Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VzK0ZcoRtu5yfnLCeBm4XoPbDYU.cer
File: VzK0ZcoRtu5yfnLCeBm4XoPbDYU.cer (raw, json)
Hash identifier: MQF274/3b8LDHJmIe2tvCBEMMTy83CaFCLdr5p3N8po=
Subject key identifier: 57:32:B4:65:CA:11:B6:EE:72:7E:72:C2:78:19:B8:5E:83:DB:0D:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB56EC6C49AC87C4885492A67EE5FD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/8c55af-1733-4db9-a4db-5bf445eaaa70/1/VzK0ZcoRtu5yfnLCeBm4XoPbDYU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/8c55af-1733-4db9-a4db-5bf445eaaa70/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:30:03 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 213312
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:56:ec:6c:49:ac:87:c4:88:54:92:a6:7e:e5:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5732b465ca11b6ee727e72c27819b85e83db0d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:94:4c:b6:17:d6:81:45:7e:b9:3c:da:84:5d:
51:7d:b1:14:b4:f5:a1:0c:57:60:a6:08:27:6b:15:
5b:0a:ce:9b:73:37:c5:75:67:d0:87:fa:02:3c:a3:
16:6f:97:58:48:53:56:3c:46:05:1d:96:2d:c5:ab:
53:42:f6:71:59:7f:b2:20:9c:e6:92:12:51:68:24:
dd:81:11:13:35:e9:09:2e:84:91:b9:c0:4a:fd:7f:
ff:a8:72:e1:05:a3:93:f3:40:ec:79:d9:2a:23:e8:
42:b9:58:d3:fa:11:86:3e:c7:40:dc:b3:ba:1f:ae:
23:d7:aa:57:76:20:6c:14:ed:ad:36:69:f9:88:0a:
63:ac:29:1e:ab:56:9a:d9:68:9b:a6:7b:62:ce:32:
06:e4:28:9f:ce:b3:13:38:9c:91:b9:b5:92:46:64:
a7:a4:a9:a8:14:a8:85:60:ba:b9:76:d9:d7:7a:5b:
65:8a:cc:1a:f0:01:99:cb:67:65:0c:bb:36:df:c3:
74:f1:da:40:2e:b3:30:ef:81:4d:0b:d7:48:a7:01:
42:7c:28:24:e4:18:a7:fa:95:a1:9a:de:35:6a:f5:
9a:ac:43:3f:77:10:c4:a6:d4:fa:b0:b7:10:3b:35:
10:ad:35:0b:20:a0:e9:b4:36:e2:38:8c:2d:9f:c2:
69:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:32:B4:65:CA:11:B6:EE:72:7E:72:C2:78:19:B8:5E:83:DB:0D:85
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8c55af-1733-4db9-a4db-5bf445eaaa70/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8c55af-1733-4db9-a4db-5bf445eaaa70/1/VzK0ZcoRtu5yfnLCeBm4XoPbDYU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213312
Signature Algorithm: sha256WithRSAEncryption
29:33:bc:25:cb:0d:21:8d:5e:e2:d5:06:54:3c:db:de:78:52:
f3:2f:26:1e:98:d3:5a:1f:15:c6:ea:0e:bc:c0:51:57:df:11:
5a:4b:d9:8b:da:ee:37:84:e8:03:28:e7:a2:5a:d4:bc:ca:d1:
a9:9a:63:52:cf:e2:7e:ae:ef:9c:a0:b6:e3:7c:37:7a:1f:27:
8a:ef:e4:f0:c2:48:ca:f6:23:22:94:a7:ff:1f:a1:88:45:3f:
7f:35:c8:ae:d1:a9:a8:1b:fe:3c:05:b9:26:ab:ee:b7:ee:e3:
bf:6a:b4:93:49:32:87:aa:b9:ab:fb:8f:83:3f:8a:7e:10:3f:
36:0f:d9:ad:51:8c:84:9f:32:7f:11:0d:83:64:13:b3:93:ae:
63:43:63:75:30:50:bc:1b:21:f1:37:da:c5:ef:b3:7e:27:c7:
f1:ca:dc:bb:f4:0f:fe:ea:8a:2c:ee:87:89:34:0f:d4:ab:e4:
7a:05:1d:45:6b:bf:f8:04:1b:b3:5a:f0:d3:fd:85:9c:85:23:
12:44:ef:9d:6b:77:38:76:4d:9b:7f:c9:28:57:85:26:7e:4f:
5b:bf:d9:9c:7d:8c:9c:58:73:ec:b9:ec:f0:a1:bb:78:8d:b5:
2c:40:89:48:60:ce:15:6f:ef:8d:dd:c8:ca:9c:df:8f:d2:c8:
2b:99:26:59
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYzC21bsbEmsh8SIVJKmfuX9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDIzMDAzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzMyYjQ2NWNhMTFiNmVlNzI3ZTcyYzI3ODE5Yjg1ZTgzZGIwZDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5RMthfWgUV+uTzahF1RfbEUtPWh
DFdgpggnaxVbCs6bczfFdWfQh/oCPKMWb5dYSFNWPEYFHZYtxatTQvZxWX+yIJzm
khJRaCTdgRETNekJLoSRucBK/X//qHLhBaOT80DsedkqI+hCuVjT+hGGPsdA3LO6
H64j16pXdiBsFO2tNmn5iApjrCkeq1aa2WibpntizjIG5CifzrMTOJyRubWSRmSn
pKmoFKiFYLq5dtnXeltliswa8AGZy2dlDLs238N08dpALrMw74FNC9dIpwFCfCgk
5Bin+pWhmt41avWarEM/dxDEptT6sLcQOzUQrTULIKDptDbiOIwtn8JpvwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFFcytGXKEbbucn5ywngZuF6D2w2FMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY2LzhjNTVh
Zi0xNzMzLTRkYjktYTRkYi01YmY0NDVlYWFhNzAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYvOGM1NWFm
LTE3MzMtNGRiOS1hNGRiLTViZjQ0NWVhYWE3MC8xL1Z6SzBaY29SdHU1eWZuTENl
Qm00WG9QYkRZVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNBQDANBgkqhkiG9w0BAQsFAAOCAQEAKTO8JcsNIY1e
4tUGVDzb3nhS8y8mHpjTWh8VxuoOvMBRV98RWkvZi9ruN4ToAyjnolrUvMrRqZpj
Us/ifq7vnKC243w3eh8niu/k8MJIyvYjIpSn/x+hiEU/fzXIrtGpqBv+PAW5Jqvu
t+7jv2q0k0kyh6q5q/uPgz+KfhA/Ng/ZrVGMhJ8yfxENg2QTs5OuY0NjdTBQvBsh
8Tfaxe+zfifH8crcu/QP/uqKLO6HiTQP1KvkegUdRWu/+AQbs1rw0/2FnIUjEkTv
nWt3OHZNm3/JKFeFJn5PW7/ZnH2MnFhz7Lns8KG7eI21LECJSGDOFW/vjd3Iypzf
j9LIK5kmWQ==
-----END CERTIFICATE-----
Generated at Fri May 3 07:38:39 2024 by rpki-client on console-fra.rpki-client.org