Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PapdJNy-WGLoLk9c1RNPnlwjwlg.cer
File: PapdJNy-WGLoLk9c1RNPnlwjwlg.cer (raw, json)
Hash identifier: zKXB6xAMP/pVE1fWp2Rgc2ppVAOsD+C52jEiwHvm7yE=
Subject key identifier: 3D:AA:5D:24:DC:BE:58:62:E8:2E:4F:5C:D5:13:4F:9E:5C:23:C2:58
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BC20A33E7C1977F3DA719DC354759F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/07ac9f-7b4c-44fd-964e-c3409ec161b7/1/PapdJNy-WGLoLk9c1RNPnlwjwlg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/07ac9f-7b4c-44fd-964e-c3409ec161b7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:18 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 61364
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:20:a3:3e:7c:19:77:f3:da:71:9d:c3:54:75:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3daa5d24dcbe5862e82e4f5cd5134f9e5c23c258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:29:f5:c8:90:7c:1a:d0:1b:27:17:61:d9:6f:
96:5c:fc:89:79:95:f7:fe:15:51:8e:11:da:2f:cc:
75:b0:9c:15:53:f4:5e:7f:4a:46:f4:35:6b:10:b7:
4b:11:03:3b:26:7a:3e:d6:d5:c5:45:79:3b:13:a6:
c6:41:5d:9c:d5:ef:97:c6:eb:d3:fc:d3:f3:5c:9e:
48:17:ad:b5:1c:8d:a2:e0:8a:14:17:2f:d0:a5:85:
63:8e:cc:0f:b6:51:ac:6c:97:6f:8a:83:37:02:9f:
53:5a:1e:7e:b5:79:00:18:70:0f:a5:56:fe:01:07:
00:4f:b1:6f:11:91:f2:32:b8:a5:6a:47:17:4b:80:
de:4b:22:0c:ef:79:1d:93:cd:93:bf:b0:d2:ff:2d:
f2:18:68:a7:1b:d7:1f:0a:4f:e3:58:98:05:cf:c1:
14:3f:07:92:46:b2:42:cb:90:e3:8f:cb:58:35:c1:
29:f3:7e:be:cb:e7:2d:59:c3:48:25:0e:ff:85:77:
45:63:dc:8e:f7:41:4a:ed:cd:53:c0:3f:5f:8a:1a:
c9:6b:09:12:81:41:13:f3:6e:89:04:c6:c5:ba:64:
e6:6b:a7:9c:35:4a:e3:55:ee:cb:e2:73:dc:f4:54:
ab:5a:75:f1:1e:70:61:54:92:2b:ec:9b:e2:90:6e:
81:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:AA:5D:24:DC:BE:58:62:E8:2E:4F:5C:D5:13:4F:9E:5C:23:C2:58
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/07ac9f-7b4c-44fd-964e-c3409ec161b7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/07ac9f-7b4c-44fd-964e-c3409ec161b7/1/PapdJNy-WGLoLk9c1RNPnlwjwlg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61364
Signature Algorithm: sha256WithRSAEncryption
2e:3c:eb:56:a4:86:9d:0c:65:e3:4b:e6:1c:3a:10:42:ce:cc:
57:6a:c7:44:d0:89:2b:78:ff:c4:1d:78:c5:46:d0:92:96:51:
c8:66:6e:37:a6:24:51:81:7d:a8:48:c5:95:d7:03:49:4b:ed:
53:f7:a0:67:2b:cc:8e:21:65:5c:66:3f:4c:4b:f4:8d:e2:fd:
4f:75:22:d9:bc:39:a3:72:14:7c:25:71:6d:93:a2:34:dd:1f:
03:99:4f:1d:44:0e:20:c9:d8:8c:6a:6e:d9:59:91:14:1c:ba:
a4:87:37:b6:61:d1:fa:03:73:ac:08:09:27:cd:53:f0:73:24:
e2:2c:3a:86:e0:20:d3:37:82:5f:a5:23:40:eb:60:e4:79:4a:
96:e3:3b:df:a4:dc:99:1c:5a:a0:7c:9d:65:99:eb:9c:59:a4:
1b:7b:f4:4a:36:4c:19:50:fe:3b:88:91:25:94:a1:09:09:bd:
c7:03:19:a0:08:94:84:55:80:40:e3:ae:7d:f7:de:f2:9c:17:
b1:7b:fa:66:ba:f1:d9:d3:a9:49:09:1f:eb:cd:7b:15:c0:3c:
e9:fc:56:5f:7b:48:3d:f9:5d:14:2c:08:c6:8a:7b:f8:9e:50:
19:41:d7:f3:55:e7:f4:01:19:42:eb:92:aa:f5:a7:ec:95:e7:
de:de:e7:c9
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYzJvCCjPnwZd/PacZ3DVHWfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTAzMzE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZGFhNWQyNGRjYmU1ODYyZTgyZTRmNWNkNTEzNGY5ZTVjMjNjMjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCn1yJB8GtAbJxdh2W+WXPyJeZX3
/hVRjhHaL8x1sJwVU/Ref0pG9DVrELdLEQM7Jno+1tXFRXk7E6bGQV2c1e+XxuvT
/NPzXJ5IF621HI2i4IoUFy/QpYVjjswPtlGsbJdvioM3Ap9TWh5+tXkAGHAPpVb+
AQcAT7FvEZHyMrilakcXS4DeSyIM73kdk82Tv7DS/y3yGGinG9cfCk/jWJgFz8EU
PweSRrJCy5Djj8tYNcEp836+y+ctWcNIJQ7/hXdFY9yO90FK7c1TwD9fihrJawkS
gUET826JBMbFumTma6ecNUrjVe7L4nPc9FSrWnXxHnBhVJIr7JvikG6BZQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFD2qXSTcvlhi6C5PXNUTT55cI8JYMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JhLzA3YWM5
Zi03YjRjLTQ0ZmQtOTY0ZS1jMzQwOWVjMTYxYjcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmEvMDdhYzlm
LTdiNGMtNDRmZC05NjRlLWMzNDA5ZWMxNjFiNy8xL1BhcGRKTnktV0dMb0xrOWMx
Uk5Qbmx3andsZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDvtDANBgkqhkiG9w0BAQsFAAOCAQEALjzrVqSGnQxl
40vmHDoQQs7MV2rHRNCJK3j/xB14xUbQkpZRyGZuN6YkUYF9qEjFldcDSUvtU/eg
ZyvMjiFlXGY/TEv0jeL9T3Ui2bw5o3IUfCVxbZOiNN0fA5lPHUQOIMnYjGpu2VmR
FBy6pIc3tmHR+gNzrAgJJ81T8HMk4iw6huAg0zeCX6UjQOtg5HlKluM736TcmRxa
oHydZZnrnFmkG3v0SjZMGVD+O4iRJZShCQm9xwMZoAiUhFWAQOOufffe8pwXsXv6
Zrrx2dOpSQkf6817FcA86fxWX3tIPfldFCwIxop7+J5QGUHX81Xn9AEZQuuSqvWn
7JXn3t7nyQ==
-----END CERTIFICATE-----
Generated at Fri May 3 02:57:14 2024 by rpki-client on console-fra.rpki-client.org