Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
File: DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer (raw, json)
Hash identifier: 6vkE/lR12q/10rrDouxxw7fFmUMEVa/UWJU4qFc5azU=
Subject key identifier: 0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7276BDF5E52E54B7353757EFBF2D4E4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 13128
IP: 141.15.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Apr 2024 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:6b:df:5e:52:e5:4b:73:53:75:7e:fb:f2:d4:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b2:1f:e5:2c:80:b8:13:df:5b:d6:8b:3c:76:
81:92:e0:36:bc:4e:6a:b1:14:82:31:cb:fc:5f:8b:
e2:f9:14:1d:3a:02:a1:3f:32:9d:f1:f3:36:e6:24:
8c:77:26:a7:a7:58:ff:6e:e3:9a:6f:88:c4:aa:0f:
4d:ef:ec:0d:ac:08:4d:88:81:df:e0:f5:79:99:60:
95:6d:2e:fb:98:da:89:51:ed:86:b4:1f:6f:6a:82:
31:12:07:85:be:04:37:19:be:08:35:e2:05:e5:2e:
d8:99:0f:60:30:0a:cd:0b:46:9c:c7:79:41:2c:ef:
4d:06:18:30:3f:c7:93:a0:de:46:b9:0c:79:36:1a:
60:85:7f:b7:e7:5f:ef:87:a3:eb:5c:be:54:88:c0:
47:22:fd:25:1a:a9:20:b6:45:84:05:48:5e:9d:73:
ed:34:63:dc:55:c5:7e:64:14:09:a1:cc:12:83:1f:
8d:c7:6f:52:fe:af:ea:52:11:12:a3:2e:e9:39:8e:
a4:a1:94:e6:bb:cd:33:1e:46:dd:d1:f8:e0:64:4a:
ac:c8:41:88:c9:5f:b3:79:28:09:ae:98:f7:db:92:
85:93:8c:35:a1:43:cf:01:53:db:f8:fc:07:f7:78:
65:3c:a1:11:14:0e:04:90:20:a5:10:9d:9c:2a:ae:
cb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.15.0.0/16
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13128
Signature Algorithm: sha256WithRSAEncryption
84:92:1e:b9:78:4b:78:ae:fd:0a:7b:84:06:06:be:1c:69:4c:
82:7f:0b:c9:76:0b:07:57:4b:8a:ca:eb:d2:3d:16:cf:4e:ef:
bd:25:9b:13:f6:aa:b3:61:89:e8:04:3c:bd:9c:b5:74:fe:c6:
c7:9e:b3:5f:dd:23:bb:31:28:80:96:64:34:50:00:0f:12:62:
e2:17:67:29:f2:f5:8a:5a:a7:66:6b:13:4d:e5:95:0b:95:87:
92:0d:60:94:4d:73:5e:3e:05:d1:b1:5f:32:cd:23:a8:83:44:
5f:72:08:2a:d0:07:dc:e5:95:cb:d9:98:0d:34:a0:de:d1:e5:
c4:52:42:9c:49:71:b8:2d:f2:85:f7:86:d6:68:8f:98:53:93:
65:76:5f:38:29:9f:35:78:7c:f6:bb:c4:49:9d:f5:0a:a9:fb:
a2:cd:a8:f3:79:1a:d3:89:4e:83:5d:aa:ef:f6:83:4e:9a:26:
e4:39:54:25:8e:bb:9b:6a:d5:b5:0d:37:ab:92:cb:ae:02:01:
bb:49:3d:d9:96:97:70:e6:f8:ba:4c:04:7d:a9:1b:5f:ca:b8:
35:b9:20:67:ca:7d:51:be:3e:18:2e:96:8d:61:3c:ae:68:85:
0f:ae:85:2c:fc:92:f0:fe:a4:4b:3a:46:ee:11:3e:53:de:ca:
15:54:e8:7e
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgISAYzHJ2vfXlLlS3NTdX778tTkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMjIzMTM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZGI0OTEyMmQ5ZTliYmFmYTU3N2Y2NDQ3ZjIxYjhiZWM3NmMwNWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrIf5SyAuBPfW9aLPHaBkuA2vE5q
sRSCMcv8X4vi+RQdOgKhPzKd8fM25iSMdyanp1j/buOab4jEqg9N7+wNrAhNiIHf
4PV5mWCVbS77mNqJUe2GtB9vaoIxEgeFvgQ3Gb4INeIF5S7YmQ9gMArNC0acx3lB
LO9NBhgwP8eToN5GuQx5NhpghX+351/vh6PrXL5UiMBHIv0lGqkgtkWEBUhenXPt
NGPcVcV+ZBQJocwSgx+Nx29S/q/qUhESoy7pOY6koZTmu80zHkbd0fjgZEqsyEGI
yV+zeSgJrpj325KFk4w1oUPPAVPb+PwH93hlPKERFA4EkCClEJ2cKq7LAwIDAQAB
o4ICnjCCApowHQYDVR0OBBYEFA20kSLZ6buvpXf2RH8huL7HbAXwMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E0LzVkZTdm
Yi05NDg4LTRlODQtODNjYS0xNDYwMGQ1NzgwOGEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTQvNWRlN2Zi
LTk0ODgtNGU4NC04M2NhLTE0NjAwZDU3ODA4YS8xL0RiU1JJdG5wdTYtbGRfWkVm
eUc0dnNkc0JmQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF
BwEHAQH/BA8wDTALBAIAATAFAwMAjQ8wGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC
M0gwDQYJKoZIhvcNAQELBQADggEBAISSHrl4S3iu/Qp7hAYGvhxpTIJ/C8l2CwdX
S4rK69I9Fs9O770lmxP2qrNhiegEPL2ctXT+xsees1/dI7sxKICWZDRQAA8SYuIX
Zyny9Ypap2ZrE03llQuVh5INYJRNc14+BdGxXzLNI6iDRF9yCCrQB9zllcvZmA00
oN7R5cRSQpxJcbgt8oX3htZoj5hTk2V2XzgpnzV4fPa7xEmd9Qqp+6LNqPN5GtOJ
ToNdqu/2g06aJuQ5VCWOu5tq1bUNN6uSy64CAbtJPdmWl3Dm+LpMBH2pG1/KuDW5
IGfKfVG+Phgulo1hPK5ohQ+uhSz8kvD+pEs6Ru4RPlPeyhVU6H4=
-----END CERTIFICATE-----
Generated at Thu Apr 18 21:24:25 2024 by rpki-client on console-ams.rpki-client.org