Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer
File: DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer (raw, json)
Hash identifier: klalycgmrpdXZ82shucrQ4/V+DEIj3bFm0JI4fL8Tro=
Subject key identifier: 0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0190C4EA8390F02BADAEB9FC02E547B7FDFE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 18 Jul 2024 08:17:01 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 34425
AS: 61290
IP: 82.215.71.0/24
IP: 185.162.183.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c4:ea:83:90:f0:2b:ad:ae:b9:fc:02:e5:47:b7:fd:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 18 08:17:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c4579a4028829d37acac65f66c056063251e57e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7c:05:4f:2a:54:df:3a:68:2a:1a:32:b9:ad:
01:65:63:dd:bf:aa:d7:f5:16:c3:5f:75:b8:5f:b4:
46:56:79:97:f0:a6:75:3a:16:42:0e:dc:ba:1c:cf:
ae:da:74:83:21:8a:6c:a5:aa:aa:96:7d:d5:b5:6e:
57:a2:a9:d9:ca:4d:64:3f:0e:92:8d:04:4d:0a:71:
78:9e:e4:80:d5:39:9f:42:d9:73:55:e7:c8:6c:99:
2f:d5:74:c0:2e:b1:16:38:96:b7:22:5a:90:74:03:
bf:1b:70:63:6b:39:9a:05:07:0a:95:53:61:67:b8:
45:80:27:12:66:fc:eb:62:63:d1:4d:ee:cc:33:b8:
cf:8e:a1:9e:c0:80:eb:b3:08:56:f7:5f:b0:a6:03:
30:1f:52:fd:50:97:77:a0:aa:d1:36:b1:07:6a:3f:
2f:d8:4a:6e:d0:57:13:df:9d:c5:cc:83:5f:be:8b:
a8:fa:1c:ec:44:df:fd:e3:b2:60:0d:1f:01:30:38:
e3:45:66:27:21:79:d5:08:33:95:1e:73:42:8b:73:
60:87:24:2a:30:f4:db:b1:2b:7b:12:f3:3e:9b:6d:
18:38:b2:b7:a8:73:78:52:49:5b:61:cb:16:b8:c4:
fd:cc:dc:31:72:ff:8e:2c:e0:ae:39:fc:61:b9:39:
5c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.215.71.0/24
185.162.183.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34425
61290
Signature Algorithm: sha256WithRSAEncryption
02:6f:38:f3:b5:ac:16:11:04:be:cf:4e:dc:42:ec:b8:4b:1c:
6b:ab:3f:f3:c3:28:13:f5:12:9f:c0:e7:f4:41:29:b6:73:14:
df:8e:ca:0c:6a:ef:1f:44:83:18:1f:8e:09:6b:43:ac:b6:65:
ae:9a:fd:18:a6:cc:a9:56:63:c9:2d:3b:82:1d:47:91:81:6f:
21:59:ff:87:33:8e:d7:a0:b6:16:3c:04:a4:0e:36:09:2d:09:
66:a1:36:7a:54:f1:49:4e:3e:99:1b:47:04:0b:8f:16:ec:17:
5c:e3:28:e3:4d:08:c2:7a:b2:f7:75:5c:6a:32:b0:b0:09:d2:
66:09:fb:2c:04:11:f4:84:fe:a2:58:27:8c:18:4f:d6:70:90:
61:61:a4:47:72:1c:12:3b:e0:fe:79:f7:e2:7a:bd:2f:6f:34:
7c:4f:89:2e:62:6d:9c:a4:46:a5:c0:fc:ff:d6:e8:ea:75:94:
07:94:6b:ec:f8:0e:82:d8:32:e9:0f:fd:60:ac:ae:a3:43:c4:
52:c1:19:80:97:75:01:9e:0a:c2:21:75:d7:4b:91:8a:93:3b:
2a:e3:f1:d7:d2:46:9f:09:70:53:2f:a0:72:ca:75:e3:96:32:
6e:e6:5e:65:3d:32:01:40:27:c8:b1:3b:2f:96:3c:f7:57:e5:
da:be:5c:45
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgISAZDE6oOQ8Cutrrn8AuVHt/3+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNzE4MDgxNzAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzQ1NzlhNDAyODgyOWQzN2FjYWM2NWY2NmMwNTYwNjMyNTFlNTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3wFTypU3zpoKhoyua0BZWPdv6rX
9RbDX3W4X7RGVnmX8KZ1OhZCDty6HM+u2nSDIYpspaqqln3VtW5XoqnZyk1kPw6S
jQRNCnF4nuSA1TmfQtlzVefIbJkv1XTALrEWOJa3IlqQdAO/G3BjazmaBQcKlVNh
Z7hFgCcSZvzrYmPRTe7MM7jPjqGewIDrswhW91+wpgMwH1L9UJd3oKrRNrEHaj8v
2Epu0FcT353FzINfvouo+hzsRN/947JgDR8BMDjjRWYnIXnVCDOVHnNCi3NghyQq
MPTbsSt7EvM+m20YOLK3qHN4UklbYcsWuMT9zNwxcv+OLOCuOfxhuTlcHQIDAQAB
o4ICqzCCAqcwHQYDVR0OBBYEFAxFeaQCiCnTesrGX2bAVgYyUeV+MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM0L2VkYWVi
NS01ZTZlLTQxMWItOTljYi0zYzUwMTgwNzgwYjAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQvZWRhZWI1
LTVlNmUtNDExYi05OWNiLTNjNTAxODA3ODBiMC8xL0RFVjVwQUtJS2RONnlzWmZa
c0JXQmpKUjVYNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQAUtdHAwQAuaK3MB8GCCsGAQUFBwEIAQH/BBAw
DqAMMAoCAwCGeQIDAO9qMA0GCSqGSIb3DQEBCwUAA4IBAQACbzjztawWEQS+z07c
Quy4Sxxrqz/zwygT9RKfwOf0QSm2cxTfjsoMau8fRIMYH44Ja0OstmWumv0Ypsyp
VmPJLTuCHUeRgW8hWf+HM47XoLYWPASkDjYJLQlmoTZ6VPFJTj6ZG0cEC48W7Bdc
4yjjTQjCerL3dVxqMrCwCdJmCfssBBH0hP6iWCeMGE/WcJBhYaRHchwSO+D+effi
er0vbzR8T4kuYm2cpEalwPz/1ujqdZQHlGvs+A6C2DLpD/1grK6jQ8RSwRmAl3UB
ngrCIXXXS5GKkzsq4/HX0kafCXBTL6ByynXjljJu5l5lPTIBQCfIsTsvljz3V+Xa
vlxF
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:12:42 2024 by rpki-client on console-ams.rpki-client.org