Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FIUs-v_vx2Av-Mmpsop3wnUUD9k.cer
File: FIUs-v_vx2Av-Mmpsop3wnUUD9k.cer (raw, json)
Hash identifier: Twj+EU+q14NUBOUdRTWvDENkq3W7R7YeqTGM/L7jsog=
Subject key identifier: 14:85:2C:FA:FF:EF:C7:60:2F:F8:C9:A9:B2:8A:77:C2:75:14:0F:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB65065C62567A6E9FABAE9C8D9DB8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/9cd168-8f40-418f-b96b-dbeac01ea317/1/FIUs-v_vx2Av-Mmpsop3wnUUD9k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/9cd168-8f40-418f-b96b-dbeac01ea317/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:30:07 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215923
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:65:06:5c:62:56:7a:6e:9f:ab:ae:9c:8d:9d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=14852cfaffefc7602ff8c9a9b28a77c275140fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1c:ef:4f:62:5f:2d:49:1b:80:35:e3:95:4f:
e7:e3:42:ea:31:2f:ba:75:d0:a0:ef:c9:70:1f:42:
ed:6a:90:69:07:1d:0c:67:85:7c:4d:5a:5f:5d:35:
c8:dd:55:97:1a:a5:8c:78:6e:9f:6b:35:ba:2a:be:
07:b7:73:7e:d0:3f:89:6b:94:40:1b:f3:22:70:58:
f4:aa:f0:c2:cc:51:36:c0:11:8b:ad:80:74:2f:25:
95:a7:40:30:5f:3c:50:a1:d0:6d:8f:00:8d:fd:6a:
f8:8f:7f:d6:0e:74:20:2f:aa:1e:a5:fe:be:54:85:
09:b8:d7:bf:4e:f5:35:b2:8c:d2:be:bb:8f:05:b0:
d9:5b:96:66:9e:81:63:71:c8:ca:b3:6e:56:3e:ce:
e8:24:d0:63:fd:73:d9:56:90:2e:5c:69:f5:77:7b:
09:49:2d:f4:ea:09:d7:84:61:13:f9:3f:1b:fd:b9:
30:84:51:6b:3d:6e:14:b5:08:27:71:1a:8f:84:93:
cb:37:dd:83:0d:a8:af:ab:9e:47:85:64:bc:d0:8c:
7f:19:e6:b3:32:0f:15:b5:11:32:69:a8:81:9b:d7:
33:ec:ae:cc:d5:5f:e2:ae:5e:b6:6f:ef:af:09:96:
72:dc:e7:e9:62:54:62:e4:77:3b:34:b1:9f:8c:ae:
1d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:85:2C:FA:FF:EF:C7:60:2F:F8:C9:A9:B2:8A:77:C2:75:14:0F:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9cd168-8f40-418f-b96b-dbeac01ea317/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9cd168-8f40-418f-b96b-dbeac01ea317/1/FIUs-v_vx2Av-Mmpsop3wnUUD9k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215923
Signature Algorithm: sha256WithRSAEncryption
ac:7c:d7:10:ef:88:d4:25:c4:aa:58:74:46:67:67:cf:6e:7c:
c4:3f:c0:f2:1d:51:19:79:74:e1:cb:49:53:c4:f0:af:f2:c0:
8a:13:20:54:22:80:29:35:a0:f4:16:a7:dd:b1:0f:fd:f4:97:
e1:d0:cd:01:e6:2f:ab:ec:2e:bf:90:98:f1:a2:d1:de:99:71:
db:5e:cb:a8:1c:f3:30:4a:57:ea:fe:5d:6d:29:0c:f2:19:40:
e9:2f:47:7a:d1:d6:27:ab:cc:bd:cb:ce:00:dc:1d:5d:cd:63:
59:df:2c:21:af:5a:9e:db:9a:1c:3d:2c:99:ed:44:99:01:73:
62:e3:4f:7c:58:4b:be:c8:3a:f1:4c:91:6c:12:1a:9c:60:77:
e2:c7:7e:12:07:11:e6:32:bd:b4:64:b8:7e:55:07:6f:51:33:
eb:c6:a6:53:bf:c4:24:24:fa:b0:cd:a1:b5:a3:81:14:c1:5a:
1e:24:e5:62:1d:3f:95:7e:29:10:34:da:50:dc:1c:5b:da:e0:
36:f2:df:4c:71:cd:13:de:ee:40:4a:60:c5:cf:2d:40:06:18:
f9:cd:1a:5a:b1:4c:67:7b:76:7a:b0:77:32:47:d6:d3:59:a5:
6e:e9:a8:05:94:5c:55:13:86:31:e9:5c:6f:60:e4:92:12:5a:
e7:c3:60:15
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYzC22UGXGJWem6fq66cjZ24MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDIzMDA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDg1MmNmYWZmZWZjNzYwMmZmOGM5YTliMjhhNzdjMjc1MTQwZmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xzvT2JfLUkbgDXjlU/n40LqMS+6
ddCg78lwH0LtapBpBx0MZ4V8TVpfXTXI3VWXGqWMeG6fazW6Kr4Ht3N+0D+Ja5RA
G/MicFj0qvDCzFE2wBGLrYB0LyWVp0AwXzxQodBtjwCN/Wr4j3/WDnQgL6oepf6+
VIUJuNe/TvU1sozSvruPBbDZW5ZmnoFjccjKs25WPs7oJNBj/XPZVpAuXGn1d3sJ
SS306gnXhGET+T8b/bkwhFFrPW4UtQgncRqPhJPLN92DDaivq55HhWS80Ix/Geaz
Mg8VtREyaaiBm9cz7K7M1V/irl62b++vCZZy3OfpYlRi5Hc7NLGfjK4dewIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFBSFLPr/78dgL/jJqbKKd8J1FA/ZMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y5LzljZDE2
OC04ZjQwLTQxOGYtYjk2Yi1kYmVhYzAxZWEzMTcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjkvOWNkMTY4
LThmNDAtNDE4Zi1iOTZiLWRiZWFjMDFlYTMxNy8xL0ZJVXMtdl92eDJBdi1NbXBz
b3Azd25VVUQ5ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNLczANBgkqhkiG9w0BAQsFAAOCAQEArHzXEO+I1CXE
qlh0Rmdnz258xD/A8h1RGXl04ctJU8Twr/LAihMgVCKAKTWg9Ban3bEP/fSX4dDN
AeYvq+wuv5CY8aLR3plx217LqBzzMEpX6v5dbSkM8hlA6S9HetHWJ6vMvcvOANwd
Xc1jWd8sIa9antuaHD0sme1EmQFzYuNPfFhLvsg68UyRbBIanGB34sd+EgcR5jK9
tGS4flUHb1Ez68amU7/EJCT6sM2htaOBFMFaHiTlYh0/lX4pEDTaUNwcW9rgNvLf
THHNE97uQEpgxc8tQAYY+c0aWrFMZ3t2erB3MkfW01mlbumoBZRcVROGMelcb2Dk
khJa58NgFQ==
-----END CERTIFICATE-----
Generated at Fri May 3 10:04:05 2024 by rpki-client on console-fra.rpki-client.org