10:90:9b:4f:54:0d:2b:d2:cb:64:d8:45:8d:60:
45:35:d0:30:9d:b5:e7:dd:f5:e2:59:50:18:24:65:1f:9d:2e:
87:5d:8b:9d:c5:c7:4b:c8:f9:12:90:a1:c8:38:bd:6e:74:83:
d3:5d:49:e8:d7:66:9b:cc:2f:d4:7e:be:c3:9a:f0:b9:e1:7d:
45:4f:44:8a:b3:54:a9:a5:c5:e2:70:2e:24:82:c7:12:92:64:
53:ef:ab:86:0c:e9:94:2c:e3:e5:1f:bd:d2:56:17:19:71:3d:
81:7a:2d:20
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgISAYzJu5d+jxgscIHl+S+voxdUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTAzMjQzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDUyOTNjZDRhNjI3YTg0NmFlZDYwY2E3ZmI1ZDVhOTAxOWFhZTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9EXly+90Lnqte2d3Ep/JQvr+l5F
3cakdQFfspFy9hQg8pOJGiRIdCGbmY5qDM4zxs/vufbha9w2RVheTNxYes9iaIgg
ni1QOI+cCY2OZC20NNqtgEbKWKbyiS3DTLWzPfoL7nuOurtG0vpvCNh7c5v5dPJs
ddPqrPT13OOTXKmzXjnWLTZ3XdgVGviUTJ2QHtfLpN0+ZtyVpt/HIGrZjZQn3h+a
6+re1h4LSSs3xT5/nyCoSG2iv1Yr4cbVhrPUOrJOoKGdquRqz7PxARvh84jR2lxy
8QVBK7+NZllgIiaL75Ve8tnAwbCj8MU4apNU06SdKOxldsN4iVxOs3xT5wIDAQAB
o4ICgzCCAn8wHQYDVR0OBBYEFO1Sk81KYnqEau1gyn+11akBmq5RMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUyLzIwMjlh
OS00Mzk2LTQ3MTctYWIwNS1lMjQzMzZlYzhhMDgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTIvMjAyOWE5
LTQzOTYtNDcxNy1hYjA1LWUyNDMzNmVjOGEwOC8xLzdWS1R6VXBpZW9ScTdXREtm
N1hWcVFHYXJsRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF
BwEHAQH/BA8wDTALBAIAATAFAwMAnRswDQYJKoZIhvcNAQELBQADggEBAFV6/Qoq
o6cTx2V0ePJjbx61VZnQGs69uWK+3eXabyAYo9298ZU6GvNCDTFhhUHa3zkoxIR/
FxUNAciXQJWLQwDgJrTrfgG02LQsg5OrZMB5vmjlOCsu9nM+EeVYkG8OPDBAmfpt
Ra1nfFfdu23SKSz6pfRRAL6KK/hpbLe+6UpAW4e1xj0C8rfOKq7Kunx3vtpiXXkQ
kJtPVA0r0stk2EWNYEU10DCdtefd9eJZUBgkZR+dLoddi53Fx0vI+RKQocg4vW50
g9NdSejXZpvML9R+vsOa8LnhfUVPRIqzVKmlxeJwLiSCxxKSZFPvq4YM6ZQs4+Uf
vdJWFxlxPYF6LSA=
-----END CERTIFICATE-----
Generated at Fri Apr 26 11:43:49 2024 by rpki-client on console-ams.rpki-client.org