Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WeJwSorPh8VIkqfbPvmMd_IjJqk.cer
File: WeJwSorPh8VIkqfbPvmMd_IjJqk.cer (raw, json)
Hash identifier: Wr43Lbleu1332/3f1LswegHg6YEsACe+2hXSGoL/SMA=
Subject key identifier: 59:E2:70:4A:8A:CF:87:C5:48:92:A7:DB:3E:F9:8C:77:F2:23:26:A9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3934AF9BC7A3220208B350DEF7626C1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/13/59E2704A8ACF87C54892A7DB3EF98C77F22326A9.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/13
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 05:50:59 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 203597
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:93:4a:f9:bc:7a:32:20:20:8b:35:0d:ef:76:26:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:50:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59e2704a8acf87c54892a7db3ef98c77f22326a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7d:20:aa:7b:67:c7:e5:d5:a6:e9:7b:95:b3:
62:b4:f2:9d:92:4f:69:fd:49:89:3d:22:29:36:88:
6f:c6:7b:13:5b:7c:43:8d:b3:cf:8a:1f:92:df:65:
44:51:39:0f:7e:28:be:29:1f:dc:d0:c7:ed:d5:01:
2a:d7:af:23:e9:9c:cb:ea:e5:c3:80:da:51:1d:6d:
e4:52:ce:89:8f:6d:96:40:34:5f:1b:8e:8e:83:0f:
81:ab:33:b3:83:ea:af:94:0f:c6:ac:d2:bd:d5:7b:
d9:5b:de:c2:a0:52:e5:a2:50:3c:0d:06:e2:14:c7:
ce:22:46:f7:4c:92:bc:ee:6e:9f:dd:8e:7a:e6:74:
88:13:a7:5c:be:14:f9:68:e3:a0:73:85:04:c5:36:
f6:d7:23:aa:3f:21:f8:f5:e5:69:6f:99:24:41:51:
53:b4:c3:f9:b2:2b:31:1d:2c:b6:36:49:4d:e2:9f:
00:97:61:76:65:a3:e2:d3:e1:d6:b0:a9:23:3e:0d:
cd:ce:d4:4e:a7:5f:54:d6:3c:61:af:07:45:57:8b:
59:a6:b5:ab:de:7e:63:6a:92:9c:15:e0:fa:b2:ce:
45:2f:38:47:ce:3f:d7:30:0e:5a:6d:be:c3:39:b8:
70:44:e2:68:79:5e:83:4f:fe:63:25:bc:5b:5a:65:
2d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E2:70:4A:8A:CF:87:C5:48:92:A7:DB:3E:F9:8C:77:F2:23:26:A9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/13
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/13/59E2704A8ACF87C54892A7DB3EF98C77F22326A9.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203597
Signature Algorithm: sha256WithRSAEncryption
87:33:09:42:43:1f:23:39:71:7e:7c:34:89:e4:b8:07:5c:3f:
da:f2:29:d5:e0:ec:4e:d7:c6:e7:fa:e9:32:f1:1a:96:4d:26:
1d:db:df:8f:97:da:30:fd:11:26:28:7b:46:77:a9:fa:b5:a3:
e0:66:6d:3d:d9:6e:bb:cd:58:87:80:88:b4:3a:26:d7:80:b0:
7f:c1:c2:9f:da:35:7c:a5:1b:c2:fa:32:00:f0:1c:6c:fb:09:
46:73:89:f3:ae:76:55:61:ef:81:1a:47:6a:dd:20:47:4c:3d:
5b:ce:f4:4f:48:5a:b2:c4:af:72:80:00:7a:3e:c1:8c:6f:14:
46:72:14:26:4a:43:b3:08:97:35:bd:78:68:3c:a5:3b:26:bf:
a4:24:5e:e8:98:22:40:4d:ac:84:cd:5b:f4:29:36:b4:22:5e:
d1:fd:91:b7:48:80:c3:44:6f:62:2a:aa:1d:92:6c:e2:a8:bd:
6a:87:b2:7a:9a:25:66:7e:77:dc:79:25:e5:86:5c:31:3c:fa:
04:ac:92:6f:be:9a:de:c8:dc:29:ee:4c:59:c4:a4:f2:36:c4:
75:39:fb:06:c5:76:9a:d6:45:9b:e6:49:8d:be:eb:39:3a:2b:
4b:4c:c3:c8:4b:c7:0e:6e:71:6a:23:fb:6a:06:b1:ab:f3:e3:
13:17:c4:59
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgISAYzDk0r5vHoyICCLNQ3vdibBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDU1MDU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OWUyNzA0YThhY2Y4N2M1NDg5MmE3ZGIzZWY5OGM3N2YyMjMyNmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy30gqntnx+XVpul7lbNitPKdkk9p
/UmJPSIpNohvxnsTW3xDjbPPih+S32VEUTkPfii+KR/c0Mft1QEq168j6ZzL6uXD
gNpRHW3kUs6Jj22WQDRfG46Ogw+BqzOzg+qvlA/GrNK91XvZW97CoFLlolA8DQbi
FMfOIkb3TJK87m6f3Y565nSIE6dcvhT5aOOgc4UExTb21yOqPyH49eVpb5kkQVFT
tMP5sisxHSy2NklN4p8Al2F2ZaPi0+HWsKkjPg3NztROp19U1jxhrwdFV4tZprWr
3n5japKcFeD6ss5FLzhHzj/XMA5abb7DObhwROJoeV6DT/5jJbxbWmUteQIDAQAB
o4ICnTCCApkwHQYDVR0OBBYEFFnicEqKz4fFSJKn2z75jHfyIyapMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggFBBggrBgEFBQcBCwSCATMwggEvMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FlNmVk
ZWVjLTA4YmEtNGNkZS04OTc5LTRmYWVhNGIxYmMxMi8xMzCBjQYIKwYBBQUHMAqG
gYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Fl
NmVkZWVjLTA4YmEtNGNkZS04OTc5LTRmYWVhNGIxYmMxMi8xMy81OUUyNzA0QThB
Q0Y4N0M1NDg5MkE3REIzRUY5OEM3N0YyMjMyNkE5Lm1mdDA8BggrBgEFBQcwDYYw
aHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3RpZmljYXRpb24ueG1s
MFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNybDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMb
TTANBgkqhkiG9w0BAQsFAAOCAQEAhzMJQkMfIzlxfnw0ieS4B1w/2vIp1eDsTtfG
5/rpMvEalk0mHdvfj5faMP0RJih7Rnep+rWj4GZtPdluu81Yh4CItDom14Cwf8HC
n9o1fKUbwvoyAPAcbPsJRnOJ8652VWHvgRpHat0gR0w9W870T0hassSvcoAAej7B
jG8URnIUJkpDswiXNb14aDylOya/pCRe6JgiQE2shM1b9Ck2tCJe0f2Rt0iAw0Rv
YiqqHZJs4qi9aoeyepolZn533Hkl5YZcMTz6BKySb76a3sjcKe5MWcSk8jbEdTn7
BsV2mtZFm+ZJjb7rOTorS0zDyEvHDm5xaiP7agaxq/PjExfEWQ==
-----END CERTIFICATE-----
Generated at Fri May 3 01:47:50 2024 by rpki-client on console-ams.rpki-client.org