Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JK_wO1q_sXhyXKbpD149mMumjr8.cer
File: JK_wO1q_sXhyXKbpD149mMumjr8.cer (raw, json)
Hash identifier: QxiwRz++6pPjwF62vlJQ8C7nPR48fJ0WhgHQhgzGOcU=
Subject key identifier: 24:AF:F0:3B:5A:BF:B1:78:72:5C:A6:E9:0F:5E:3D:98:CB:A6:8E:BF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94DACBAB3769D4931E7F7C0B20CE0C5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/ab8137-3753-4eca-a94e-8c2130a35016/1/JK_wO1q_sXhyXKbpD149mMumjr8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/ab8137-3753-4eca-a94e-8c2130a35016/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:32:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 216305
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:ac:ba:b3:76:9d:49:31:e7:f7:c0:b2:0c:e0:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:32:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24aff03b5abfb178725ca6e90f5e3d98cba68ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ff:ef:3f:75:f0:80:eb:17:a6:ba:da:16:0f:
ec:c6:82:d6:15:1a:d4:46:8c:d6:df:d3:57:45:50:
2b:49:fd:ce:ac:9a:61:1d:18:64:37:99:8a:c8:b8:
52:e6:52:0c:41:08:ba:05:d7:e4:4e:f6:63:04:0e:
73:54:d9:75:09:53:2c:b3:86:1b:70:a9:b9:ff:b3:
9f:90:33:c5:97:35:28:af:c4:fb:43:b3:52:f8:2e:
c1:1d:8f:81:0d:a2:b2:cd:08:cd:1b:18:7f:bd:14:
cf:0f:bf:c9:ea:d9:34:a9:50:a0:12:b6:52:b0:98:
3a:ee:2c:fc:67:17:9a:ee:29:d3:a1:5d:f7:35:b3:
f1:29:fb:07:f0:03:e2:6a:9d:4b:8a:52:a7:c1:50:
b3:53:61:b2:1e:48:4f:c0:b9:46:82:9d:b0:c4:b2:
86:34:c2:36:c2:00:4e:23:cb:c2:55:54:33:51:7e:
0f:c8:cb:22:23:dc:88:10:87:de:7d:56:df:a4:00:
3b:0e:cb:28:a7:63:8f:65:c3:4b:07:ea:a3:18:ea:
33:2e:45:b8:28:2f:b2:36:3e:e8:07:df:09:13:47:
b4:16:ac:a5:fa:16:a0:86:e3:c3:d6:8c:04:f9:a5:
87:93:e9:3c:df:03:ed:6e:b1:0e:ba:30:f3:4d:60:
b2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:AF:F0:3B:5A:BF:B1:78:72:5C:A6:E9:0F:5E:3D:98:CB:A6:8E:BF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ab8137-3753-4eca-a94e-8c2130a35016/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ab8137-3753-4eca-a94e-8c2130a35016/1/JK_wO1q_sXhyXKbpD149mMumjr8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216305
Signature Algorithm: sha256WithRSAEncryption
40:76:f6:85:35:1f:b0:41:1d:74:d0:66:6f:21:bf:ea:07:a5:
f9:7d:82:a0:fb:27:bd:de:00:df:b8:03:90:f2:dd:8b:ba:f4:
65:a5:7f:4d:58:19:cc:77:f3:fe:05:b4:5b:09:c4:c4:e8:31:
e0:92:9a:07:62:0a:40:61:95:5e:3e:69:18:c6:e9:93:81:f1:
17:84:68:a3:dd:90:3e:ae:c7:90:2e:30:0a:6f:4d:3e:38:4c:
e8:b3:4e:0e:e7:22:25:f2:22:55:95:bb:89:80:e2:01:d7:3e:
61:41:1a:90:b2:18:7a:e2:6f:50:6f:96:14:ee:d8:86:e1:ff:
2b:9b:bc:ab:16:83:5a:89:92:08:42:5a:44:b1:98:64:64:f0:
dc:0a:3b:f9:d0:74:73:27:17:dc:1f:ea:76:20:17:a0:de:87:
55:55:95:2f:53:65:a1:59:c2:26:26:9c:10:a2:a6:81:ff:ba:
76:89:02:04:30:5e:06:7c:31:4b:1c:53:68:b5:bd:25:75:61:
11:cb:aa:98:65:82:dc:cb:08:ee:41:f7:cc:2b:0b:71:49:12:
ef:90:1f:88:33:79:b1:8d:39:21:76:a0:a4:75:cf:45:04:62:
f7:d0:2a:f1:92:62:89:f1:88:3e:50:c6:39:b1:da:49:9e:12:
c6:73:86:a4
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYzJTay6s3adSTHn98CyDODFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDgzMjQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNGFmZjAzYjVhYmZiMTc4NzI1Y2E2ZTkwZjVlM2Q5OGNiYTY4ZWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp//vP3XwgOsXprraFg/sxoLWFRrU
RozW39NXRVArSf3OrJphHRhkN5mKyLhS5lIMQQi6BdfkTvZjBA5zVNl1CVMss4Yb
cKm5/7OfkDPFlzUor8T7Q7NS+C7BHY+BDaKyzQjNGxh/vRTPD7/J6tk0qVCgErZS
sJg67iz8Zxea7inToV33NbPxKfsH8APiap1LilKnwVCzU2GyHkhPwLlGgp2wxLKG
NMI2wgBOI8vCVVQzUX4PyMsiI9yIEIfefVbfpAA7Dssop2OPZcNLB+qjGOozLkW4
KC+yNj7oB98JE0e0Fqyl+haghuPD1owE+aWHk+k83wPtbrEOujDzTWCy7QIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFCSv8Dtav7F4clym6Q9ePZjLpo6/MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NhL2FiODEz
Ny0zNzUzLTRlY2EtYTk0ZS04YzIxMzBhMzUwMTYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2EvYWI4MTM3
LTM3NTMtNGVjYS1hOTRlLThjMjEzMGEzNTAxNi8xL0pLX3dPMXFfc1hoeVhLYnBE
MTQ5bU11bWpyOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNM8TANBgkqhkiG9w0BAQsFAAOCAQEAQHb2hTUfsEEd
dNBmbyG/6gel+X2CoPsnvd4A37gDkPLdi7r0ZaV/TVgZzHfz/gW0WwnExOgx4JKa
B2IKQGGVXj5pGMbpk4HxF4Roo92QPq7HkC4wCm9NPjhM6LNODuciJfIiVZW7iYDi
Adc+YUEakLIYeuJvUG+WFO7YhuH/K5u8qxaDWomSCEJaRLGYZGTw3Ao7+dB0cycX
3B/qdiAXoN6HVVWVL1NloVnCJiacEKKmgf+6dokCBDBeBnwxSxxTaLW9JXVhEcuq
mGWC3MsI7kH3zCsLcUkS75AfiDN5sY05IXagpHXPRQRi99Aq8ZJiifGIPlDGObHa
SZ4SxnOGpA==
-----END CERTIFICATE-----
Generated at Mon Nov 25 09:25:15 2024 by rpki-client on console-ams.rpki-client.org