Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NeSwM5oLyzU5SwvNHgMQl8WrPZ4.cer
File: NeSwM5oLyzU5SwvNHgMQl8WrPZ4.cer (raw, json)
Hash identifier: jjmrHW1f1LH8jnHD0sjeQvKyc9p/kygissTO0c/iseM=
Subject key identifier: 35:E4:B0:33:9A:0B:CB:35:39:4B:0B:CD:1E:03:10:97:C5:AB:3D:9E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D6778EE8FCD044323CBC789260459
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/72/432623-06b1-4847-9829-ff333fc3c64c/1/NeSwM5oLyzU5SwvNHgMQl8WrPZ4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/72/432623-06b1-4847-9829-ff333fc3c64c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:59 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 200536
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:67:78:ee:8f:cd:04:43:23:cb:c7:89:26:04:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=35e4b0339a0bcb35394b0bcd1e031097c5ab3d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c2:da:15:9d:f1:9c:6d:30:42:00:41:7b:b8:
8e:08:74:16:35:e6:5f:ac:6c:b9:eb:dc:2b:7b:09:
2f:f9:97:8d:d0:48:20:c2:1e:32:9c:42:60:66:e2:
fa:58:80:ec:d0:9c:e2:e3:6b:69:90:b6:1c:ec:ad:
6a:03:81:06:0f:6a:f7:46:f1:f9:23:ae:19:49:65:
8d:5f:a1:80:bb:a7:4e:d7:8e:9f:50:fd:45:5f:b5:
9d:b7:ce:56:03:13:82:ce:28:eb:05:e7:cf:3e:b6:
49:f9:3c:ea:c6:b8:c2:8b:aa:a7:d8:dc:30:06:9f:
cf:22:de:30:08:2d:5a:5b:5a:ca:32:fe:8f:3c:62:
87:27:2e:b2:88:53:c3:21:b0:d6:a2:cd:0b:64:8a:
71:e3:53:27:07:36:eb:86:b2:c3:5a:d4:da:05:13:
0c:d2:78:fc:5e:f1:da:5e:0f:ff:c2:cd:a5:2b:dd:
5e:bf:e9:f2:9b:0a:74:bd:2b:9a:43:22:06:d3:b1:
b6:99:99:65:19:f2:25:5e:51:71:14:08:4c:37:ec:
03:9f:fd:7a:3f:25:b9:d9:77:c2:f0:ca:da:ad:db:
b6:db:f1:75:70:a1:46:58:4e:be:1e:9d:97:bc:12:
f3:91:08:ec:34:f4:3d:e2:e4:fd:36:fc:a5:f3:fb:
e3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E4:B0:33:9A:0B:CB:35:39:4B:0B:CD:1E:03:10:97:C5:AB:3D:9E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/432623-06b1-4847-9829-ff333fc3c64c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/432623-06b1-4847-9829-ff333fc3c64c/1/NeSwM5oLyzU5SwvNHgMQl8WrPZ4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200536
Signature Algorithm: sha256WithRSAEncryption
47:dd:12:a5:d9:ea:cc:0e:cc:34:55:bb:f2:51:21:d9:3a:39:
dc:29:ec:4d:a3:bf:18:40:9f:73:e7:e5:01:00:d9:36:a9:21:
20:6d:f1:c4:1e:27:7c:47:c7:99:a8:35:9c:f0:75:de:36:fa:
7a:06:36:2e:d1:f7:41:91:4d:70:27:b2:8f:ab:7b:70:f6:90:
ac:c4:c4:c5:87:f7:ee:6b:55:d8:72:89:b9:64:88:5f:b8:19:
f8:3a:8d:92:9b:a8:e3:c7:56:5f:80:81:6c:63:c0:de:e8:14:
d5:12:8d:97:df:0a:0b:c2:35:4b:63:d6:55:4d:05:4a:21:1d:
29:54:df:fb:45:40:81:4a:cd:bf:30:57:b0:86:f9:96:e1:7f:
e5:57:f4:61:46:17:04:33:df:5d:5a:ca:fe:7a:37:00:d5:a3:
00:37:97:97:1a:61:22:6c:3f:45:44:08:94:43:65:e0:16:50:
87:d8:88:79:e0:cf:81:94:5f:6a:28:be:16:28:27:05:1a:14:
65:ea:e0:59:d5:00:41:76:de:11:a1:b8:fa:8b:c2:6c:a9:ba:
21:46:5e:a2:0d:10:f8:4e:f7:33:cb:91:07:13:b0:fe:77:06:
ba:39:78:18:87:98:47:66:9a:d5:25:3d:85:4b:62:a2:8b:87:
db:f9:32:62
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYzCbWd47o/NBEMjy8eJJgRZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDAyOTU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNWU0YjAzMzlhMGJjYjM1Mzk0YjBiY2QxZTAzMTA5N2M1YWIzZDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsLaFZ3xnG0wQgBBe7iOCHQWNeZf
rGy569wrewkv+ZeN0Eggwh4ynEJgZuL6WIDs0Jzi42tpkLYc7K1qA4EGD2r3RvH5
I64ZSWWNX6GAu6dO146fUP1FX7Wdt85WAxOCzijrBefPPrZJ+TzqxrjCi6qn2Nww
Bp/PIt4wCC1aW1rKMv6PPGKHJy6yiFPDIbDWos0LZIpx41MnBzbrhrLDWtTaBRMM
0nj8XvHaXg//ws2lK91ev+nymwp0vSuaQyIG07G2mZllGfIlXlFxFAhMN+wDn/16
PyW52XfC8Mrardu22/F1cKFGWE6+Hp2XvBLzkQjsNPQ94uT9Nvyl8/vjPwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFDXksDOaC8s1OUsLzR4DEJfFqz2eMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcyLzQzMjYy
My0wNmIxLTQ4NDctOTgyOS1mZjMzM2ZjM2M2NGMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzIvNDMyNjIz
LTA2YjEtNDg0Ny05ODI5LWZmMzMzZmMzYzY0Yy8xL05lU3dNNW9MeXpVNVN3dk5I
Z01RbDhXclBaNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMPWDANBgkqhkiG9w0BAQsFAAOCAQEAR90SpdnqzA7M
NFW78lEh2To53CnsTaO/GECfc+flAQDZNqkhIG3xxB4nfEfHmag1nPB13jb6egY2
LtH3QZFNcCeyj6t7cPaQrMTExYf37mtV2HKJuWSIX7gZ+DqNkpuo48dWX4CBbGPA
3ugU1RKNl98KC8I1S2PWVU0FSiEdKVTf+0VAgUrNvzBXsIb5luF/5Vf0YUYXBDPf
XVrK/no3ANWjADeXlxphImw/RUQIlENl4BZQh9iIeeDPgZRfaii+FignBRoUZerg
WdUAQXbeEaG4+ovCbKm6IUZeog0Q+E73M8uRBxOw/ncGujl4GIeYR2aa1SU9hUti
oouH2/kyYg==
-----END CERTIFICATE-----
Generated at Fri May 3 06:57:53 2024 by rpki-client on console-ams.rpki-client.org