Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YjXlFvyNIdsM1GID627FZx4YT5o.cer
File: YjXlFvyNIdsM1GID627FZx4YT5o.cer (raw, json)
Hash identifier: BHvX10h69w32gJUvdGkswVFts5oLWwbXFnhY9zc0CwU=
Subject key identifier: 62:35:E5:16:FC:8D:21:DB:0C:D4:62:03:EB:6E:C5:67:1E:18:4F:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01908E6AC7B1014D54CC5CD29BDFB33AA919
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/1/6235E516FC8D21DB0CD46203EB6EC5671E184F9A.mft
caRepository: rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/1/
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Sun 07 Jul 2024 18:18:01 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215023
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:8e:6a:c7:b1:01:4d:54:cc:5c:d2:9b:df:b3:3a:a9:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 7 18:18:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6235e516fc8d21db0cd46203eb6ec5671e184f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5e:33:85:0a:28:de:8e:ad:0f:f3:4b:48:82:
73:80:8e:44:44:41:b3:d2:2d:f8:89:65:dc:bc:6a:
3b:a2:ec:88:30:a7:ac:30:04:37:96:dd:ba:4f:9b:
de:33:b0:7b:5f:91:b6:cd:43:d4:b1:c0:7b:28:cd:
21:d1:00:75:f1:bd:13:90:10:12:36:76:25:a0:1b:
76:4f:92:ae:b7:6e:23:e7:69:ac:9a:9c:f8:b8:75:
5a:39:bd:00:b9:6c:68:ab:5e:1a:09:8b:2a:7a:ee:
59:2b:9c:f1:48:61:5c:05:1d:35:15:6f:a8:3b:65:
61:b1:8a:11:70:30:b2:37:f7:df:8b:33:72:25:7d:
1d:da:19:aa:34:31:af:eb:eb:e6:5f:3b:7e:52:0b:
64:4f:fa:d7:94:ac:ba:e6:ad:ae:c7:58:81:eb:eb:
5a:65:54:bc:d1:54:c3:08:ba:61:aa:ca:f7:94:71:
57:05:8a:ca:56:fd:16:2d:e3:65:4f:ce:81:93:55:
4a:c2:36:1f:24:e9:21:15:74:4f:5f:c3:f6:6d:b6:
84:56:e2:fe:c8:d8:a3:91:4c:5c:36:b2:38:00:fd:
95:15:b6:4f:f6:92:c8:e4:9b:59:0b:b0:76:e0:e4:
b5:3d:58:bd:d2:8b:f5:3a:39:3b:35:55:72:31:f8:
c5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:35:E5:16:FC:8D:21:DB:0C:D4:62:03:EB:6E:C5:67:1E:18:4F:9A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/1/
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/1/6235E516FC8D21DB0CD46203EB6EC5671E184F9A.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215023
Signature Algorithm: sha256WithRSAEncryption
2d:9c:af:74:d5:04:58:4e:2e:6b:d2:f7:ad:6a:e0:70:f0:db:
d8:dd:07:a7:d3:c7:10:3e:e4:eb:57:25:8d:2f:8d:40:56:5b:
31:56:e7:61:76:f1:b4:e5:96:e3:d9:16:37:31:90:9e:1c:9c:
ad:ee:99:db:d7:23:c3:46:6d:f6:f7:f5:e8:99:13:60:24:59:
77:4a:ef:0f:3a:28:77:33:77:a7:ff:ab:be:de:fc:8e:c2:4d:
95:4b:e8:21:48:f6:49:20:08:7b:93:f7:b3:78:b6:76:1c:49:
16:c2:d6:77:18:07:3a:dc:1c:ff:70:1f:19:48:23:0c:53:08:
cb:08:b8:85:de:40:a3:94:88:01:01:1d:7b:3b:48:7e:c9:81:
a6:26:d0:96:5b:1f:f2:38:6e:8e:69:1b:1c:66:8d:4e:c9:68:
36:ee:ee:56:3c:db:2a:66:40:40:62:b5:74:1d:3d:fc:c5:76:
6a:0a:d4:d2:43:f1:27:73:cc:2d:85:bc:30:f1:54:a6:fb:18:
ca:a7:79:ff:a4:d9:b3:c3:ee:fd:7c:d8:38:10:31:54:e0:93:
b9:65:ec:00:e3:20:2e:f7:3e:8a:17:c1:af:9e:d2:a3:42:a1:
1f:55:2e:d7:d8:59:57:d4:73:a9:20:88:19:3c:80:3f:67:73:
d3:26:a7:18
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgISAZCOasexAU1UzFzSm9+zOqkZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNzA3MTgxODAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjM1ZTUxNmZjOGQyMWRiMGNkNDYyMDNlYjZlYzU2NzFlMTg0ZjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAil4zhQoo3o6tD/NLSIJzgI5EREGz
0i34iWXcvGo7ouyIMKesMAQ3lt26T5veM7B7X5G2zUPUscB7KM0h0QB18b0TkBAS
NnYloBt2T5Kut24j52msmpz4uHVaOb0AuWxoq14aCYsqeu5ZK5zxSGFcBR01FW+o
O2VhsYoRcDCyN/ffizNyJX0d2hmqNDGv6+vmXzt+UgtkT/rXlKy65q2ux1iB6+ta
ZVS80VTDCLphqsr3lHFXBYrKVv0WLeNlT86Bk1VKwjYfJOkhFXRPX8P2bbaEVuL+
yNijkUxcNrI4AP2VFbZP9pLI5JtZC7B24OS1PVi90ov1Ojk7NVVyMfjFBQIDAQAB
o4ICkjCCAo4wHQYDVR0OBBYEFGI15Rb8jSHbDNRiA+tuxWceGE+aMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE2BggrBgEFBQcBCwSCASgwggEkMFsGCCsGAQUFBzAFhk9y
c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzMzOWJi
NGNmZjNiNDQ3MzI4NTRkOWFlZmYxMDY3ZDkxLzEvMIGHBggrBgEFBQcwCoZ7cnN5
bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV8zMzliYjRj
ZmYzYjQ0NzMyODU0ZDlhZWZmMTA2N2Q5MS8xLzYyMzVFNTE2RkM4RDIxREIwQ0Q0
NjIwM0VCNkVDNTY3MUUxODRGOUEubWZ0MDsGCCsGAQUFBzANhi9odHRwczovL3Jw
a2kuYXMyMDc5NjAubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQ
ME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDR+8wDQYJKoZIhvcN
AQELBQADggEBAC2cr3TVBFhOLmvS961q4HDw29jdB6fTxxA+5OtXJY0vjUBWWzFW
52F28bTlluPZFjcxkJ4cnK3umdvXI8NGbfb39eiZE2AkWXdK7w86KHczd6f/q77e
/I7CTZVL6CFI9kkgCHuT97N4tnYcSRbC1ncYBzrcHP9wHxlIIwxTCMsIuIXeQKOU
iAEBHXs7SH7JgaYm0JZbH/I4bo5pGxxmjU7JaDbu7lY82ypmQEBitXQdPfzFdmoK
1NJD8SdzzC2FvDDxVKb7GMqnef+k2bPD7v182DgQMVTgk7ll7ADjIC73PooXwa+e
0qNCoR9VLtfYWVfUc6kgiBk8gD9nc9Mmpxg=
-----END CERTIFICATE-----
Generated at Sat Sep 7 21:13:39 2024 by rpki-client on console-ams.rpki-client.org