Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer
File: 8dBXL-cpkb0yhUuscWZ269rSKs4.cer (raw, json)
Hash identifier: 0XvfVgZvMtpJnRZPm88iNeqXe0+YTV64WnRoNRamqEQ=
Subject key identifier: F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0191328CA34051BB7E34047CE2B4C6264073
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 08 Aug 2024 15:12:43 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 48280
AS: 52112
IP: 193.34.203.128/26
IP: 2001:7f8:159::/48
IP: 2a13:9640::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:32:8c:a3:40:51:bb:7e:34:04:7c:e2:b4:c6:26:40:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 8 15:12:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1d0572fe72991bd32854bac716676ebdad22ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f3:7f:d1:8e:19:39:9e:7b:c4:68:de:24:a3:
a0:ef:80:1b:1c:fd:14:50:ee:0b:ae:e9:d5:3c:47:
81:6b:18:75:2d:03:86:21:8b:43:4d:51:7c:f9:9f:
90:68:28:b3:fa:3d:d9:34:78:a4:fe:a9:bd:62:2d:
04:de:39:b5:5d:0c:5e:41:d7:76:d6:d7:55:fa:96:
1d:1b:1f:8a:02:b2:b7:7c:71:ca:78:75:1d:b0:2d:
ad:74:e9:ac:05:00:65:af:15:98:7c:90:f0:a5:a7:
6f:33:ea:b8:de:c3:4d:a0:a0:3f:d1:ee:66:99:08:
45:21:96:ec:54:5c:17:97:b7:63:e3:2d:0f:83:a7:
cb:7b:ea:1e:6a:1e:e6:5d:e2:17:1b:a1:48:4d:65:
5e:07:75:eb:83:ff:43:2d:72:76:87:21:45:54:38:
a3:cb:f8:8b:63:f5:d2:b1:cd:dc:3d:13:25:87:54:
70:d5:05:e5:ef:52:17:05:29:ed:58:7f:2c:9d:db:
fd:d3:78:ff:3c:1f:d4:fe:32:e0:47:4c:02:5e:00:
9c:85:49:01:2e:db:47:2a:76:63:d6:71:d8:b6:9f:
81:3a:b2:7b:b3:53:2f:bb:c0:ca:cb:b1:a4:4d:0b:
21:92:e8:ad:c3:71:c3:73:f3:bb:7e:2f:bd:04:25:
26:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.203.128/26
IPv6:
2001:7f8:159::/48
2a13:9640::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48280
52112
Signature Algorithm: sha256WithRSAEncryption
96:5b:bd:cd:21:d6:47:82:84:d4:f9:e7:49:14:40:a9:13:a5:
be:66:48:d1:32:cf:89:e1:81:ab:e9:ec:67:9c:9e:d6:ff:7a:
59:1e:1a:c3:92:83:a3:af:4b:aa:b9:c7:84:5f:a9:1c:e1:4f:
db:99:b7:25:d7:3d:ee:a4:5e:9a:85:49:79:9e:23:4a:c8:81:
44:51:00:1e:d9:5f:a0:1f:91:62:0a:ae:46:84:ca:8b:ec:38:
cb:64:29:f1:be:5c:f6:80:9c:dc:4c:18:2d:73:cd:42:9a:42:
83:8d:c1:74:e0:78:41:ed:02:4f:5a:62:1e:c8:02:e0:e3:e3:
c3:ef:b6:11:4e:2b:bc:93:30:f9:22:10:ff:6f:be:4f:d6:55:
7f:e0:1b:a7:27:75:e2:84:1e:2e:f6:98:71:69:12:ca:9a:79:
ae:e1:13:84:68:41:47:2e:56:8e:7b:29:9e:63:7f:c4:95:00:
d2:79:7c:16:f4:71:5e:90:32:1b:3e:65:3c:47:c8:03:a4:a0:
b9:56:b8:ba:89:4f:3b:77:97:55:7a:c1:f0:56:c7:96:2d:a4:
27:3d:b7:e9:39:81:5e:b0:2b:14:51:88:32:ce:50:81:54:1d:
37:cc:cf:f2:2f:da:54:04:72:b6:7f:96:5c:58:25:bb:ac:d0:
e3:60:a0:db
-----BEGIN CERTIFICATE-----
MIIFzjCCBLagAwIBAgISAZEyjKNAUbt+NAR84rTGJkBzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwODA4MTUxMjQzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWQwNTcyZmU3Mjk5MWJkMzI4NTRiYWM3MTY2NzZlYmRhZDIyYWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vN/0Y4ZOZ57xGjeJKOg74AbHP0U
UO4LrunVPEeBaxh1LQOGIYtDTVF8+Z+QaCiz+j3ZNHik/qm9Yi0E3jm1XQxeQdd2
1tdV+pYdGx+KArK3fHHKeHUdsC2tdOmsBQBlrxWYfJDwpadvM+q43sNNoKA/0e5m
mQhFIZbsVFwXl7dj4y0Pg6fLe+oeah7mXeIXG6FITWVeB3Xrg/9DLXJ2hyFFVDij
y/iLY/XSsc3cPRMlh1Rw1QXl71IXBSntWH8sndv903j/PB/U/jLgR0wCXgCchUkB
LttHKnZj1nHYtp+BOrJ7s1Mvu8DKy7GkTQshkuitw3HDc/O7fi+9BCUmewIDAQAB
o4IC2jCCAtYwHQYDVR0OBBYEFPHQVy/nKZG9MoVLrHFmduva0irOMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2UzMGRl
ODRiLTQwMGEtNGZkMS1hYjhhLWU3NjE2ZTI0NWI0OS8wLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTMw
ZGU4NGItNDAwYS00ZmQxLWFiOGEtZTc2MTZlMjQ1YjQ5LzAvRjFEMDU3MkZFNzI5
OTFCRDMyODU0QkFDNzE2Njc2RUJEQUQyMkFDRS5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjA4BggrBgEFBQcBBwEB/wQpMCcwDQQCAAEwBwMF
BsEiy4AwFgQCAAIwEAMHACABB/gBWQMFAyoTlkAwHwYIKwYBBQUHAQgBAf8EEDAO
oAwwCgIDALyYAgMAy5AwDQYJKoZIhvcNAQELBQADggEBAJZbvc0h1keChNT550kU
QKkTpb5mSNEyz4nhgavp7Gecntb/elkeGsOSg6OvS6q5x4RfqRzhT9uZtyXXPe6k
XpqFSXmeI0rIgURRAB7ZX6AfkWIKrkaEyovsOMtkKfG+XPaAnNxMGC1zzUKaQoON
wXTgeEHtAk9aYh7IAuDj48PvthFOK7yTMPkiEP9vvk/WVX/gG6cndeKEHi72mHFp
Esqaea7hE4RoQUcuVo57KZ5jf8SVANJ5fBb0cV6QMhs+ZTxHyAOkoLlWuLqJTzt3
l1V6wfBWx5YtpCc9t+k5gV6wKxRRiDLOUIFUHTfMz/Iv2lQEcrZ/llxYJbus0ONg
oNs=
-----END CERTIFICATE-----
Generated at Sun Sep 29 01:49:15 2024 by rpki-client on console-ams.rpki-client.org