Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/G_GA7KTkQF6Heotjkjp1iNd-OdI.cer
File: G_GA7KTkQF6Heotjkjp1iNd-OdI.cer (raw, json)
Hash identifier: 5AMichXlI9p8xkPF1SWW8g267p5oEP1ihDWHZs6DU9c=
Subject key identifier: 1B:F1:80:EC:A4:E4:40:5E:87:7A:8B:63:92:3A:75:88:D7:7E:39:D2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018EE14D2C1BE93DB9D801D9C47C4BA64053
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 15 Apr 2024 10:28:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215697
IP: 2001:678:554::/48
IP: 2001:67c:e64::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e1:4d:2c:1b:e9:3d:b9:d8:01:d9:c4:7c:4b:a6:40:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 15 10:28:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1bf180eca4e4405e877a8b63923a7588d77e39d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f4:54:78:76:ba:c5:6f:cf:41:3c:ed:f6:e4:
c2:58:a0:26:db:7a:88:46:b6:6d:d7:f8:68:b5:bd:
4f:10:7d:45:31:1e:3a:a1:0d:43:b4:ca:60:54:6d:
0c:02:36:d0:6c:c6:76:72:73:75:da:11:31:70:fb:
b7:2f:81:60:eb:ea:2c:56:9e:55:91:20:d6:2d:2b:
62:e8:93:ab:e6:6f:6f:e6:29:c5:e7:08:cf:b8:23:
b2:5f:c1:15:c1:bb:71:b8:f0:f6:e5:f5:95:cf:1e:
36:8d:61:11:83:a5:75:01:eb:3c:7b:95:36:cf:38:
bf:ec:0f:c6:73:84:c8:3c:38:51:08:f2:9d:8b:1d:
d1:68:fc:4d:41:8e:ce:5e:c7:ab:2a:dc:55:0d:e5:
7d:15:8f:ee:d8:38:ad:28:84:48:56:fc:b7:9a:f6:
b7:96:ff:c4:6d:89:c6:30:4e:de:49:b4:09:76:e2:
48:f3:03:95:55:35:82:0b:04:d3:d6:91:4d:a5:87:
a2:d9:8f:b4:8d:53:f5:9d:b0:26:85:63:26:aa:e1:
2e:7e:d7:07:5a:0f:2c:e2:df:98:a1:ed:1a:b9:ac:
c0:15:4e:b3:10:e0:66:c4:bc:6a:f4:e9:a8:65:08:
76:23:1b:de:5f:ba:40:9e:3f:bc:87:16:59:f9:9f:
85:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F1:80:EC:A4:E4:40:5E:87:7A:8B:63:92:3A:75:88:D7:7E:39:D2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:554::/48
2001:67c:e64::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215697
Signature Algorithm: sha256WithRSAEncryption
91:9a:53:f5:15:87:d6:18:13:4c:aa:b2:2b:9c:93:ba:65:3f:
17:ff:f9:37:30:a8:ca:da:49:41:20:bb:a9:1c:3b:cd:61:67:
b2:df:83:5d:83:dd:08:75:15:67:75:8b:23:b1:e3:df:83:5e:
3f:09:22:2c:f6:8f:76:0e:ad:eb:3f:f7:a3:ca:32:d7:bb:df:
b6:a0:40:a3:80:56:3e:da:3e:a7:ef:97:67:51:d0:88:6c:91:
97:77:57:65:4d:4d:39:25:3f:ff:34:6b:e2:06:0a:3e:ca:78:
6d:d5:0f:3d:8e:7b:ff:1b:9a:78:88:31:c2:de:aa:60:9b:a3:
cd:5c:51:f8:e4:27:a3:46:b9:17:89:b4:ff:34:2c:b0:0a:e6:
62:fb:74:34:27:32:4c:b0:f0:c4:62:2e:82:84:92:b6:48:b1:
24:46:f7:23:9a:c7:ca:f8:e4:93:e4:c1:f7:d9:e5:1d:77:ed:
ab:4c:f8:f1:39:59:bf:ff:0f:2d:51:00:ed:d1:d4:92:06:bd:
d8:b5:39:bb:1f:e7:cc:c5:96:96:fc:56:61:a1:ad:54:d4:1d:
a5:c1:9a:59:8b:d2:89:45:3b:0c:00:68:05:1d:9b:a4:3a:d2:
32:a0:7b:34:88:77:a4:78:51:40:85:ec:df:5b:dd:f9:93:ab:
e3:66:90:9a
-----BEGIN CERTIFICATE-----
MIIFoDCCBIigAwIBAgISAY7hTSwb6T252AHZxHxLpkBTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNDE1MTAyODM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYmYxODBlY2E0ZTQ0MDVlODc3YThiNjM5MjNhNzU4OGQ3N2UzOWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufRUeHa6xW/PQTzt9uTCWKAm23qI
RrZt1/hotb1PEH1FMR46oQ1DtMpgVG0MAjbQbMZ2cnN12hExcPu3L4Fg6+osVp5V
kSDWLSti6JOr5m9v5inF5wjPuCOyX8EVwbtxuPD25fWVzx42jWERg6V1Aes8e5U2
zzi/7A/Gc4TIPDhRCPKdix3RaPxNQY7OXserKtxVDeV9FY/u2DitKIRIVvy3mva3
lv/EbYnGME7eSbQJduJI8wOVVTWCCwTT1pFNpYei2Y+0jVP1nbAmhWMmquEuftcH
Wg8s4t+Yoe0auazAFU6zEOBmxLxq9OmoZQh2IxveX7pAnj+8hxZZ+Z+FcwIDAQAB
o4ICrDCCAqgwHQYDVR0OBBYEFBvxgOyk5EBeh3qLY5I6dYjXfjnSMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JhL2U4OTIy
ZC1iMzA0LTQxODgtYmRhNi1kYzZiMWZmNzJjMTgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmEvZTg5MjJk
LWIzMDQtNDE4OC1iZGE2LWRjNmIxZmY3MmMxOC8xL0dfR0E3S1RrUUY2SGVvdGpr
anAxaU5kLU9kSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF
BwEHAQH/BBwwGjAYBAIAAjASAwcAIAEGeAVUAwcAIAEGfA5kMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwNKkTANBgkqhkiG9w0BAQsFAAOCAQEAkZpT9RWH1hgTTKqy
K5yTumU/F//5NzCoytpJQSC7qRw7zWFnst+DXYPdCHUVZ3WLI7Hj34NePwkiLPaP
dg6t6z/3o8oy17vftqBAo4BWPto+p++XZ1HQiGyRl3dXZU1NOSU//zRr4gYKPsp4
bdUPPY57/xuaeIgxwt6qYJujzVxR+OQno0a5F4m0/zQssArmYvt0NCcyTLDwxGIu
goSStkixJEb3I5rHyvjkk+TB99nlHXftq0z48TlZv/8PLVEA7dHUkga92LU5ux/n
zMWWlvxWYaGtVNQdpcGaWYvSiUU7DABoBR2bpDrSMqB7NIh3pHhRQIXs31vd+ZOr
42aQmg==
-----END CERTIFICATE-----
Generated at Fri May 3 07:24:53 2024 by rpki-client on console-fra.rpki-client.org