Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
File: AzZPzt1pE1dzPNXM1wKduOYdHjo.cer (raw, json)
Hash identifier: o3RYaV5yPyXzpuLbc4SQQoqPc/J56s8yGRzFBlTIxHM=
Subject key identifier: 03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0190BB38983C17393880F23CFC09FC46BC35
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 16 Jul 2024 11:06:06 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2a14:16c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:bb:38:98:3c:17:39:38:80:f2:3c:fc:09:fc:46:bc:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 16 11:06:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:70:c8:c5:b4:7a:6b:35:4d:31:bd:25:f8:b3:
15:0f:d8:dc:de:2f:f0:f3:b5:d9:22:ea:20:29:5c:
65:9c:87:95:2e:8a:ef:74:ec:bf:ee:22:68:cc:c6:
15:59:71:51:72:14:9a:c9:a3:20:f6:80:4a:b9:5d:
eb:c5:f3:d5:32:06:21:4f:a6:54:d9:7b:d3:79:75:
c7:82:e9:ed:fc:7f:92:9f:ba:0b:f4:a0:ad:2b:95:
fb:f9:8a:e8:5d:19:14:aa:b8:14:34:46:76:1c:db:
7b:fd:12:25:d6:6b:c5:58:de:88:4b:65:f3:10:4a:
37:a3:61:86:82:35:fc:74:a7:7a:84:6a:02:8e:8f:
ea:4c:71:bd:d2:63:da:c8:24:14:7f:4e:05:16:f8:
02:a8:c3:fa:63:2f:cb:07:12:63:53:e2:38:56:54:
c9:5b:57:d0:bf:56:5c:7f:96:f9:a5:d9:30:51:17:
26:f6:76:95:cc:aa:56:34:0a:f7:dc:ad:82:19:34:
31:84:e3:fd:86:f4:c8:5e:46:4b:7b:4b:db:6b:60:
ab:ba:d0:40:46:d4:36:5e:b6:9e:68:84:c7:01:53:
72:b8:7a:d6:e5:f1:a7:32:7c:f1:6f:10:d8:aa:13:
a8:e4:ef:fe:32:3c:08:31:c3:1e:31:61:c6:7c:af:
92:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:16c0::/29
Signature Algorithm: sha256WithRSAEncryption
38:26:90:1a:72:8d:67:fb:e2:7d:ef:cc:af:f0:73:c2:fd:a4:
d0:87:f9:67:54:30:01:84:05:bd:b7:d8:f2:8a:45:32:e2:d3:
e9:e8:b0:05:db:17:b4:77:65:37:d4:91:28:f3:b9:45:43:88:
41:aa:d2:93:3c:8f:02:11:4f:f7:85:d3:fc:1e:e6:1c:4a:7c:
44:eb:b3:e1:1f:d6:3a:e6:e2:10:fc:4c:8f:9f:d7:df:b3:3d:
44:cc:d4:f4:14:54:d0:f6:32:3b:32:33:f1:34:3b:d7:e9:77:
9f:95:fb:1c:a1:53:b5:8c:c4:07:5f:bb:74:10:2f:e7:c8:27:
84:f5:41:e1:47:61:0b:98:c0:4d:5c:66:86:74:c0:96:df:de:
6e:1f:a1:17:4e:4c:bd:d2:41:1a:5d:b7:51:15:f5:25:20:07:
b6:27:54:dd:71:24:63:12:ea:07:64:12:5d:fe:36:e6:ce:cb:
7b:fa:68:fe:1a:10:f6:36:be:1d:c8:97:ff:c8:8e:6e:50:cf:
82:11:6d:7a:95:d1:71:b4:7b:82:96:95:38:6d:52:77:b8:e4:
01:d8:8c:65:c1:98:6e:8f:bf:9c:02:46:6e:8b:b8:70:0b:a3:
a9:fe:79:a6:37:6d:15:15:35:7a:20:07:de:10:9a:3c:fc:26:
01:1b:ea:d3
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgISAZC7OJg8Fzk4gPI8/An8Rrw1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNzE2MTEwNjA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzM2NGZjZWRkNjkxMzU3NzMzY2Q1Y2NkNzAyOWRiOGU2MWQxZTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nDIxbR6azVNMb0l+LMVD9jc3i/w
87XZIuogKVxlnIeVLorvdOy/7iJozMYVWXFRchSayaMg9oBKuV3rxfPVMgYhT6ZU
2XvTeXXHgunt/H+Sn7oL9KCtK5X7+YroXRkUqrgUNEZ2HNt7/RIl1mvFWN6IS2Xz
EEo3o2GGgjX8dKd6hGoCjo/qTHG90mPayCQUf04FFvgCqMP6Yy/LBxJjU+I4VlTJ
W1fQv1Zcf5b5pdkwURcm9naVzKpWNAr33K2CGTQxhOP9hvTIXkZLe0vba2CrutBA
RtQ2XraeaITHAVNyuHrW5fGnMnzxbxDYqhOo5O/+MjwIMcMeMWHGfK+S1wIDAQAB
o4IChTCCAoEwHQYDVR0OBBYEFAM2T87daRNXczzVzNcCnbjmHR46MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdiLzU2ZjUy
Ni01M2RlLTRjOWQtYjQwMS1hYmYwYjU5NDY0NmYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvNTZmNTI2
LTUzZGUtNGM5ZC1iNDAxLWFiZjBiNTk0NjQ2Zi8xL0F6WlB6dDFwRTFkelBOWE0x
d0tkdU9ZZEhqby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUDKhQWwDANBgkqhkiG9w0BAQsFAAOCAQEAOCaQ
GnKNZ/vife/Mr/Bzwv2k0If5Z1QwAYQFvbfY8opFMuLT6eiwBdsXtHdlN9SRKPO5
RUOIQarSkzyPAhFP94XT/B7mHEp8ROuz4R/WOubiEPxMj5/X37M9RMzU9BRU0PYy
OzIz8TQ71+l3n5X7HKFTtYzEB1+7dBAv58gnhPVB4UdhC5jATVxmhnTAlt/ebh+h
F05MvdJBGl23URX1JSAHtidU3XEkYxLqB2QSXf425s7Le/po/hoQ9ja+HciX/8iO
blDPghFtepXRcbR7gpaVOG1Sd7jkAdiMZcGYbo+/nAJGbou4cAujqf55pjdtFRU1
eiAH3hCaPPwmARvq0w==
-----END CERTIFICATE-----
Generated at Sat Sep 7 21:08:58 2024 by rpki-client on console-ams.rpki-client.org