Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SjxCaDwIkTWknvH1ZTy5zl63C-Y.cer
File: SjxCaDwIkTWknvH1ZTy5zl63C-Y.cer (raw, json)
Hash identifier: Yddqgtb9+6IZur+O9/Nu7GEpjokp4SaJT6fxp43e/HI=
Subject key identifier: 4A:3C:42:68:3C:08:91:35:A4:9E:F1:F5:65:3C:B9:CE:5E:B7:0B:E6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B7A19A4F1B5DC71BB0C33B20886AA0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:29:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 205939
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:a1:9a:4f:1b:5d:c7:1b:b0:c3:3b:20:88:6a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a3c42683c089135a49ef1f5653cb9ce5eb70be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e7:8e:49:32:89:ea:7a:dd:5c:ef:e0:d3:59:
dd:95:10:96:a6:58:80:c2:53:10:3f:27:5c:cd:37:
59:62:39:14:b5:b4:e8:dd:59:fe:37:c4:61:60:c4:
b8:68:10:44:af:3b:8c:df:0d:7d:d5:a8:00:ea:73:
99:fd:b3:9e:0e:83:1e:57:dc:1e:8c:7a:1b:1b:fc:
a1:53:ef:0d:aa:22:63:40:33:d6:d9:f5:c0:99:4d:
ef:9c:2e:2a:39:8d:a8:0d:95:29:7d:cf:fa:b9:99:
0b:87:76:10:4d:0c:28:4f:dd:74:78:be:93:f2:48:
bf:45:75:78:29:02:9f:fb:1a:15:e5:3a:f2:9b:21:
b1:ed:50:41:a5:8d:59:53:e7:69:25:54:56:a6:2b:
1c:41:92:2e:a2:4d:63:fe:5a:4a:6c:d3:07:65:de:
0a:db:2f:7f:37:62:4c:25:52:68:db:72:18:ab:f9:
8e:d5:7a:05:01:39:9e:2f:92:93:56:69:30:82:c8:
39:4e:6e:59:28:38:36:4c:b3:36:75:44:dd:44:1b:
be:82:72:96:aa:68:88:95:d2:84:3a:8f:71:33:6f:
f4:10:0d:95:7d:80:cb:e0:a5:cd:5f:73:12:cf:2c:
a2:fc:ff:61:c1:cb:68:8a:b8:80:b7:90:8e:f6:05:
4b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3C:42:68:3C:08:91:35:A4:9E:F1:F5:65:3C:B9:CE:5E:B7:0B:E6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205939
Signature Algorithm: sha256WithRSAEncryption
a5:36:06:72:10:20:3b:f3:6a:cd:68:4f:a0:00:66:86:b4:54:
7b:29:cf:37:7b:78:fd:7a:fe:a3:bc:68:ce:62:2c:ee:5e:73:
af:70:30:9c:61:d1:dd:5f:ed:7e:72:fb:f9:3a:dc:93:69:a4:
ff:67:86:06:58:6d:3f:a2:79:de:2b:e8:ea:31:7e:8c:d6:27:
d4:fa:5d:61:0f:20:7d:b9:7a:a4:85:62:66:a0:e6:84:9a:80:
7a:29:e1:b3:82:0c:6e:c6:af:7c:77:6a:34:a2:20:65:97:48:
e2:68:7d:88:b0:c7:c6:3d:c0:4a:4f:30:21:6c:7a:ba:62:9c:
38:85:bf:e0:af:18:f8:97:02:ad:4b:42:09:e7:2b:a4:52:bf:
fe:ad:89:d5:e8:f9:91:a0:ae:e8:fd:96:69:c4:05:63:98:bd:
c6:6d:76:3f:1e:53:c1:d5:73:fb:c8:42:20:22:2a:15:29:90:
4b:50:24:f9:5d:11:07:68:1a:bf:34:f1:a4:99:c5:54:b3:39:
ae:54:3b:b6:46:f1:da:f5:5c:ee:9e:7f:e8:3f:cc:50:28:ec:
ac:96:67:d9:cb:fa:f0:43:1b:48:12:f2:87:ab:5e:6c:c5:95:
9b:be:1a:6e:34:19:ea:6a:3c:a8:b4:40:0f:bf:6b:f9:27:01:
ee:18:28:43
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYzGt6GaTxtdxxuwwzsgiGqgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMjAyOTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTNjNDI2ODNjMDg5MTM1YTQ5ZWYxZjU2NTNjYjljZTVlYjcwYmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+eOSTKJ6nrdXO/g01ndlRCWpliA
wlMQPydczTdZYjkUtbTo3Vn+N8RhYMS4aBBErzuM3w191agA6nOZ/bOeDoMeV9we
jHobG/yhU+8NqiJjQDPW2fXAmU3vnC4qOY2oDZUpfc/6uZkLh3YQTQwoT910eL6T
8ki/RXV4KQKf+xoV5TrymyGx7VBBpY1ZU+dpJVRWpiscQZIuok1j/lpKbNMHZd4K
2y9/N2JMJVJo23IYq/mO1XoFATmeL5KTVmkwgsg5Tm5ZKDg2TLM2dUTdRBu+gnKW
qmiIldKEOo9xM2/0EA2VfYDL4KXNX3MSzyyi/P9hwctoiriAt5CO9gVLYQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFEo8Qmg8CJE1pJ7x9WU8uc5etwvmMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc4Lzc1MmQz
ZS05MTI2LTQxZDQtYjQ1Yi00NzkwOWRkNTc4MDAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvNzUyZDNl
LTkxMjYtNDFkNC1iNDViLTQ3OTA5ZGQ1NzgwMC8xL1NqeENhRHdJa1RXa252SDFa
VHk1emw2M0MtWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMkczANBgkqhkiG9w0BAQsFAAOCAQEApTYGchAgO/Nq
zWhPoABmhrRUeynPN3t4/Xr+o7xozmIs7l5zr3AwnGHR3V/tfnL7+Trck2mk/2eG
BlhtP6J53ivo6jF+jNYn1PpdYQ8gfbl6pIViZqDmhJqAeinhs4IMbsavfHdqNKIg
ZZdI4mh9iLDHxj3ASk8wIWx6umKcOIW/4K8Y+JcCrUtCCecrpFK//q2J1ej5kaCu
6P2WacQFY5i9xm12Px5TwdVz+8hCICIqFSmQS1Ak+V0RB2gavzTxpJnFVLM5rlQ7
tkbx2vVc7p5/6D/MUCjsrJZn2cv68EMbSBLyh6tebMWVm74abjQZ6mo8qLRAD79r
+ScB7hgoQw==
-----END CERTIFICATE-----
Generated at Fri May 3 13:44:36 2024 by rpki-client on console-ams.rpki-client.org