Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DfbmMwZ8BmrpvvHTdxzDAOS00ac.cer
File: DfbmMwZ8BmrpvvHTdxzDAOS00ac.cer (raw, json)
Hash identifier: AOx/wtoMEmq/7TpmVOsZhjBlih6OHgT9m70bl5HJAMk=
Subject key identifier: 0D:F6:E6:33:06:7C:06:6A:E9:BE:F1:D3:77:1C:C3:00:E4:B4:D1:A7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8018D614AA529D694F10B5B9B1CF7BC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:54 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 30887
IP: 2001:67c:4d4::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:8d:61:4a:a5:29:d6:94:f1:0b:5b:9b:1c:f7:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0df6e633067c066ae9bef1d3771cc300e4b4d1a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9b:0c:19:a5:de:5c:ee:f2:20:14:90:a9:78:
53:cb:fd:fb:28:d2:e8:1b:6e:40:de:3d:d1:dd:bc:
67:1a:50:c9:f7:be:10:17:23:09:2b:b4:88:6a:70:
2f:b7:04:95:f0:00:0e:af:31:71:6c:b7:fa:51:40:
97:56:56:18:90:1a:b3:90:6e:85:47:e8:84:56:7e:
3e:c8:c4:65:ad:7b:ca:eb:bf:b4:c9:ac:4a:10:f6:
a5:40:79:ea:82:10:83:9a:e6:2f:e8:4e:f4:23:c3:
80:84:d3:86:23:1b:28:87:47:e3:56:43:c8:c7:eb:
c2:e2:83:11:65:cd:94:54:50:36:34:bd:58:0d:98:
17:95:9f:68:f3:0c:77:5b:3f:dd:30:ba:be:b5:b2:
58:b6:90:54:bd:44:58:43:60:b6:ea:04:f2:b5:7e:
59:77:41:a3:19:96:df:65:b9:e1:af:ef:54:6c:cc:
3b:31:c3:ee:13:3f:22:e5:1f:6d:05:7d:6d:5b:d5:
79:05:2f:c0:48:e0:2e:80:06:5a:56:8d:4e:1c:89:
17:e0:93:65:fb:7f:a2:a7:89:0e:4a:b5:bd:69:ff:
15:3d:4f:50:ac:55:18:67:e5:80:14:c7:c7:35:da:
dd:c0:09:a7:93:32:79:e0:05:f6:ea:a9:2a:cb:36:
30:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F6:E6:33:06:7C:06:6A:E9:BE:F1:D3:77:1C:C3:00:E4:B4:D1:A7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:4d4::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
30887
Signature Algorithm: sha256WithRSAEncryption
12:d6:47:e3:2a:b7:a6:c6:04:6a:07:eb:ec:85:ac:79:ac:7b:
f3:47:fa:68:f8:e9:e0:8e:54:07:e6:e9:38:55:e9:bc:f1:72:
70:9a:eb:10:0a:46:af:52:21:59:2b:32:bc:f8:bc:da:df:f2:
9e:3f:cd:8c:80:93:da:84:a8:8b:db:f8:a0:c6:e4:d6:75:64:
98:69:ca:90:b9:41:84:82:69:19:78:65:93:7a:8e:91:a5:2b:
01:62:96:56:7c:03:7c:09:1b:5a:43:df:9b:52:4f:0f:56:35:
55:89:ba:2b:49:d0:f5:c6:a0:da:4c:10:9e:25:88:b7:ba:03:
9d:2b:d7:52:f0:b3:0b:b7:48:0a:48:ae:5a:8d:01:56:47:3b:
88:eb:72:8a:d6:3b:41:02:e8:4b:9e:38:77:4f:86:65:ff:a9:
b5:e6:2f:22:21:08:a9:84:6d:85:ff:14:19:ba:65:3c:2f:ea:
52:5b:4c:56:df:ca:d9:00:53:41:4f:d6:07:70:c0:1a:47:0c:
e7:50:eb:d3:36:52:03:6c:00:43:14:b3:0c:77:2f:63:7b:3c:
4f:32:21:2c:bd:de:15:14:11:06:42:93:7b:cb:d1:9a:23:90:
d6:f3:c6:83:1f:cf:f0:0e:17:79:21:dc:30:bf:a1:03:d6:1c:
a0:06:9e:78
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgISAYzIAY1hSqUp1pTxC1ubHPe8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDIyOTU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZGY2ZTYzMzA2N2MwNjZhZTliZWYxZDM3NzFjYzMwMGU0YjRkMWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JsMGaXeXO7yIBSQqXhTy/37KNLo
G25A3j3R3bxnGlDJ974QFyMJK7SIanAvtwSV8AAOrzFxbLf6UUCXVlYYkBqzkG6F
R+iEVn4+yMRlrXvK67+0yaxKEPalQHnqghCDmuYv6E70I8OAhNOGIxsoh0fjVkPI
x+vC4oMRZc2UVFA2NL1YDZgXlZ9o8wx3Wz/dMLq+tbJYtpBUvURYQ2C26gTytX5Z
d0GjGZbfZbnhr+9UbMw7McPuEz8i5R9tBX1tW9V5BS/ASOAugAZaVo1OHIkX4JNl
+3+ip4kOSrW9af8VPU9QrFUYZ+WAFMfHNdrdwAmnkzJ54AX26qkqyzYw3QIDAQAB
o4ICojCCAp4wHQYDVR0OBBYEFA325jMGfAZq6b7x03ccwwDktNGnMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y4L2ZhZTFj
MS1hYTE4LTQ2YWEtODNhNy04ZDFjOWQxMTkyYjAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjgvZmFlMWMx
LWFhMTgtNDZhYS04M2E3LThkMWM5ZDExOTJiMC8xL0RmYm1Nd1o4Qm1ycHZ2SFRk
eHpEQU9TMDBhYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfATUMBkGCCsGAQUFBwEIAQH/BAowCKAG
MAQCAninMA0GCSqGSIb3DQEBCwUAA4IBAQAS1kfjKremxgRqB+vshax5rHvzR/po
+OngjlQH5uk4Vem88XJwmusQCkavUiFZKzK8+Lza3/KeP82MgJPahKiL2/igxuTW
dWSYacqQuUGEgmkZeGWTeo6RpSsBYpZWfAN8CRtaQ9+bUk8PVjVViborSdD1xqDa
TBCeJYi3ugOdK9dS8LMLt0gKSK5ajQFWRzuI63KK1jtBAuhLnjh3T4Zl/6m15i8i
IQiphG2F/xQZumU8L+pSW0xW38rZAFNBT9YHcMAaRwznUOvTNlIDbABDFLMMdy9j
ezxPMiEsvd4VFBEGQpN7y9GaI5DW88aDH8/wDhd5Idwwv6ED1hygBp54
-----END CERTIFICATE-----
Generated at Sat Apr 20 02:33:51 2024 by rpki-client on console-fra.rpki-client.org