Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Fbb5dyqN4qAq9hpOpifT5R2E-b0.cer
File: Fbb5dyqN4qAq9hpOpifT5R2E-b0.cer (raw, json)
Hash identifier: 53iZvi5C1c0CiLyqwkq7smolfIC5oEKzECqz+aUtdwo=
Subject key identifier: 15:B6:F9:77:2A:8D:E2:A0:2A:F6:1A:4E:A6:27:D3:E5:1D:84:F9:BD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB58C5372CFBDDCD7E4C4108118B03
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:30:04 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 205953
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Apr 2024 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:58:c5:37:2c:fb:dd:cd:7e:4c:41:08:11:8b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15b6f9772a8de2a02af61a4ea627d3e51d84f9bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6a:f5:7e:82:53:5a:a9:07:16:b6:b9:be:dc:
b2:1a:6a:d7:5f:b4:01:59:f7:da:fd:1f:07:67:0f:
2b:ee:d8:0f:46:b0:6c:6e:d5:d3:8c:d7:b5:1e:ea:
05:94:fc:93:cf:7f:aa:13:1f:43:cb:c9:59:74:31:
58:eb:a8:e5:f3:ad:99:30:2b:cc:b5:61:86:2c:02:
65:e6:02:81:9e:97:ec:e6:8e:22:62:05:a2:ee:6b:
74:59:ba:4d:f1:6e:ae:61:91:df:8f:a7:99:31:29:
64:5a:78:29:76:3a:e9:5d:99:58:68:95:4f:75:52:
40:a7:b9:a7:54:84:59:f4:a3:fb:88:20:03:ba:bd:
9d:36:b8:84:14:cf:c1:78:c9:2f:af:b2:96:44:f1:
4b:d6:21:74:5a:07:9a:8f:af:97:4f:5a:31:98:45:
2d:1d:2b:10:b1:cc:e5:ef:25:f8:8d:5b:41:1e:1e:
da:d4:b1:0e:61:72:b3:94:f8:60:c5:3b:32:11:95:
2b:41:9c:e9:80:b4:dd:49:25:96:18:3a:23:bf:bf:
dc:24:fa:96:64:f4:64:b8:17:a7:12:f9:70:7d:54:
a9:41:28:03:54:b2:18:3a:e8:8f:e3:d7:b1:e3:be:
33:ee:c5:d9:6b:97:f1:bd:33:e7:b3:f6:3d:be:1a:
f3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B6:F9:77:2A:8D:E2:A0:2A:F6:1A:4E:A6:27:D3:E5:1D:84:F9:BD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205953
Signature Algorithm: sha256WithRSAEncryption
5d:aa:ee:31:b5:0d:17:a9:fa:7d:90:ea:ea:73:fd:1d:d9:5f:
53:1c:c3:61:4f:14:e5:22:41:f4:f5:b3:fb:b3:c4:42:ef:b7:
43:c3:dc:cc:19:5f:ce:6e:e8:11:37:66:37:3f:c1:7a:d7:c6:
f8:aa:4f:b8:9f:d1:e1:b5:81:ee:3b:3b:bc:01:11:dd:5e:25:
bf:d0:1f:15:ee:60:17:0c:59:fa:4a:2a:2b:79:45:0c:d6:7c:
40:4e:5a:48:be:57:e4:ba:39:1d:8e:96:9d:ac:b1:cc:bd:8b:
3e:cd:03:b6:cc:c6:e5:cc:e9:1d:18:91:e0:30:39:12:da:0d:
b0:37:2b:c9:e7:c2:29:6f:b1:2b:f2:76:19:a0:59:70:ba:09:
01:50:ba:53:17:f0:34:e0:70:e2:55:71:ff:22:fb:b8:fd:bb:
dd:35:8d:10:de:6c:da:47:66:74:5b:7d:a9:dd:78:f1:25:60:
dc:fb:06:50:ca:ca:95:b8:0f:5e:93:a4:50:6e:61:30:82:12:
6f:33:b1:ab:ed:25:26:d1:95:1f:4b:4d:32:3d:5c:9e:36:3a:
27:f2:04:66:68:0f:da:16:0b:d5:6f:d2:a7:d7:26:20:15:6e:
97:ed:b0:07:39:0e:2e:49:f2:05:60:27:57:fc:4e:d4:ad:29:
12:12:26:1b
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYzC21jFNyz73c1+TEEIEYsDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDIzMDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWI2Zjk3NzJhOGRlMmEwMmFmNjFhNGVhNjI3ZDNlNTFkODRmOWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWr1foJTWqkHFra5vtyyGmrXX7QB
Wffa/R8HZw8r7tgPRrBsbtXTjNe1HuoFlPyTz3+qEx9Dy8lZdDFY66jl862ZMCvM
tWGGLAJl5gKBnpfs5o4iYgWi7mt0WbpN8W6uYZHfj6eZMSlkWngpdjrpXZlYaJVP
dVJAp7mnVIRZ9KP7iCADur2dNriEFM/BeMkvr7KWRPFL1iF0Wgeaj6+XT1oxmEUt
HSsQsczl7yX4jVtBHh7a1LEOYXKzlPhgxTsyEZUrQZzpgLTdSSWWGDojv7/cJPqW
ZPRkuBenEvlwfVSpQSgDVLIYOuiP49ex474z7sXZa5fxvTPns/Y9vhrzoQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFBW2+XcqjeKgKvYaTqYn0+UdhPm9MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ0LzY1MzQw
Yi02YWYwLTQ0NDQtYjQyNi1lNTc5ZTJhYWY5ZWEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvNjUzNDBi
LTZhZjAtNDQ0NC1iNDI2LWU1NzllMmFhZjllYS8xL0ZiYjVkeXFONHFBcTlocE9w
aWZUNVIyRS1iMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMkgTANBgkqhkiG9w0BAQsFAAOCAQEAXaruMbUNF6n6
fZDq6nP9HdlfUxzDYU8U5SJB9PWz+7PEQu+3Q8PczBlfzm7oETdmNz/BetfG+KpP
uJ/R4bWB7js7vAER3V4lv9AfFe5gFwxZ+koqK3lFDNZ8QE5aSL5X5Lo5HY6Wnayx
zL2LPs0DtszG5czpHRiR4DA5EtoNsDcryefCKW+xK/J2GaBZcLoJAVC6UxfwNOBw
4lVx/yL7uP273TWNEN5s2kdmdFt9qd148SVg3PsGUMrKlbgPXpOkUG5hMIISbzOx
q+0lJtGVH0tNMj1cnjY6J/IEZmgP2hYL1W/Sp9cmIBVul+2wBzkOLknyBWAnV/xO
1K0pEhImGw==
-----END CERTIFICATE-----
Generated at Thu Apr 18 01:54:55 2024 by rpki-client on console-ams.rpki-client.org