Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KTjKpqlxeOIJt8I3kdAWtnydyqQ.cer
File: KTjKpqlxeOIJt8I3kdAWtnydyqQ.cer (raw, json)
Hash identifier: L8tlTqVrUZc/pMOwhdU2LAJfjBbTTk9ADutQqq4wdAY=
Subject key identifier: 29:38:CA:A6:A9:71:78:E2:09:B7:C2:37:91:D0:16:B6:7C:9D:CA:A4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CF309D060AC6B04028A788B4CAD58E9ED
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/ebc266-c5b8-4c15-b12b-58702cda711f/1/KTjKpqlxeOIJt8I3kdAWtnydyqQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/ebc266-c5b8-4c15-b12b-58702cda711f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 10 Jan 2024 11:02:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 204012
IP: 2001:67c:d80::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f3:09:d0:60:ac:6b:04:02:8a:78:8b:4c:ad:58:e9:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 10 11:02:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2938caa6a97178e209b7c23791d016b67c9dcaa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:da:aa:1c:16:ec:24:17:30:16:88:f7:ba:ec:
b7:b2:aa:62:8f:df:91:85:9d:30:9c:27:c5:89:96:
23:fe:5d:b4:0d:bd:99:bd:46:54:ad:95:81:ad:66:
6a:e0:44:20:8f:73:70:fd:f7:c2:33:b4:62:28:da:
3a:bc:d2:3d:a3:d4:86:d4:43:55:3a:37:76:98:67:
1a:e3:aa:d3:2f:65:66:cb:33:7a:61:4b:98:96:ba:
a5:36:b6:54:1c:c1:90:f2:5b:a4:10:99:0b:4e:a3:
e4:da:dc:1f:19:cd:6d:3d:9c:66:be:1d:63:5b:df:
87:fe:b9:9e:75:1c:c0:f1:57:5c:5f:18:dd:01:6a:
39:a6:7d:1f:51:1f:d0:4e:a1:f5:73:7a:59:ff:63:
e6:9b:44:dd:ca:4c:49:75:02:70:4a:9e:c4:13:8f:
6d:93:77:06:b0:eb:a2:f3:b1:c7:2f:84:64:4e:46:
0d:a9:65:a8:19:84:ae:1c:d1:bf:40:6a:8d:4b:7a:
99:49:fc:44:46:f4:48:73:eb:54:f2:37:5f:50:5c:
6c:9f:77:1c:e1:98:67:f2:47:b9:25:8a:ad:e5:87:
47:f5:06:68:ad:26:34:c4:03:55:36:6a:be:d4:4a:
fa:5d:27:5d:77:ec:84:62:ab:b2:38:0b:13:3f:75:
45:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:38:CA:A6:A9:71:78:E2:09:B7:C2:37:91:D0:16:B6:7C:9D:CA:A4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ebc266-c5b8-4c15-b12b-58702cda711f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ebc266-c5b8-4c15-b12b-58702cda711f/1/KTjKpqlxeOIJt8I3kdAWtnydyqQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:d80::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204012
Signature Algorithm: sha256WithRSAEncryption
50:91:76:30:0d:bf:44:4a:c2:9d:a2:04:14:59:e2:f6:5b:98:
ca:ce:32:12:5a:0a:fb:06:ef:bb:3c:87:1b:60:ac:50:b4:41:
5e:8c:44:a1:48:38:12:b6:f7:29:65:45:4d:f5:52:8a:c8:24:
38:0b:df:e3:3b:6c:41:8e:56:54:4c:30:af:64:cd:51:67:d2:
3f:49:c0:50:bb:7e:e8:d1:b3:ac:05:2b:4b:42:81:90:d3:ad:
70:56:3f:96:20:29:bf:18:8d:08:dc:d5:49:94:69:ac:61:82:
07:e1:d8:d2:7b:b2:b4:de:c6:47:53:f4:5e:cc:8b:70:54:83:
cd:b6:0c:97:e2:b7:61:a4:43:3f:f3:6e:8e:98:dd:31:51:dc:
c3:aa:24:d8:fb:57:56:03:22:c0:c0:51:e7:6a:24:00:e7:fb:
f3:a1:27:4c:cb:70:bd:3d:e6:e3:ba:57:46:e4:2b:c5:1f:75:
e2:6c:0f:de:34:63:9d:40:0a:21:90:34:fd:7e:8f:45:de:fc:
38:54:35:74:06:04:7d:4a:35:06:b0:eb:f2:aa:70:30:cc:31:
63:53:c9:57:b3:78:57:72:69:87:64:ab:80:57:7b:2a:81:59:
b4:4e:ab:86:66:a5:aa:9a:bb:a2:01:83:2a:de:cb:45:f2:64:
bb:71:c6:e9
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgISAYzzCdBgrGsEAop4i0ytWOntMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTEwMTEwMjM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOTM4Y2FhNmE5NzE3OGUyMDliN2MyMzc5MWQwMTZiNjdjOWRjYWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39qqHBbsJBcwFoj3uuy3sqpij9+R
hZ0wnCfFiZYj/l20Db2ZvUZUrZWBrWZq4EQgj3Nw/ffCM7RiKNo6vNI9o9SG1ENV
Ojd2mGca46rTL2VmyzN6YUuYlrqlNrZUHMGQ8lukEJkLTqPk2twfGc1tPZxmvh1j
W9+H/rmedRzA8VdcXxjdAWo5pn0fUR/QTqH1c3pZ/2Pmm0TdykxJdQJwSp7EE49t
k3cGsOui87HHL4RkTkYNqWWoGYSuHNG/QGqNS3qZSfxERvRIc+tU8jdfUFxsn3cc
4Zhn8ke5JYqt5YdH9QZorSY0xANVNmq+1Er6XSddd+yEYquyOAsTP3VFWwIDAQAB
o4ICozCCAp8wHQYDVR0OBBYEFCk4yqapcXjiCbfCN5HQFrZ8ncqkMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NhL2ViYzI2
Ni1jNWI4LTRjMTUtYjEyYi01ODcwMmNkYTcxMWYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2EvZWJjMjY2
LWM1YjgtNGMxNS1iMTJiLTU4NzAyY2RhNzExZi8xL0tUaktwcWx4ZU9JSnQ4STNr
ZEFXdG55ZHlxUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA2AMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwMc7DANBgkqhkiG9w0BAQsFAAOCAQEAUJF2MA2/RErCnaIEFFni9luYys4y
EloK+wbvuzyHG2CsULRBXoxEoUg4Erb3KWVFTfVSisgkOAvf4ztsQY5WVEwwr2TN
UWfSP0nAULt+6NGzrAUrS0KBkNOtcFY/liApvxiNCNzVSZRprGGCB+HY0nuytN7G
R1P0XsyLcFSDzbYMl+K3YaRDP/NujpjdMVHcw6ok2PtXVgMiwMBR52okAOf786En
TMtwvT3m47pXRuQrxR914mwP3jRjnUAKIZA0/X6PRd78OFQ1dAYEfUo1BrDr8qpw
MMwxY1PJV7N4V3Jph2SrgFd7KoFZtE6rhmalqpq7ogGDKt7LRfJku3HG6Q==
-----END CERTIFICATE-----
Generated at Fri May 3 01:40:50 2024 by rpki-client on console-ams.rpki-client.org