Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer
File: R3faFXdoQj_LqSFzkux_SDs7lEI.cer (raw, json)
Hash identifier: AMuh2u7sKsyNGoHyfOMU+FxAGOV7oKAxrlwhrBDd9xQ=
Subject key identifier: 47:77:DA:15:77:68:42:3F:CB:A9:21:73:92:EC:7F:48:3B:3B:94:42
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DE585E6437CDC5B8138D5E22E6D58AAB1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 26 Feb 2024 13:06:14 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 8832
IP: 2a00:1498::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e5:85:e6:43:7c:dc:5b:81:38:d5:e2:2e:6d:58:aa:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 26 13:06:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4777da157768423fcba9217392ec7f483b3b9442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e3:9f:88:7b:07:6e:71:03:3d:fd:91:ad:0f:
a2:72:42:a6:9f:52:f4:f6:01:32:ee:fa:d9:d4:fe:
19:84:e4:22:d4:74:18:76:47:ef:f5:5b:3f:03:4d:
4e:72:0c:8a:6f:c3:3d:ab:59:40:2d:4f:b2:41:1e:
7d:8d:7c:b3:b1:17:3d:8d:79:50:84:8c:af:60:92:
7d:a0:a0:83:ca:1a:87:2d:61:1e:17:6b:17:3e:7a:
67:b5:ca:9c:89:5e:be:80:5b:82:38:56:12:86:2a:
7f:4e:6f:de:00:c0:03:0b:87:f0:0c:d2:e4:1a:e0:
44:cb:65:11:d6:fa:03:f0:95:11:7b:4f:a6:8c:e1:
7e:04:03:4b:c1:9c:78:2b:ec:0b:43:47:7d:f1:5d:
ec:d3:8a:52:bd:e6:14:8e:15:05:a6:be:c6:8f:06:
9c:da:7d:9e:f8:c3:48:8b:51:07:88:f2:80:e4:22:
24:ec:2c:90:aa:51:df:4e:5d:1a:23:64:28:65:3b:
a9:ba:27:95:92:ea:ee:a3:96:a7:40:af:ef:ba:91:
c0:58:f2:1d:a1:7e:a0:21:15:80:b6:65:70:b6:01:
44:f8:0d:bd:08:11:d7:10:28:24:0e:e0:11:19:21:
34:25:5a:31:e7:be:fd:a9:9d:fe:de:ec:a0:55:b2:
59:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:77:DA:15:77:68:42:3F:CB:A9:21:73:92:EC:7F:48:3B:3B:94:42
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:1498::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8832
Signature Algorithm: sha256WithRSAEncryption
9c:bf:3a:ef:a8:84:f3:e6:ab:4a:48:c5:47:9e:94:56:1e:d7:
40:a2:d1:93:eb:08:32:2d:e5:89:c2:b7:31:c9:38:4e:04:e8:
9d:05:90:41:41:6d:ae:90:0c:60:f2:d4:c5:77:97:ac:cd:ea:
10:45:4d:4d:48:c8:74:c7:b8:76:9f:56:1c:84:96:b3:9a:9a:
5f:a7:f1:d2:fa:23:5b:2b:54:b1:ae:c8:99:6b:1b:84:f1:55:
74:68:c6:c8:52:2a:0c:b5:d4:90:e1:9b:8b:37:5c:e8:7c:57:
2d:a4:85:5d:fb:eb:25:18:e9:06:04:6a:8e:44:65:ee:42:22:
90:8e:1d:00:79:b9:da:b0:48:7a:e4:f1:99:cb:99:71:d4:0f:
c5:02:c7:91:c2:cd:b7:1d:16:14:4d:7e:dc:56:6b:73:3f:16:
26:c3:8a:a8:fc:88:62:be:3d:14:19:97:c4:d3:43:0f:83:c2:
01:5c:14:d7:72:a0:e3:de:ce:fb:a0:24:d3:d8:d9:cd:32:29:
63:36:61:68:44:dd:c1:0e:75:a7:50:9b:2c:34:2a:4b:a7:90:
e6:f4:06:a1:4a:47:d0:86:bf:12:a1:27:67:e3:c9:2a:43:a8:
f6:cf:51:8b:2e:58:70:e6:d2:38:66:06:be:2f:eb:4d:cb:ff:
91:22:6a:39
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAY3lheZDfNxbgTjV4i5tWKqxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMjI2MTMwNjE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Nzc3ZGExNTc3Njg0MjNmY2JhOTIxNzM5MmVjN2Y0ODNiM2I5NDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuOfiHsHbnEDPf2RrQ+ickKmn1L0
9gEy7vrZ1P4ZhOQi1HQYdkfv9Vs/A01OcgyKb8M9q1lALU+yQR59jXyzsRc9jXlQ
hIyvYJJ9oKCDyhqHLWEeF2sXPnpntcqciV6+gFuCOFYShip/Tm/eAMADC4fwDNLk
GuBEy2UR1voD8JURe0+mjOF+BANLwZx4K+wLQ0d98V3s04pSveYUjhUFpr7Gjwac
2n2e+MNIi1EHiPKA5CIk7CyQqlHfTl0aI2QoZTupuieVkuruo5anQK/vupHAWPId
oX6gIRWAtmVwtgFE+A29CBHXECgkDuARGSE0JVox5779qZ3+3uygVbJZIwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFEd32hV3aEI/y6khc5Lsf0g7O5RCMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IzL2IyMWEz
OC1kYjYyLTQ0MzgtYmE5Yy1mNTdmODZkZjRmMTYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjMvYjIxYTM4
LWRiNjItNDQzOC1iYTljLWY1N2Y4NmRmNGYxNi8xL1IzZmFGWGRvUWpfTHFTRnpr
dXhfU0RzN2xFSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAKgAUmDAZBggrBgEFBQcBCAEB/wQKMAigBjAE
AgIigDANBgkqhkiG9w0BAQsFAAOCAQEAnL8676iE8+arSkjFR56UVh7XQKLRk+sI
Mi3licK3Mck4TgTonQWQQUFtrpAMYPLUxXeXrM3qEEVNTUjIdMe4dp9WHISWs5qa
X6fx0vojWytUsa7ImWsbhPFVdGjGyFIqDLXUkOGbizdc6HxXLaSFXfvrJRjpBgRq
jkRl7kIikI4dAHm52rBIeuTxmcuZcdQPxQLHkcLNtx0WFE1+3FZrcz8WJsOKqPyI
Yr49FBmXxNNDD4PCAVwU13Kg497O+6Ak09jZzTIpYzZhaETdwQ51p1CbLDQqS6eQ
5vQGoUpH0Ia/EqEnZ+PJKkOo9s9Riy5YcObSOGYGvi/rTcv/kSJqOQ==
-----END CERTIFICATE-----
Generated at Fri May 3 01:44:40 2024 by rpki-client on console-ams.rpki-client.org