Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer
File: C7M4e-bSDUos4TzAkuh_d3uLmVY.cer (raw, json)
Hash identifier: PnutMuS8epdpuEa7SYvSRu9Zm+xUBF4g6Iuo0IbMcHk=
Subject key identifier: 0B:B3:38:7B:E6:D2:0D:4A:2C:E1:3C:C0:92:E8:7F:77:7B:8B:99:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86F4338E29898CC86629ED62B0FC900
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:29:44 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 34648
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:43:38:e2:98:98:cc:86:62:9e:d6:2b:0f:c9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0bb3387be6d20d4a2ce13cc092e87f777b8b9956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1a:05:29:cc:b5:07:ed:bd:0c:4f:bd:b3:03:
58:32:19:c4:00:3d:fa:b1:4e:03:e1:a4:c5:c2:99:
81:17:92:b9:39:33:f1:fc:a9:95:85:8a:7e:30:9a:
54:da:92:27:3a:6e:8c:7a:9b:d6:03:39:40:96:76:
c1:d9:a1:56:b1:03:c7:f4:83:0c:f3:60:c3:7b:9b:
17:da:b5:fd:e3:bf:3c:1b:a6:c1:00:16:0c:cd:ad:
70:00:71:d5:63:f5:dc:76:11:af:4a:9a:44:98:46:
a4:60:31:bf:4a:3c:86:d9:60:59:4c:a1:e3:f7:de:
26:8d:fb:5f:c9:63:f7:62:5a:49:39:05:70:07:12:
41:60:03:6b:ea:44:34:38:5c:14:ab:e0:ce:ed:29:
86:95:28:93:2b:54:b0:12:d3:94:72:40:f3:5d:69:
dc:d5:39:04:ac:e7:01:2b:85:63:d3:93:a8:d2:fb:
91:a2:dd:b6:99:bb:56:83:53:cc:9a:2c:08:00:9a:
9d:ce:7f:e2:6f:09:0a:2e:8b:27:75:64:c7:bb:cb:
57:9c:0b:92:a8:a8:3c:a2:41:11:2a:fe:88:de:f4:
30:16:fc:c4:0a:cf:4f:b6:f6:fc:75:f5:50:6a:30:
9d:73:45:b9:96:d0:20:93:ec:fc:a9:2d:c7:c6:4c:
96:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B3:38:7B:E6:D2:0D:4A:2C:E1:3C:C0:92:E8:7F:77:7B:8B:99:56
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34648
Signature Algorithm: sha256WithRSAEncryption
4c:cc:b8:2b:2b:9a:1b:22:65:95:07:04:9b:36:a1:11:8f:db:
bd:0b:90:4f:e4:54:aa:90:75:c3:33:5e:9f:a4:65:2c:26:fd:
b0:98:c3:03:32:98:6b:91:9b:02:66:50:ed:fb:1b:6e:3b:1e:
e9:33:27:05:4c:44:d4:a5:03:34:b4:0f:3c:bf:82:f8:bd:53:
ec:e1:bb:a2:90:8f:d6:6e:30:a9:20:c3:79:ea:96:77:e3:2e:
33:90:1a:4e:b9:c1:24:ff:31:41:4b:11:fa:b0:33:43:39:25:
70:7d:ea:74:23:94:3e:f9:9e:90:f0:7f:b4:28:22:38:f6:c3:
cd:00:3d:33:2e:43:8f:d9:2d:e1:e2:3a:4b:58:e8:fc:fc:3e:
bf:a0:58:1c:87:c0:d9:42:fd:0d:bc:33:5b:8b:dc:fc:61:a4:
a5:9a:78:f2:78:fc:c8:46:c5:99:3e:7b:e0:5d:d4:fc:7c:b1:
0f:63:30:80:05:00:1d:cb:e6:ad:53:e2:ad:57:6b:62:df:2c:
a9:f2:8d:61:e3:5d:46:db:30:e6:92:5f:33:e4:e6:e1:f5:db:
12:ae:90:14:1d:94:c0:4c:fe:25:de:60:06:00:01:09:a9:9b:
04:4f:7d:4b:c1:fa:60:4c:86:68:0c:f8:11:b3:0b:b3:0b:57:
87:95:2b:d7
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYzIb0M44piYzIZintYrD8kAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDQyOTQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYmIzMzg3YmU2ZDIwZDRhMmNlMTNjYzA5MmU4N2Y3NzdiOGI5OTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhoFKcy1B+29DE+9swNYMhnEAD36
sU4D4aTFwpmBF5K5OTPx/KmVhYp+MJpU2pInOm6MepvWAzlAlnbB2aFWsQPH9IMM
82DDe5sX2rX94788G6bBABYMza1wAHHVY/XcdhGvSppEmEakYDG/SjyG2WBZTKHj
994mjftfyWP3YlpJOQVwBxJBYANr6kQ0OFwUq+DO7SmGlSiTK1SwEtOUckDzXWnc
1TkErOcBK4Vj05Oo0vuRot22mbtWg1PMmiwIAJqdzn/ibwkKLosndWTHu8tXnAuS
qKg8okERKv6I3vQwFvzECs9Ptvb8dfVQajCdc0W5ltAgk+z8qS3HxkyWWQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFAuzOHvm0g1KLOE8wJLof3d7i5lWMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q4L2VjMWVm
NC02MWZlLTQwYjctYTAyOC00NDA0ZDdlZTcxMjIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDgvZWMxZWY0
LTYxZmUtNDBiNy1hMDI4LTQ0MDRkN2VlNzEyMi8xL0M3TTRlLWJTRFVvczRUekFr
dWhfZDN1TG1WWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwCHWDANBgkqhkiG9w0BAQsFAAOCAQEATMy4KyuaGyJl
lQcEmzahEY/bvQuQT+RUqpB1wzNen6RlLCb9sJjDAzKYa5GbAmZQ7fsbbjse6TMn
BUxE1KUDNLQPPL+C+L1T7OG7opCP1m4wqSDDeeqWd+MuM5AaTrnBJP8xQUsR+rAz
QzklcH3qdCOUPvmekPB/tCgiOPbDzQA9My5Dj9kt4eI6S1jo/Pw+v6BYHIfA2UL9
DbwzW4vc/GGkpZp48nj8yEbFmT574F3U/HyxD2MwgAUAHcvmrVPirVdrYt8sqfKN
YeNdRtsw5pJfM+Tm4fXbEq6QFB2UwEz+Jd5gBgABCambBE99S8H6YEyGaAz4EbML
swtXh5Ur1w==
-----END CERTIFICATE-----
Generated at Tue Nov 26 22:25:18 2024 by rpki-client on console-ams.rpki-client.org