Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87tROvtQTgpc3KysWGRGJw5TqyU.cer
File: 87tROvtQTgpc3KysWGRGJw5TqyU.cer (raw, json)
Hash identifier: TPLoGX9z62nC/OFW196EerkZSwZMTIogSthKQT2sihU=
Subject key identifier: F3:BB:51:3A:FB:50:4E:0A:5C:DC:AC:AC:58:64:46:27:0E:53:AB:25
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01925B58EE2E4BB25A91322D43B6FEE723FC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dd/ba9bcf-7dda-45b5-b7aa-77abd7cf8d6f/1/87tROvtQTgpc3KysWGRGJw5TqyU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dd/ba9bcf-7dda-45b5-b7aa-77abd7cf8d6f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 05 Oct 2024 06:23:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 214127
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Dec 2024 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:5b:58:ee:2e:4b:b2:5a:91:32:2d:43:b6:fe:e7:23:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 5 06:23:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3bb513afb504e0a5cdcacac586446270e53ab25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:92:c6:af:1c:df:e7:46:0f:f8:c3:51:48:4a:
db:6b:bb:db:ac:65:96:1b:10:cb:62:67:b2:6a:ca:
98:4d:96:8c:76:a3:4a:2b:e7:ed:75:c2:1c:a2:ad:
42:12:1c:da:48:e8:45:b3:ab:55:14:80:dc:9d:45:
5b:1b:d5:a4:26:2f:83:b5:2b:b5:a7:ba:a4:01:1f:
a7:71:d4:b0:88:5d:2c:73:4a:bc:1f:8d:71:80:f1:
3e:9a:98:a5:0c:e4:2d:d1:b7:0c:4d:4a:aa:46:10:
e0:70:ae:23:1f:e7:04:d3:79:ce:c4:78:ca:8a:13:
14:7b:09:a5:56:d1:ed:6a:8b:37:b8:a8:fc:56:8e:
a7:be:23:ce:57:98:31:dd:3a:f4:0c:ae:07:e4:50:
c1:81:a7:00:75:d0:80:88:99:75:ee:d3:14:cb:a5:
61:70:58:29:1b:cd:c7:39:83:fd:37:c5:e5:8f:17:
ab:0e:39:52:75:a7:f9:e6:96:61:0a:ec:a3:28:df:
9e:34:71:70:ff:a3:0a:e9:2e:f8:14:1d:50:02:0e:
cc:0b:b4:68:38:cd:cd:b8:bf:f4:f2:de:c7:d9:9d:
f9:52:14:40:11:b6:e0:e2:c8:b6:1c:b1:1e:16:26:
a5:30:7a:84:99:c1:34:df:e7:77:d8:13:6d:4a:04:
2e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:BB:51:3A:FB:50:4E:0A:5C:DC:AC:AC:58:64:46:27:0E:53:AB:25
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ba9bcf-7dda-45b5-b7aa-77abd7cf8d6f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ba9bcf-7dda-45b5-b7aa-77abd7cf8d6f/1/87tROvtQTgpc3KysWGRGJw5TqyU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214127
Signature Algorithm: sha256WithRSAEncryption
56:a2:1a:2f:3e:1e:53:13:1e:3d:19:fc:f9:d1:3b:83:de:e1:
42:a4:c3:7a:c9:cd:76:69:79:68:08:21:e0:12:cf:45:f8:04:
c6:01:a0:d4:55:a2:39:53:a2:6a:5e:3d:35:03:47:9b:09:45:
f8:92:9d:7a:11:fa:f9:79:a5:f9:b9:10:d6:a7:58:f1:fc:38:
85:51:bf:59:39:b6:04:58:c4:22:d9:5f:31:10:0a:fa:c0:22:
e0:c8:7b:10:26:06:0a:9e:c7:c1:23:0d:09:57:a5:40:89:96:
8a:b4:aa:90:d8:c8:1d:2b:3c:7c:e2:5e:50:44:43:62:a3:cf:
31:39:74:7a:c1:01:53:ad:7c:bd:b7:7a:c3:cb:20:25:75:3b:
15:ec:e3:0b:1f:f8:b4:5b:18:ad:6b:f2:40:f4:bf:b2:6d:e1:
b1:b4:4e:94:c4:82:bd:64:1c:8d:59:66:d6:5d:ef:41:e5:90:
57:18:b3:70:80:a3:6c:32:cb:42:75:ab:a9:1a:6a:de:62:70:
c2:e7:50:79:7e:7b:39:1b:bc:72:ce:3e:39:08:cf:32:9e:10:
c5:5e:7c:e0:0f:19:59:38:b1:c9:4b:73:57:e2:21:66:60:1e:
ec:20:61:a3:5b:da:25:46:be:bc:0c:21:15:22:fc:a1:5a:16:
a0:cb:88:99
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZJbWO4uS7JakTItQ7b+5yP8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQxMDA1MDYyMzI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmM2JiNTEzYWZiNTA0ZTBhNWNkY2FjYWM1ODY0NDYyNzBlNTNhYjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8JLGrxzf50YP+MNRSErba7vbrGWW
GxDLYmeyasqYTZaMdqNKK+ftdcIcoq1CEhzaSOhFs6tVFIDcnUVbG9WkJi+DtSu1
p7qkAR+ncdSwiF0sc0q8H41xgPE+mpilDOQt0bcMTUqqRhDgcK4jH+cE03nOxHjK
ihMUewmlVtHtaos3uKj8Vo6nviPOV5gx3Tr0DK4H5FDBgacAddCAiJl17tMUy6Vh
cFgpG83HOYP9N8XljxerDjlSdaf55pZhCuyjKN+eNHFw/6MK6S74FB1QAg7MC7Ro
OM3NuL/08t7H2Z35UhRAEbbg4si2HLEeFialMHqEmcE03+d32BNtSgQucwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFPO7UTr7UE4KXNysrFhkRicOU6slMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RkL2JhOWJj
Zi03ZGRhLTQ1YjUtYjdhYS03N2FiZDdjZjhkNmYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGQvYmE5YmNm
LTdkZGEtNDViNS1iN2FhLTc3YWJkN2NmOGQ2Zi8xLzg3dFJPdnRRVGdwYzNLeXNX
R1JHSnc1VHF5VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNEbzANBgkqhkiG9w0BAQsFAAOCAQEAVqIaLz4eUxMe
PRn8+dE7g97hQqTDesnNdml5aAgh4BLPRfgExgGg1FWiOVOial49NQNHmwlF+JKd
ehH6+Xml+bkQ1qdY8fw4hVG/WTm2BFjEItlfMRAK+sAi4Mh7ECYGCp7HwSMNCVel
QImWirSqkNjIHSs8fOJeUERDYqPPMTl0esEBU618vbd6w8sgJXU7FezjCx/4tFsY
rWvyQPS/sm3hsbROlMSCvWQcjVlm1l3vQeWQVxizcICjbDLLQnWrqRpq3mJwwudQ
eX57ORu8cs4+OQjPMp4QxV584A8ZWTixyUtzV+IhZmAe7CBho1vaJUa+vAwhFSL8
oVoWoMuImQ==
-----END CERTIFICATE-----
Generated at Thu Dec 26 17:26:45 2024 by rpki-client on console-ams.rpki-client.org