Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8KSyRplUYkr0JKVO8WdhwhWLJIM.cer
File: 8KSyRplUYkr0JKVO8WdhwhWLJIM.cer (raw, json)
Hash identifier: Uo2Stu8iN1m9HCcQdQ5ZeutorfFrtqBBOh4WeW2uyO4=
Subject key identifier: F0:A4:B2:46:99:54:62:4A:F4:24:A5:4E:F1:67:61:C2:15:8B:24:83
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B048B58D09D8BACF82B8CD6F5B49E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/52c916-fd6f-41c0-8f3a-58559a94c426/1/8KSyRplUYkr0JKVO8WdhwhWLJIM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/52c916-fd6f-41c0-8f3a-58559a94c426/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:30:54 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 199522
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:04:8b:58:d0:9d:8b:ac:f8:2b:8c:d6:f5:b4:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f0a4b2469954624af424a54ef16761c2158b2483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b4:de:4b:cd:4c:9c:91:3c:9d:a6:43:71:60:
b6:b0:18:06:d2:06:51:d2:c7:4f:37:f9:af:7d:c7:
ca:a3:53:67:26:4f:1f:66:d5:0f:f3:94:ba:27:c5:
4a:16:94:03:2f:4f:78:5e:36:0c:f0:19:fa:aa:6d:
2e:b8:7a:4d:ea:80:2e:7f:54:37:dd:5d:68:b2:5f:
79:c3:06:f5:1a:bc:59:2f:38:34:3b:d9:bd:d0:52:
96:a3:b3:66:e1:e0:0e:eb:53:76:f4:66:9b:7f:4b:
4a:5a:60:d9:a9:24:31:9f:26:a4:f6:c8:23:a8:2f:
4e:fe:66:9d:2c:44:51:ce:87:5d:4d:be:8f:71:03:
51:00:90:52:07:fd:96:cd:39:32:2d:6f:df:1a:e7:
8f:6c:9b:2c:90:fa:42:b8:1f:56:73:61:0f:68:ba:
e2:58:a0:35:b5:f6:73:f9:f7:e2:ce:c0:20:8e:4b:
e0:0a:ab:05:12:fa:a4:c7:01:a3:ce:1b:16:1d:20:
96:a4:ad:16:e0:49:ec:46:cc:6f:11:67:28:26:cd:
61:73:46:2d:f4:2c:2f:65:db:5a:62:09:19:60:e6:
0f:88:db:3c:df:24:b1:41:0e:50:99:f4:ff:e8:43:
15:00:f7:86:59:41:d4:b9:64:38:56:ac:8d:af:16:
53:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A4:B2:46:99:54:62:4A:F4:24:A5:4E:F1:67:61:C2:15:8B:24:83
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/52c916-fd6f-41c0-8f3a-58559a94c426/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/52c916-fd6f-41c0-8f3a-58559a94c426/1/8KSyRplUYkr0JKVO8WdhwhWLJIM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199522
Signature Algorithm: sha256WithRSAEncryption
25:54:ea:d3:b2:3a:f6:de:09:4a:ea:7f:32:06:40:47:71:5b:
ba:31:4a:57:cd:9b:23:27:2e:f8:8b:52:64:39:e2:31:05:56:
30:18:4b:9e:c0:50:07:7c:07:15:7f:7a:bf:bc:f4:e7:7b:c4:
8f:3d:bf:62:76:9c:b1:c4:6b:f3:25:da:3c:81:c2:a8:52:9d:
80:d1:f4:37:45:de:ef:5c:ac:69:2a:38:34:99:fb:16:11:01:
03:2d:e7:96:74:5e:f6:2d:ca:c8:e0:29:9a:bb:c6:f8:e7:9f:
71:c0:94:5e:f7:17:da:62:30:47:71:07:2f:1f:78:4d:55:ca:
b6:86:5a:b2:5b:51:e0:bc:21:ac:46:b4:46:11:5f:45:68:83:
e0:ff:a2:ed:42:06:2a:a3:52:e2:e1:68:78:68:0b:2e:4c:be:
6b:21:90:0f:81:1e:ef:34:54:0b:f6:fe:72:10:0a:b5:ee:a7:
8d:2d:da:85:3e:86:b0:ce:63:df:f3:74:e6:ef:2f:6b:85:4f:
3b:d5:0f:ae:f0:a4:e9:a7:2a:90:bd:31:c8:f4:74:b1:91:26:
3a:48:cb:1b:e1:d9:1f:c3:2b:8b:38:10:ab:4b:c9:a8:74:2a:
fb:5e:14:cf:ae:2f:21:a3:27:0b:7b:9d:cd:e4:4f:f6:c1:0d:
2c:ed:25:8a
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYzGSwSLWNCdi6z4K4zW9bSeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTgzMDU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMGE0YjI0Njk5NTQ2MjRhZjQyNGE1NGVmMTY3NjFjMjE1OGIyNDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7TeS81MnJE8naZDcWC2sBgG0gZR
0sdPN/mvfcfKo1NnJk8fZtUP85S6J8VKFpQDL094XjYM8Bn6qm0uuHpN6oAuf1Q3
3V1osl95wwb1GrxZLzg0O9m90FKWo7Nm4eAO61N29Gabf0tKWmDZqSQxnyak9sgj
qC9O/madLERRzoddTb6PcQNRAJBSB/2WzTkyLW/fGuePbJsskPpCuB9Wc2EPaLri
WKA1tfZz+ffizsAgjkvgCqsFEvqkxwGjzhsWHSCWpK0W4EnsRsxvEWcoJs1hc0Yt
9CwvZdtaYgkZYOYPiNs83ySxQQ5QmfT/6EMVAPeGWUHUuWQ4VqyNrxZTnQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFPCkskaZVGJK9CSlTvFnYcIViySDMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjLzUyYzkx
Ni1mZDZmLTQxYzAtOGYzYS01ODU1OWE5NGM0MjYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMvNTJjOTE2
LWZkNmYtNDFjMC04ZjNhLTU4NTU5YTk0YzQyNi8xLzhLU3lScGxVWWtyMEpLVk84
V2Rod2hXTEpJTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMLYjANBgkqhkiG9w0BAQsFAAOCAQEAJVTq07I69t4J
Sup/MgZAR3FbujFKV82bIycu+ItSZDniMQVWMBhLnsBQB3wHFX96v7z053vEjz2/
YnacscRr8yXaPIHCqFKdgNH0N0Xe71ysaSo4NJn7FhEBAy3nlnRe9i3KyOApmrvG
+OefccCUXvcX2mIwR3EHLx94TVXKtoZasltR4LwhrEa0RhFfRWiD4P+i7UIGKqNS
4uFoeGgLLky+ayGQD4Ee7zRUC/b+chAKte6njS3ahT6GsM5j3/N05u8va4VPO9UP
rvCk6acqkL0xyPR0sZEmOkjLG+HZH8MrizgQq0vJqHQq+14Uz64vIaMnC3udzeRP
9sENLO0lig==
-----END CERTIFICATE-----
Generated at Fri Apr 19 23:06:46 2024 by rpki-client on console-ams.rpki-client.org