Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/N8P6I-SwCEN8lDXqfMWaI85pAmM.cer
File: N8P6I-SwCEN8lDXqfMWaI85pAmM.cer (raw, json)
Hash identifier: LqkunxAUyNz6kUCLLeQu6tANFxrlFVxg5uvEVnJRaXU=
Subject key identifier: 37:C3:FA:23:E4:B0:08:43:7C:94:35:EA:7C:C5:9A:23:CE:69:02:63
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E95A55D5AE2221DAC8F6580707EB7168C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e6/b10b09-8022-45b2-87b9-7f4ada472656/1/N8P6I-SwCEN8lDXqfMWaI85pAmM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e6/b10b09-8022-45b2-87b9-7f4ada472656/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 31 Mar 2024 17:53:46 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 200965
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:95:a5:5d:5a:e2:22:1d:ac:8f:65:80:70:7e:b7:16:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 31 17:53:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=37c3fa23e4b008437c9435ea7cc59a23ce690263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:27:d8:54:7d:53:d1:01:8d:2b:a5:6b:f8:77:
18:1c:c1:aa:23:42:b5:46:8b:f3:35:5f:21:be:3a:
62:bf:9b:1b:d2:4b:96:10:6e:a4:08:4a:81:5c:1a:
d5:24:58:4c:05:f8:fe:4e:fb:61:56:39:ef:5a:65:
c5:c9:90:87:1c:40:45:e5:49:19:ea:45:6a:ca:a7:
52:71:92:fe:07:f4:f4:8c:8e:93:4f:ac:63:f1:a8:
4c:da:53:49:10:ec:fb:2a:81:c8:a7:f2:01:1b:e4:
e8:c2:3e:38:a7:65:cc:5c:d7:45:9e:59:9f:d3:9c:
e0:99:82:f6:ca:bd:d5:7c:2b:10:36:06:04:df:6a:
3d:9c:65:f3:07:42:5d:62:98:f1:6f:6e:9d:70:69:
f2:d1:26:0a:ad:dc:da:07:2b:ad:b4:2e:c2:58:08:
9f:e2:96:3e:ae:23:89:9a:db:17:5e:b5:2d:20:d3:
fd:1a:c8:88:f0:c0:96:e0:1c:33:42:bc:bd:a4:6c:
d1:d2:7c:52:49:b1:19:63:cb:b2:ea:86:19:c6:3a:
7d:6b:46:ea:ea:9c:66:f2:21:4f:16:23:83:a1:64:
0d:93:24:e1:b6:a3:39:a0:ec:76:61:fd:b2:07:60:
d4:89:98:d3:6e:91:b3:19:3e:0a:70:49:55:0c:26:
d7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C3:FA:23:E4:B0:08:43:7C:94:35:EA:7C:C5:9A:23:CE:69:02:63
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/b10b09-8022-45b2-87b9-7f4ada472656/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/b10b09-8022-45b2-87b9-7f4ada472656/1/N8P6I-SwCEN8lDXqfMWaI85pAmM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200965
Signature Algorithm: sha256WithRSAEncryption
18:41:3a:e9:cf:db:5a:61:25:5b:56:8f:5e:28:35:57:52:a0:
49:5f:cb:a2:8c:0c:f6:54:4c:1e:2a:4b:3f:cb:2d:78:83:85:
fa:3a:51:a9:fe:3f:af:9a:69:c4:e4:8d:84:3f:17:6a:35:9c:
14:89:4e:8c:fc:d2:c2:04:d5:36:48:3a:16:ce:68:74:ad:72:
e8:da:72:74:39:fa:8d:ee:2c:b9:e0:f3:5d:33:8f:58:17:20:
83:95:b2:79:d8:b9:e2:25:a4:7e:4e:72:c1:da:18:09:3a:04:
68:13:c0:48:f7:0b:b5:b8:9d:65:04:4c:2b:27:88:64:1f:8c:
61:e1:4f:61:d2:ab:63:f9:4c:be:a2:85:7e:97:27:fd:cd:67:
ee:27:93:ae:ad:48:86:53:ad:6f:b2:2f:51:88:e0:03:6e:ed:
bc:4f:fd:94:05:a8:5b:07:71:f4:f2:b1:21:90:16:bb:67:ab:
de:8d:7e:1f:a5:82:eb:10:41:c2:91:de:9a:35:58:e9:69:d7:
99:f8:74:ce:7d:eb:67:30:14:0d:54:ed:12:ab:ce:91:c2:d1:
a8:ac:ac:61:76:0b:8e:f3:af:2f:52:66:63:68:1c:f5:6d:c8:
47:63:7b:d5:41:80:d6:50:22:c4:d8:ad:24:b3:94:7d:2b:58:
4c:f6:a0:0a
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAY6VpV1a4iIdrI9lgHB+txaMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMzMxMTc1MzQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzN2MzZmEyM2U0YjAwODQzN2M5NDM1ZWE3Y2M1OWEyM2NlNjkwMjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSfYVH1T0QGNK6Vr+HcYHMGqI0K1
RovzNV8hvjpiv5sb0kuWEG6kCEqBXBrVJFhMBfj+TvthVjnvWmXFyZCHHEBF5UkZ
6kVqyqdScZL+B/T0jI6TT6xj8ahM2lNJEOz7KoHIp/IBG+Towj44p2XMXNdFnlmf
05zgmYL2yr3VfCsQNgYE32o9nGXzB0JdYpjxb26dcGny0SYKrdzaByuttC7CWAif
4pY+riOJmtsXXrUtINP9GsiI8MCW4BwzQry9pGzR0nxSSbEZY8uy6oYZxjp9a0bq
6pxm8iFPFiODoWQNkyThtqM5oOx2Yf2yB2DUiZjTbpGzGT4KcElVDCbX+QIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFDfD+iPksAhDfJQ16nzFmiPOaQJjMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U2L2IxMGIw
OS04MDIyLTQ1YjItODdiOS03ZjRhZGE0NzI2NTYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTYvYjEwYjA5
LTgwMjItNDViMi04N2I5LTdmNGFkYTQ3MjY1Ni8xL044UDZJLVN3Q0VOOGxEWHFm
TVdhSTg1cEFtTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMRBTANBgkqhkiG9w0BAQsFAAOCAQEAGEE66c/bWmEl
W1aPXig1V1KgSV/LoowM9lRMHipLP8steIOF+jpRqf4/r5ppxOSNhD8XajWcFIlO
jPzSwgTVNkg6Fs5odK1y6NpydDn6je4sueDzXTOPWBcgg5Wyedi54iWkfk5ywdoY
CToEaBPASPcLtbidZQRMKyeIZB+MYeFPYdKrY/lMvqKFfpcn/c1n7ieTrq1IhlOt
b7IvUYjgA27tvE/9lAWoWwdx9PKxIZAWu2er3o1+H6WC6xBBwpHemjVY6WnXmfh0
zn3rZzAUDVTtEqvOkcLRqKysYXYLjvOvL1JmY2gc9W3IR2N71UGA1lAixNitJLOU
fStYTPagCg==
-----END CERTIFICATE-----
Generated at Fri May 3 11:30:01 2024 by rpki-client on console-ams.rpki-client.org