Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.cer
File: L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.cer (raw, json)
Hash identifier: r+tMOvCqLhyEEzqncmt/cp16neRAsWBae/w+OOAvvOA=
Subject key identifier: 2F:8F:99:E8:8D:A0:46:DF:31:04:9D:97:DD:91:2A:E6:50:D5:6D:4E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA996FE991391191FAFD2037FBFE43D1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 14:35:02 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 205100
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:6f:e9:91:39:11:91:fa:fd:20:37:fb:fe:43:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 14:35:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f8f99e88da046df31049d97dd912ae650d56d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fd:0b:64:79:86:02:84:7b:ec:9f:4b:f8:a6:
6e:82:1b:44:02:7b:b7:c2:16:f0:9d:ef:47:09:1d:
24:8f:10:ca:0f:a3:f1:13:72:b2:f6:c2:7b:74:0a:
a7:88:61:c3:ac:c5:37:4b:47:b6:c3:65:5a:04:96:
7a:4b:04:90:d6:a4:6f:02:a2:63:0d:93:2d:ad:9b:
9d:57:dc:d4:b1:59:08:9a:ce:cf:bf:80:4d:a4:e3:
05:f9:33:ec:8d:40:0e:ce:55:b7:cb:45:b8:a3:2d:
17:bf:11:17:24:83:fb:20:24:e1:18:99:e8:ec:bd:
8f:41:9a:cf:80:47:ad:37:63:3f:df:2a:cb:1d:32:
75:ee:b6:b3:70:fb:33:db:82:45:e8:48:8f:ea:b1:
f4:7d:1e:2b:c4:6d:a3:89:27:f8:42:67:3a:a7:b1:
ed:58:a9:a1:80:28:53:d0:4b:0d:f5:13:f0:32:76:
c5:69:d8:04:70:23:6a:54:7f:37:a8:58:8f:f0:bd:
d5:10:fe:a8:cb:05:6c:21:03:74:57:8c:2a:16:98:
fa:9b:83:c8:6e:87:89:e9:d2:a2:6c:86:4f:8d:a2:
3d:c5:29:bd:0a:f1:6d:ff:c4:1b:db:4b:dc:74:e5:
01:fc:42:27:e8:2e:34:06:14:e3:c8:7c:f9:9f:a7:
b7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8F:99:E8:8D:A0:46:DF:31:04:9D:97:DD:91:2A:E6:50:D5:6D:4E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205100
Signature Algorithm: sha256WithRSAEncryption
26:db:b7:80:26:4f:39:59:42:7b:4f:a8:1c:6d:1e:71:30:f2:
89:06:7a:ef:fa:31:f6:88:ca:49:42:57:0b:eb:9e:99:53:8b:
aa:13:02:b9:cc:bf:61:1c:5b:f4:24:1e:dc:c1:92:5a:bb:90:
e5:2c:b5:f1:5b:ad:46:0a:ab:ac:d7:78:d8:44:0d:1f:e0:af:
aa:4c:73:70:97:8e:f1:69:29:93:f4:3a:27:9e:1e:20:54:76:
d4:7f:43:43:7f:de:5b:81:d6:ad:97:20:fe:79:ee:b5:93:0a:
10:51:95:96:cf:da:70:76:ed:84:45:e4:f9:87:89:fd:8d:a8:
d8:43:3f:89:5b:0d:26:23:48:66:1e:c1:05:f8:be:19:40:14:
d6:ea:af:ec:f4:04:dc:d7:16:5d:d8:1b:0e:ba:28:b1:ac:f2:
06:02:30:2c:9b:d4:2f:3c:18:ee:bb:9e:f5:13:90:2c:54:47:
a7:6a:98:e5:e8:59:0f:a2:7f:4f:21:94:ed:d8:b1:13:61:8a:
d6:4a:ce:75:06:66:93:34:fb:76:61:95:b1:64:8a:66:43:7b:
41:1c:18:dc:fb:7b:d0:98:2b:31:ab:e8:62:84:c5:12:25:d1:
49:73:c5:de:6c:cd:bd:e2:86:93:b7:6f:46:6d:42:68:f9:cf:
1f:53:10:ff
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYzKmW/pkTkRkfr9IDf7/kPRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTQzNTAyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjhmOTllODhkYTA0NmRmMzEwNDlkOTdkZDkxMmFlNjUwZDU2ZDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyP0LZHmGAoR77J9L+KZughtEAnu3
whbwne9HCR0kjxDKD6PxE3Ky9sJ7dAqniGHDrMU3S0e2w2VaBJZ6SwSQ1qRvAqJj
DZMtrZudV9zUsVkIms7Pv4BNpOMF+TPsjUAOzlW3y0W4oy0XvxEXJIP7ICThGJno
7L2PQZrPgEetN2M/3yrLHTJ17razcPsz24JF6EiP6rH0fR4rxG2jiSf4Qmc6p7Ht
WKmhgChT0EsN9RPwMnbFadgEcCNqVH83qFiP8L3VEP6oywVsIQN0V4wqFpj6m4PI
boeJ6dKibIZPjaI9xSm9CvFt/8Qb20vcdOUB/EIn6C40BhTjyHz5n6e3dQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFC+PmeiNoEbfMQSdl92RKuZQ1W1OMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUyLzQ0Njdl
OC05Yjk1LTQwNTAtYjYzOS0xMmQ1MmYxZTU0ZGIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTIvNDQ2N2U4
LTliOTUtNDA1MC1iNjM5LTEyZDUyZjFlNTRkYi8xL0w0LVo2STJnUnQ4eEJKMlgz
WkVxNWxEVmJVNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMhLDANBgkqhkiG9w0BAQsFAAOCAQEAJtu3gCZPOVlC
e0+oHG0ecTDyiQZ67/ox9ojKSUJXC+uemVOLqhMCucy/YRxb9CQe3MGSWruQ5Sy1
8VutRgqrrNd42EQNH+CvqkxzcJeO8Wkpk/Q6J54eIFR21H9DQ3/eW4HWrZcg/nnu
tZMKEFGVls/acHbthEXk+YeJ/Y2o2EM/iVsNJiNIZh7BBfi+GUAU1uqv7PQE3NcW
XdgbDroosazyBgIwLJvULzwY7rue9ROQLFRHp2qY5ehZD6J/TyGU7dixE2GK1krO
dQZmkzT7dmGVsWSKZkN7QRwY3Pt70JgrMavoYoTFEiXRSXPF3mzNveKGk7dvRm1C
aPnPH1MQ/w==
-----END CERTIFICATE-----
Generated at Fri May 3 13:11:21 2024 by rpki-client on console-fra.rpki-client.org