Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Afp6rPiShM693j1MEkYvxE3rw4Q.cer
File: Afp6rPiShM693j1MEkYvxE3rw4Q.cer (raw, json)
Hash identifier: s8fA4o9YMvaKRUJNxH4es4hUCHeX9tF0qjNEJJTo9EY=
Subject key identifier: 01:FA:7A:AC:F8:92:84:CE:BD:DE:3D:4C:12:46:2F:C4:4D:EB:C3:84
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DEB109DE1B871F89F46B2D55C29FA5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:31:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 60231
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:b1:09:de:1b:87:1f:89:f4:6b:2d:55:c2:9f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:31:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=01fa7aacf89284cebdde3d4c12462fc44debc384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:32:e3:33:ea:1b:ec:e2:7e:26:16:2b:45:f7:
40:57:50:17:3e:8c:83:fb:81:7d:17:1c:28:eb:e3:
a9:bf:b7:12:41:ea:35:f1:be:1e:ec:e3:ee:6b:87:
28:8c:62:d1:2b:52:79:16:51:b1:6d:73:83:4e:00:
59:23:ff:e2:2a:cc:81:be:46:a9:05:be:a6:f9:1b:
5d:c6:d0:51:3f:2f:7a:2e:b9:05:37:ce:ea:07:e8:
44:08:a1:34:5a:5f:af:35:91:92:a7:a3:24:3f:bb:
a2:66:71:e1:f1:eb:e5:3f:80:82:b4:a6:96:e8:6b:
46:d3:77:9b:8c:46:cf:62:ef:58:6f:7c:8d:8c:f2:
d1:73:be:34:9a:1d:dd:13:5f:6b:92:1a:fa:bf:db:
ec:64:16:d4:ed:14:9f:9f:d5:30:86:df:76:63:74:
a2:a5:63:bd:6d:02:a3:b4:6b:72:ba:5b:53:60:52:
13:8c:3b:82:a7:6f:e3:97:01:20:88:41:fc:8b:0d:
b0:70:96:65:b9:3c:17:7b:65:e6:c1:86:cf:58:34:
4e:8b:c6:6c:11:e1:bc:4c:82:1f:b9:e0:5c:aa:89:
79:16:45:9e:37:c6:57:0e:c5:26:0d:c8:4f:52:f9:
11:8e:6a:d7:bc:bf:5c:a0:d7:10:d0:6a:12:8c:a7:
42:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:FA:7A:AC:F8:92:84:CE:BD:DE:3D:4C:12:46:2F:C4:4D:EB:C3:84
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60231
Signature Algorithm: sha256WithRSAEncryption
a5:54:7a:62:20:50:f1:16:4b:64:36:90:59:07:63:ee:5e:df:
f6:50:03:e6:d0:77:0f:29:c1:7b:3a:3c:45:83:aa:65:14:13:
17:a8:25:3f:b6:d1:80:d9:ae:79:d5:c5:a9:06:d7:82:f9:30:
c3:5c:e9:f4:40:95:52:6d:f5:c5:90:f3:b3:63:1f:06:88:1a:
8a:9f:82:6c:86:3e:78:73:4b:3e:33:60:6f:4e:34:af:58:f7:
3e:df:0a:95:69:f1:07:32:10:ec:95:da:c3:ef:96:ea:d2:df:
a2:d0:34:e8:91:f9:48:97:50:22:69:16:27:72:5e:0a:86:8a:
3b:9a:1e:4b:2e:3a:65:06:42:06:8b:4d:86:4b:10:0e:68:73:
31:e2:ed:fe:e4:c1:e7:e7:48:43:c3:93:a7:d6:3b:c3:f4:b9:
57:41:0f:37:31:81:ab:5d:9f:5a:c5:15:15:a1:6c:3f:bf:7a:
68:da:58:da:a1:8d:05:16:e7:b9:4f:ee:da:c8:3b:63:ac:97:
26:27:f9:d3:3b:0a:40:0f:d2:24:b2:56:44:e6:d9:5c:be:e6:
99:e4:1b:b1:0b:ee:16:13:07:e2:e3:31:5f:21:00:66:78:d9:
11:48:3b:a5:27:a9:09:20:fb:a9:c5:15:73:03:73:02:90:4e:
03:2c:68:71
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYzI3rEJ3huHH4n0ay1Vwp+lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDYzMTI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMWZhN2FhY2Y4OTI4NGNlYmRkZTNkNGMxMjQ2MmZjNDRkZWJjMzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7TLjM+ob7OJ+JhYrRfdAV1AXPoyD
+4F9Fxwo6+Opv7cSQeo18b4e7OPua4cojGLRK1J5FlGxbXODTgBZI//iKsyBvkap
Bb6m+RtdxtBRPy96LrkFN87qB+hECKE0Wl+vNZGSp6MkP7uiZnHh8evlP4CCtKaW
6GtG03ebjEbPYu9Yb3yNjPLRc740mh3dE19rkhr6v9vsZBbU7RSfn9Uwht92Y3Si
pWO9bQKjtGtyultTYFITjDuCp2/jlwEgiEH8iw2wcJZluTwXe2XmwYbPWDROi8Zs
EeG8TIIfueBcqol5FkWeN8ZXDsUmDchPUvkRjmrXvL9coNcQ0GoSjKdCXwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFAH6eqz4koTOvd49TBJGL8RN68OEMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U3LzY0NWUx
YS1lZjcyLTQ5MjItYWE5YS03YmU0M2VkZGYyY2EvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcvNjQ1ZTFh
LWVmNzItNDkyMi1hYTlhLTdiZTQzZWRkZjJjYS8xL0FmcDZyUGlTaE02OTNqMU1F
a1l2eEUzcnc0US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDrRzANBgkqhkiG9w0BAQsFAAOCAQEApVR6YiBQ8RZL
ZDaQWQdj7l7f9lAD5tB3DynBezo8RYOqZRQTF6glP7bRgNmuedXFqQbXgvkww1zp
9ECVUm31xZDzs2MfBogaip+CbIY+eHNLPjNgb040r1j3Pt8KlWnxBzIQ7JXaw++W
6tLfotA06JH5SJdQImkWJ3JeCoaKO5oeSy46ZQZCBotNhksQDmhzMeLt/uTB5+dI
Q8OTp9Y7w/S5V0EPNzGBq12fWsUVFaFsP796aNpY2qGNBRbnuU/u2sg7Y6yXJif5
0zsKQA/SJLJWRObZXL7mmeQbsQvuFhMH4uMxXyEAZnjZEUg7pSepCSD7qcUVcwNz
ApBOAyxocQ==
-----END CERTIFICATE-----
Generated at Thu Apr 25 17:02:04 2024 by rpki-client on console-fra.rpki-client.org