Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer
File: Dv0crRIZAnVQiePKgLptfMxLm3E.cer (raw, json)
Hash identifier: 31cNECazJwsHMvraA4mm8kt6QQ/OQ6MNcgxzHDfxZpw=
Subject key identifier: 0E:FD:1C:AD:12:19:02:75:50:89:E3:CA:80:BA:6D:7C:CC:4B:9B:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DE2C655B7BD9F9C8BD2DD327008B0F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:30:52 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212488
IP: 2001:67c:3f8::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:2c:65:5b:7b:d9:f9:c8:bd:2d:d3:27:00:8b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:30:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0efd1cad121902755089e3ca80ba6d7ccc4b9b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:70:bf:a5:89:2b:8f:a3:18:dc:62:88:e4:39:
26:e0:b9:b6:8f:0c:69:2e:68:7a:38:ab:eb:6c:92:
bd:f5:4f:c3:2c:c8:bc:bf:89:e2:37:1c:22:b3:f4:
2d:ba:49:e8:d3:34:74:aa:b7:d1:c8:ea:93:67:76:
13:88:72:39:32:fc:5f:43:56:16:7f:92:52:20:50:
ca:99:3b:d9:d9:ea:36:aa:74:b9:be:2e:1b:d1:36:
cc:80:09:3c:89:38:1f:14:be:70:99:9d:c3:4b:2d:
68:dc:79:ab:f3:4a:76:47:ca:67:c6:f9:1f:be:76:
ba:78:94:6e:22:d7:5b:b3:9b:1b:04:4c:e1:5b:0a:
5a:35:ac:9e:90:e2:25:09:ce:46:64:5c:64:37:50:
bd:cf:49:bf:8d:7d:64:f9:33:cd:df:71:ec:b2:9a:
39:9e:22:fc:a2:94:f8:ba:91:9c:09:bb:86:6a:f4:
81:b6:4e:9d:d5:ef:db:4d:6b:c3:83:42:6f:92:a2:
13:0b:bf:40:e7:6b:bd:15:8f:98:69:d4:75:fa:94:
a5:f3:d4:a1:16:26:8d:8e:97:d2:2d:62:a8:9a:e8:
69:f5:98:9a:d0:29:ed:c0:6b:d7:14:f8:a2:23:dd:
cd:10:10:16:a3:da:c2:ea:04:b8:5f:b5:f3:25:e6:
10:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:FD:1C:AD:12:19:02:75:50:89:E3:CA:80:BA:6D:7C:CC:4B:9B:71
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:3f8::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212488
Signature Algorithm: sha256WithRSAEncryption
41:8f:7e:eb:a4:c7:1d:99:63:d2:6d:36:36:81:3f:d5:32:fe:
a4:f5:7d:0f:49:52:3c:a8:87:8f:05:c3:c3:24:91:11:09:1f:
78:a1:b5:05:13:62:38:c1:27:5a:64:52:cc:f7:8d:62:7d:8f:
6c:3a:b8:f9:15:11:1d:d7:80:c1:83:16:e0:4c:25:57:63:fe:
5f:45:ee:11:55:90:ff:67:07:b3:08:28:c1:85:7c:fd:2d:df:
b5:f4:47:f1:89:c1:61:22:a8:87:a3:7a:bc:5f:0f:af:23:8e:
f2:de:96:cf:ba:bc:db:bc:a2:3f:c5:b4:bd:b0:fe:c9:b9:af:
2f:db:d2:db:8c:83:8e:db:56:f7:2d:c0:83:56:61:a8:0f:80:
d2:25:82:05:1e:cc:54:bd:a1:8d:c6:28:ba:bf:df:1d:6a:2e:
67:76:6c:a9:e3:26:6e:6f:88:5b:cc:79:af:5e:5d:df:67:18:
82:da:21:d8:76:ca:4c:2a:9f:c4:57:f4:09:f3:cc:4b:5b:0a:
87:99:85:31:d0:f5:cd:05:fc:b7:78:03:0f:2d:d3:f8:fc:67:
69:6a:af:e5:4f:36:75:98:fe:b2:66:d4:65:fe:d6:a1:14:2b:
a7:46:66:87:a2:f0:cb:9d:9d:8f:17:38:3d:50:a6:c7:90:59:
ef:29:e0:fe
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgISAYzI3ixlW3vZ+ci9LdMnAIsPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDYzMDUyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZWZkMWNhZDEyMTkwMjc1NTA4OWUzY2E4MGJhNmQ3Y2NjNGI5YjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3C/pYkrj6MY3GKI5Dkm4Lm2jwxp
Lmh6OKvrbJK99U/DLMi8v4niNxwis/Qtukno0zR0qrfRyOqTZ3YTiHI5MvxfQ1YW
f5JSIFDKmTvZ2eo2qnS5vi4b0TbMgAk8iTgfFL5wmZ3DSy1o3Hmr80p2R8pnxvkf
vna6eJRuItdbs5sbBEzhWwpaNayekOIlCc5GZFxkN1C9z0m/jX1k+TPN33Hsspo5
niL8opT4upGcCbuGavSBtk6d1e/bTWvDg0JvkqITC79A52u9FY+YadR1+pSl89Sh
FiaNjpfSLWKomuhp9Zia0CntwGvXFPiiI93NEBAWo9rC6gS4X7XzJeYQnQIDAQAB
o4ICozCCAp8wHQYDVR0OBBYEFA79HK0SGQJ1UInjyoC6bXzMS5txMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzL2RmOTlk
My01MDI4LTQzNjEtYjc5NS0zYWY0YTk0NjNiNzcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMvZGY5OWQz
LTUwMjgtNDM2MS1iNzk1LTNhZjRhOTQ2M2I3Ny8xL0R2MGNyUklaQW5WUWllUEtn
THB0Zk14TG0zRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAP4MBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwM+CDANBgkqhkiG9w0BAQsFAAOCAQEAQY9+66THHZlj0m02NoE/1TL+pPV9
D0lSPKiHjwXDwySREQkfeKG1BRNiOMEnWmRSzPeNYn2PbDq4+RURHdeAwYMW4Ewl
V2P+X0XuEVWQ/2cHswgowYV8/S3ftfRH8YnBYSKoh6N6vF8PryOO8t6Wz7q827yi
P8W0vbD+ybmvL9vS24yDjttW9y3Ag1ZhqA+A0iWCBR7MVL2hjcYour/fHWouZ3Zs
qeMmbm+IW8x5r15d32cYgtoh2HbKTCqfxFf0CfPMS1sKh5mFMdD1zQX8t3gDDy3T
+PxnaWqv5U82dZj+smbUZf7WoRQrp0Zmh6Lwy52djxc4PVCmx5BZ7yng/g==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:05:36 2024 by rpki-client on console-fra.rpki-client.org