Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bfVn7PhlSAYAmPWtZ6Gyv_8bS1E.cer
File: bfVn7PhlSAYAmPWtZ6Gyv_8bS1E.cer (raw, json)
Hash identifier: NAeDK5gzF6hY+2Uk7T2pH3bqu//p4gu/PArp29kfy5Q=
Subject key identifier: 6D:F5:67:EC:F8:65:48:06:00:98:F5:AD:67:A1:B2:BF:FF:1B:4B:51
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC87112F113A4E8353DC2C79CE4ED981A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e5/761b4c-8915-4319-913e-0ca8feba9585/1/bfVn7PhlSAYAmPWtZ6Gyv_8bS1E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e5/761b4c-8915-4319-913e-0ca8feba9585/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:31:42 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 213093
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:12:f1:13:a4:e8:35:3d:c2:c7:9c:e4:ed:98:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:31:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6df567ecf86548060098f5ad67a1b2bfff1b4b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cb:64:5a:85:10:e8:a3:ab:ee:14:cc:42:9e:
e5:6c:d8:67:b3:63:9a:76:a0:aa:d5:b1:dc:4d:0d:
d6:6d:f3:d9:23:48:30:b6:cb:aa:65:a8:de:d6:9c:
4d:b5:d7:eb:74:b4:b5:33:db:3e:91:e4:cb:c6:6c:
c5:33:8d:e9:e8:78:44:29:d3:4a:4d:98:a7:90:88:
73:0e:17:30:ff:43:90:29:86:b5:2b:99:f4:45:15:
34:62:cb:03:2b:fc:41:6a:a7:67:a7:49:67:30:96:
3d:70:0f:d7:4f:8a:30:b0:62:4d:44:3d:d8:01:98:
81:b1:25:c9:d2:6c:ff:d1:7e:cd:52:40:3c:4f:d8:
2a:7f:03:ec:ea:bc:29:3f:28:50:87:b1:ed:55:8b:
c2:67:dd:4f:fd:79:7d:c4:04:e6:43:06:3c:e6:85:
90:82:21:7e:94:58:ab:3e:fe:ff:b0:e7:dd:d6:99:
08:27:95:2a:ca:a9:61:e1:c4:ce:73:c8:ff:25:cd:
bc:d5:78:59:bf:6b:e6:95:7a:b1:8c:3f:55:d3:17:
25:0b:9e:11:bb:f4:5a:7c:21:0d:7b:32:33:5f:fb:
77:66:4f:1d:a9:a8:a8:09:30:ac:c8:7c:34:f1:ca:
37:1d:b5:35:b9:3b:9a:c3:ce:61:26:ef:15:9f:ec:
29:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F5:67:EC:F8:65:48:06:00:98:F5:AD:67:A1:B2:BF:FF:1B:4B:51
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/761b4c-8915-4319-913e-0ca8feba9585/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/761b4c-8915-4319-913e-0ca8feba9585/1/bfVn7PhlSAYAmPWtZ6Gyv_8bS1E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213093
Signature Algorithm: sha256WithRSAEncryption
72:b4:7b:1e:11:88:b6:6d:8d:4b:c9:42:ff:90:e1:20:b2:ea:
24:f8:1c:b8:07:99:08:ba:38:01:78:f8:f8:7f:a3:0f:61:ce:
67:75:66:87:08:26:81:10:f2:2b:08:35:bf:c8:f0:62:40:9d:
de:08:98:95:c0:da:7f:99:8c:42:ce:58:38:9a:eb:88:e2:b5:
dc:5e:3a:0b:f2:8e:4b:88:40:ae:80:2e:1f:7b:36:fe:b4:0c:
0b:10:ef:f2:f1:8e:64:9a:82:e4:9f:6f:44:80:b9:7f:54:d6:
65:cb:7a:e4:a9:c3:f3:61:ad:58:10:d4:26:f4:0c:9d:f6:eb:
01:17:bb:de:ec:9d:ec:5e:cb:1b:0f:aa:f2:db:c3:6a:bb:7d:
a9:22:83:cc:46:14:12:c4:35:55:b6:e4:84:b0:49:85:bd:67:
25:04:1b:03:c2:1a:49:03:8b:90:2b:96:c6:47:1a:63:01:04:
04:d0:c0:98:2a:4c:f3:49:14:38:e2:87:bc:6b:d1:f8:fd:ae:
d9:e1:2c:47:92:03:d1:09:32:ea:7e:6e:63:a3:9c:42:14:9a:
e6:64:5b:77:a9:28:b0:93:df:64:2e:1c:be:21:c9:80:0f:4a:
05:e1:f9:25:e8:9d:f2:3f:4e:40:a8:cd:35:57:05:b6:cd:25:
c6:65:15:89
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYzIcRLxE6ToNT3Cx5zk7ZgaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDQzMTQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZGY1NjdlY2Y4NjU0ODA2MDA5OGY1YWQ2N2ExYjJiZmZmMWI0YjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMtkWoUQ6KOr7hTMQp7lbNhns2Oa
dqCq1bHcTQ3WbfPZI0gwtsuqZaje1pxNtdfrdLS1M9s+keTLxmzFM43p6HhEKdNK
TZinkIhzDhcw/0OQKYa1K5n0RRU0YssDK/xBaqdnp0lnMJY9cA/XT4owsGJNRD3Y
AZiBsSXJ0mz/0X7NUkA8T9gqfwPs6rwpPyhQh7HtVYvCZ91P/Xl9xATmQwY85oWQ
giF+lFirPv7/sOfd1pkIJ5Uqyqlh4cTOc8j/Jc281XhZv2vmlXqxjD9V0xclC54R
u/RafCENezIzX/t3Zk8dqaioCTCsyHw08co3HbU1uTuaw85hJu8Vn+wpYQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFG31Z+z4ZUgGAJj1rWehsr//G0tRMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U1Lzc2MWI0
Yy04OTE1LTQzMTktOTEzZS0wY2E4ZmViYTk1ODUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUvNzYxYjRj
LTg5MTUtNDMxOS05MTNlLTBjYThmZWJhOTU4NS8xL2JmVm43UGhsU0FZQW1QV3Ra
Nkd5dl84YlMxRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNAZTANBgkqhkiG9w0BAQsFAAOCAQEAcrR7HhGItm2N
S8lC/5DhILLqJPgcuAeZCLo4AXj4+H+jD2HOZ3VmhwgmgRDyKwg1v8jwYkCd3giY
lcDaf5mMQs5YOJrriOK13F46C/KOS4hAroAuH3s2/rQMCxDv8vGOZJqC5J9vRIC5
f1TWZct65KnD82GtWBDUJvQMnfbrARe73uyd7F7LGw+q8tvDart9qSKDzEYUEsQ1
VbbkhLBJhb1nJQQbA8IaSQOLkCuWxkcaYwEEBNDAmCpM80kUOOKHvGvR+P2u2eEs
R5ID0Qky6n5uY6OcQhSa5mRbd6kosJPfZC4cviHJgA9KBeH5Jeid8j9OQKjNNVcF
ts0lxmUViQ==
-----END CERTIFICATE-----
Generated at Fri May 3 01:56:23 2024 by rpki-client on console-ams.rpki-client.org