Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VNQ32RKD3UbmbG2Zi2jP6YWHrqE.cer
File: VNQ32RKD3UbmbG2Zi2jP6YWHrqE.cer (raw, json)
Hash identifier: th41i6gmdwBrm1h3sm2IGePJKmv/D7AW70k38fOUk9Q=
Subject key identifier: 54:D4:37:D9:12:83:DD:46:E6:6C:6D:99:8B:68:CF:E9:85:87:AE:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26CF249B7ACEA4A02AE8DF76E91444B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.co/repo/John/0/54D437D91283DD46E66C6D998B68CFE98587AEA1.mft
caRepository: rsync://rpki.co/repo/John/0/
Notify URL: https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 200879
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:f2:49:b7:ac:ea:4a:02:ae:8d:f7:6e:91:44:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54d437d91283dd46e66c6d998b68cfe98587aea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:51:2c:87:1a:e9:ff:71:62:13:bb:fa:5f:5f:
d6:96:8e:00:61:d4:97:c3:8f:ea:ad:e0:6b:ad:cc:
7e:9c:9a:f0:26:0b:c5:52:e6:74:8e:ed:ff:88:9c:
e0:4c:fb:63:97:97:a7:0f:54:43:33:22:4f:9a:eb:
2a:8a:70:28:5f:b2:68:44:f8:4d:2a:d6:5d:da:6c:
72:65:75:47:0c:7e:e2:98:cb:0b:a9:54:b5:d2:ab:
65:b7:ac:45:ab:f5:5c:a4:1a:4f:45:a2:5b:24:61:
54:98:27:6d:3b:9c:c4:90:bd:ec:35:77:14:e3:c4:
90:34:73:0d:8b:f6:72:16:4b:95:af:32:e3:d6:a9:
5f:c9:aa:07:1f:86:d8:d3:76:31:8a:73:49:35:4f:
2a:33:8c:05:e4:b0:39:65:2d:e4:f7:4e:a2:57:cf:
76:95:b3:69:07:63:59:b0:48:4d:f9:08:5c:b1:5f:
f8:32:1b:07:ba:ec:8b:2a:40:80:e0:9b:88:1b:54:
50:4b:ab:87:06:5a:b3:2f:51:30:99:0e:a3:3c:47:
22:97:b0:92:80:f3:75:f8:be:49:da:8d:44:10:56:
ab:c5:f6:de:8d:64:10:4d:ab:12:f9:1c:28:be:20:
b1:32:24:cd:7f:91:b7:80:53:fd:8c:47:4e:1b:16:
45:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D4:37:D9:12:83:DD:46:E6:6C:6D:99:8B:68:CF:E9:85:87:AE:A1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.co/repo/John/0/
RPKI Manifest - URI:rsync://rpki.co/repo/John/0/54D437D91283DD46E66C6D998B68CFE98587AEA1.mft
RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200879
Signature Algorithm: sha256WithRSAEncryption
6a:c5:4a:63:8c:95:ed:9b:b7:54:26:03:6c:85:50:e7:e1:ae:
ee:74:85:c4:ad:d0:99:2d:9c:80:b6:35:e6:5a:8b:8d:16:6f:
0d:8e:a9:c6:89:0e:ae:97:fc:19:4d:fe:1f:a6:ee:a4:25:10:
b3:e5:6c:32:6d:3d:aa:90:9a:ea:59:57:8e:71:5a:85:ae:78:
41:d6:9c:c5:98:0b:0a:dd:f6:aa:ac:7d:0a:d2:66:e0:72:15:
cc:d0:0d:9a:c4:7d:62:b9:99:86:88:21:c3:7f:e5:cb:76:6c:
35:60:19:f9:b7:37:a6:98:2d:52:7a:51:a4:e3:b4:85:19:1e:
29:fa:05:63:43:21:ef:03:b0:42:5c:3a:d4:00:2c:e3:b3:72:
53:df:d2:7b:ef:29:39:79:3f:47:68:aa:a3:58:c3:4e:32:1d:
b5:b8:25:cf:7b:49:8e:3c:43:9c:78:c9:77:55:fc:6a:f0:1f:
72:47:4f:4b:bc:31:f4:dd:91:73:b5:d7:93:ea:f5:ee:6d:4a:
77:43:7a:20:79:8c:32:3b:a4:47:15:fc:15:a8:52:82:36:13:
3d:a6:74:d4:73:d2:4d:30:01:bd:bd:21:12:e2:d3:38:a9:a6:
00:d6:7c:ac:fd:ed:69:58:bc:ff:04:44:95:0e:83:68:d7:d7:
f0:88:35:dc
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYzCbPJJt6zqSgKujfdukURLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDAyOTI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NGQ0MzdkOTEyODNkZDQ2ZTY2YzZkOTk4YjY4Y2ZlOTg1ODdhZWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FEshxrp/3FiE7v6X1/Wlo4AYdSX
w4/qreBrrcx+nJrwJgvFUuZ0ju3/iJzgTPtjl5enD1RDMyJPmusqinAoX7JoRPhN
KtZd2mxyZXVHDH7imMsLqVS10qtlt6xFq/VcpBpPRaJbJGFUmCdtO5zEkL3sNXcU
48SQNHMNi/ZyFkuVrzLj1qlfyaoHH4bY03YxinNJNU8qM4wF5LA5ZS3k906iV892
lbNpB2NZsEhN+QhcsV/4MhsHuuyLKkCA4JuIG1RQS6uHBlqzL1EwmQ6jPEcil7CS
gPN1+L5J2o1EEFarxfbejWQQTasS+RwoviCxMiTNf5G3gFP9jEdOGxZFnQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFFTUN9kSg91G5mxtmYtoz+mFh66hMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwgcgGCCsGAQUFBwELBIG7MIG4MCgGCCsGAQUFBzAFhhxyc3lu
YzovL3Jwa2kuY28vcmVwby9Kb2huLzAvMFQGCCsGAQUFBzAKhkhyc3luYzovL3Jw
a2kuY28vcmVwby9Kb2huLzAvNTRENDM3RDkxMjgzREQ0NkU2NkM2RDk5OEI2OENG
RTk4NTg3QUVBMS5tZnQwNgYIKwYBBQUHMA2GKmh0dHBzOi8vcnJkcC5ycGtpLmNv
L3JyZHAvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElK
bkhDMlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAaBggr
BgEFBQcBCAEB/wQLMAmgBzAFAgMDEK8wDQYJKoZIhvcNAQELBQADggEBAGrFSmOM
le2bt1QmA2yFUOfhru50hcSt0JktnIC2NeZai40Wbw2OqcaJDq6X/BlN/h+m7qQl
ELPlbDJtPaqQmupZV45xWoWueEHWnMWYCwrd9qqsfQrSZuByFczQDZrEfWK5mYaI
IcN/5ct2bDVgGfm3N6aYLVJ6UaTjtIUZHin6BWNDIe8DsEJcOtQALOOzclPf0nvv
KTl5P0doqqNYw04yHbW4Jc97SY48Q5x4yXdV/GrwH3JHT0u8MfTdkXO115Pq9e5t
SndDeiB5jDI7pEcV/BWoUoI2Ez2mdNRz0k0wAb29IRLi0zippgDWfKz97WlYvP8E
RJUOg2jX1/CINdw=
-----END CERTIFICATE-----
Generated at Fri Apr 19 17:36:33 2024 by rpki-client on console-ams.rpki-client.org