Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
File: Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer (raw, json)
Hash identifier: Nu6gN0K+QJh4L4zMxyXQpe3y6FO+0rWmLTQluRgDe08=
Subject key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019063BEB2B661D6DEC8555F851AC971EA8A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 29 Jun 2024 11:26:00 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 200242
IP: 2a14:6f40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:63:be:b2:b6:61:d6:de:c8:55:5f:85:1a:c9:71:ea:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 29 11:26:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cd:41:20:03:57:9c:b8:c4:ae:f5:44:d0:d1:
41:93:93:9f:10:0b:d7:d6:d7:fb:ea:0d:54:69:ef:
65:c7:12:5e:f9:86:1a:e1:60:80:4f:49:fa:70:0c:
ba:e6:7d:0b:e5:9b:6e:16:e9:77:d1:a2:c0:31:3a:
3a:2e:fc:6a:bb:29:0d:cd:dc:8e:36:76:78:09:14:
56:53:9f:44:01:af:8c:89:55:0f:d2:23:bf:4c:a1:
65:4b:ad:cb:4e:18:25:90:84:a7:e2:7c:48:2d:c4:
63:8c:15:3a:ba:a5:85:de:92:14:23:8b:63:eb:8c:
dd:01:91:88:93:9d:ee:3a:47:e4:44:43:e3:9d:53:
3d:4e:00:9c:5d:ea:be:f9:f7:46:0f:5f:2d:fc:d3:
9b:cb:71:8f:20:17:41:4a:7a:8c:0f:87:9b:72:d1:
6b:80:90:db:7a:8a:53:af:4d:7a:04:c4:15:14:a5:
99:84:32:d2:73:d6:a7:f3:13:24:73:cf:97:31:9e:
de:4b:ab:40:e2:c5:40:c1:54:d8:e5:3d:7a:7a:1f:
2c:78:fa:78:be:24:76:e7:9f:93:d1:69:96:57:7d:
7c:cf:24:5d:e0:5d:65:9c:d6:33:89:7f:be:f9:46:
59:20:39:a8:c2:89:bd:98:1b:0e:f7:61:78:d4:f3:
16:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6f40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200242
Signature Algorithm: sha256WithRSAEncryption
23:fc:f6:33:b5:5d:f8:6a:c4:00:25:1f:3d:16:da:ec:71:c2:
b5:17:ca:bd:0b:a2:0f:e8:cf:22:3f:a7:b0:b8:b3:2c:ad:ea:
45:c4:b9:38:1e:66:8a:39:05:a6:9d:c2:ec:32:b1:17:4d:1f:
20:ce:4b:bc:8d:cc:c6:2f:4b:65:c0:51:fe:c1:c4:50:db:6f:
b7:e9:2e:49:8a:1c:3c:5e:fc:7b:39:b5:9f:fc:76:13:06:e6:
24:53:4f:3e:44:df:07:a4:61:e5:18:79:28:54:14:d5:47:ed:
9f:96:57:cb:8e:5d:af:fc:65:c6:c2:4f:bf:ab:41:b1:89:90:
25:4b:cc:83:8e:03:4b:10:30:56:2c:86:eb:6b:c2:a8:85:66:
ee:6d:9f:4e:f0:82:d0:f3:17:c0:e0:6e:d0:03:f4:88:20:ad:
c7:32:0b:60:6f:40:a5:5f:f3:fe:85:76:76:c5:cd:b7:bd:9f:
d4:2b:09:18:21:45:ba:78:37:12:d6:a0:2c:c3:40:bb:1f:17:
f0:93:1a:dc:5f:2c:d8:4b:6d:ce:bb:93:a4:95:57:42:86:5a:
5e:58:7f:a9:59:a2:46:44:50:da:0b:57:15:c9:d3:c8:fe:48:
d9:b2:14:a3:8a:a7:99:1c:e3:a1:3e:04:33:1a:79:a0:40:fd:
78:88:ff:30
-----BEGIN CERTIFICATE-----
MIIFsTCCBJmgAwIBAgISAZBjvrK2YdbeyFVfhRrJceqKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNjI5MTEyNjAwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZWVlYmI5NDZhOGQyMWQ0MDgzYzkzZGMwOWNlZTU1N2JiMmFjMzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqM1BIANXnLjErvVE0NFBk5OfEAvX
1tf76g1Uae9lxxJe+YYa4WCAT0n6cAy65n0L5ZtuFul30aLAMTo6LvxquykNzdyO
NnZ4CRRWU59EAa+MiVUP0iO/TKFlS63LThglkISn4nxILcRjjBU6uqWF3pIUI4tj
64zdAZGIk53uOkfkREPjnVM9TgCcXeq++fdGD18t/NOby3GPIBdBSnqMD4ebctFr
gJDbeopTr016BMQVFKWZhDLSc9an8xMkc8+XMZ7eS6tA4sVAwVTY5T16eh8sePp4
viR255+T0WmWV318zyRd4F1lnNYziX+++UZZIDmowom9mBsO92F41PMW4QIDAQAB
o4ICvTCCArkwHQYDVR0OBBYEFD7uu5RqjSHUCDyT3AnO5Ve7KsMuMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzZmZjdh
OTg5LWVjZGYtNDNkNi04NmUxLWY2YzM5MzViOWIzZC80LzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmZm
N2E5ODktZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5YjNkLzQvM0VFRUJCOTQ2QThE
MjFENDA4M0M5M0RDMDlDRUU1NTdCQjJBQzMyRS5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMF
AyoUb0AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAw4yMA0GCSqGSIb3DQEBCwUA
A4IBAQAj/PYztV34asQAJR89FtrsccK1F8q9C6IP6M8iP6ewuLMsrepFxLk4HmaK
OQWmncLsMrEXTR8gzku8jczGL0tlwFH+wcRQ22+36S5Jihw8Xvx7ObWf/HYTBuYk
U08+RN8HpGHlGHkoVBTVR+2fllfLjl2v/GXGwk+/q0GxiZAlS8yDjgNLEDBWLIbr
a8KohWbubZ9O8ILQ8xfA4G7QA/SIIK3HMgtgb0ClX/P+hXZ2xc23vZ/UKwkYIUW6
eDcS1qAsw0C7HxfwkxrcXyzYS23Ou5OklVdChlpeWH+pWaJGRFDaC1cVydPI/kjZ
shSjiqeZHOOhPgQzGnmgQP14iP8w
-----END CERTIFICATE-----
Generated at Sat Sep 7 21:01:56 2024 by rpki-client on console-fra.rpki-client.org