Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bnnOupU7B9qiKvPIqrKxzU4iSNA.cer
File: bnnOupU7B9qiKvPIqrKxzU4iSNA.cer (raw, json)
Hash identifier: mF4VKDG55IWChhwn5nzoRUKW9FhrCH9aGppN0QMH2n8=
Subject key identifier: 6E:79:CE:BA:95:3B:07:DA:A2:2A:F3:C8:AA:B2:B1:CD:4E:22:48:D0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8019775C87E07EB1BAC54F0E4B38632
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:56 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 203703
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:97:75:c8:7e:07:eb:1b:ac:54:f0:e4:b3:86:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e79ceba953b07daa22af3c8aab2b1cd4e2248d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9e:22:ac:29:0a:b8:57:26:43:d8:40:57:9a:
74:8b:69:52:f9:f5:7a:6a:d2:2b:e0:5a:d2:0d:97:
d5:e3:5c:46:6d:3d:6a:97:85:40:fb:28:75:65:10:
4c:38:5c:15:c6:23:9e:f7:14:8a:da:4a:19:d7:0e:
0b:9e:fa:47:71:03:c9:31:4d:53:37:c8:29:f1:a5:
ee:97:f2:a9:ec:72:fa:1c:fe:c5:48:80:1a:af:98:
36:38:74:48:8c:2b:63:be:8f:05:25:1e:d7:88:87:
28:93:74:6d:3d:0c:f7:39:f4:59:f7:ff:a2:3b:a7:
b9:01:e1:df:f4:bd:17:94:de:70:73:8e:9d:3a:5c:
d1:d1:4a:29:6d:0a:5c:32:09:ce:3e:48:79:a2:ca:
5e:fe:7f:bf:60:05:d3:67:2c:15:9b:a6:9a:9d:ca:
0f:e5:de:3d:ef:7f:b9:d0:3f:df:08:6b:21:59:f0:
d4:6d:17:ef:d6:b9:d9:70:52:85:11:d3:e4:c3:20:
8a:4a:fa:59:d6:c8:30:29:4a:52:08:3c:17:aa:3d:
68:64:47:3a:e9:a1:87:2d:bf:82:cd:8b:26:af:8a:
e5:30:bc:a6:04:f4:92:16:d2:69:28:86:4f:99:31:
4d:ef:8b:79:b5:68:e1:95:8b:89:05:eb:aa:75:59:
db:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:79:CE:BA:95:3B:07:DA:A2:2A:F3:C8:AA:B2:B1:CD:4E:22:48:D0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203703
Signature Algorithm: sha256WithRSAEncryption
45:34:47:ac:e0:70:d1:7d:91:ff:d1:a8:ff:dd:b5:be:f9:d5:
02:f3:9d:68:6a:c7:77:bc:29:f6:3a:6f:73:96:8a:bb:eb:79:
b3:a5:e2:4d:5d:72:db:8e:90:36:52:e4:25:99:77:83:35:a3:
f1:c3:f7:e9:f7:63:94:1c:ff:68:27:ac:11:89:af:d2:42:6c:
fa:ff:b8:07:8d:bd:bc:a0:80:1d:65:18:22:04:6e:f7:43:25:
8f:d7:0c:05:96:c6:14:58:6d:ae:44:1f:6a:8d:c2:d3:9e:f2:
de:03:93:ce:3a:cc:0c:51:74:54:a4:a4:d7:ad:1f:7e:f0:51:
89:d7:d7:c0:1b:f6:04:5c:83:1b:f4:a5:cc:c9:97:db:a0:37:
b6:fe:40:41:04:82:b5:c2:bb:06:03:df:2f:27:69:e1:e1:0e:
42:c0:9b:9a:92:f6:1d:c4:05:58:2c:c8:84:ec:c3:3e:60:9c:
2a:3c:3c:fb:3f:59:5f:1b:ab:6d:1d:aa:4d:b0:aa:41:c6:96:
11:05:4c:69:1c:a0:de:a6:70:2e:32:41:4a:9d:2e:52:60:a6:
ae:06:c9:41:f8:fa:a7:27:99:b0:d5:2b:6f:bb:de:7e:ed:81:
47:fa:02:46:7e:68:bc:08:13:ac:15:59:80:fe:76:7c:c5:a2:
1d:6a:25:61
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYzIAZd1yH4H6xusVPDks4YyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDIyOTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTc5Y2ViYTk1M2IwN2RhYTIyYWYzYzhhYWIyYjFjZDRlMjI0OGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZ4irCkKuFcmQ9hAV5p0i2lS+fV6
atIr4FrSDZfV41xGbT1ql4VA+yh1ZRBMOFwVxiOe9xSK2koZ1w4LnvpHcQPJMU1T
N8gp8aXul/Kp7HL6HP7FSIAar5g2OHRIjCtjvo8FJR7XiIcok3RtPQz3OfRZ9/+i
O6e5AeHf9L0XlN5wc46dOlzR0UopbQpcMgnOPkh5ospe/n+/YAXTZywVm6aancoP
5d4973+50D/fCGshWfDUbRfv1rnZcFKFEdPkwyCKSvpZ1sgwKUpSCDwXqj1oZEc6
6aGHLb+CzYsmr4rlMLymBPSSFtJpKIZPmTFN74t5tWjhlYuJBeuqdVnbtQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFG55zrqVOwfaoirzyKqysc1OIkjQMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIwLzJjYzlm
Ni0wNWYzLTQwZDktYjZhZS0wN2ZmYjY2YzU0ZGYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAvMmNjOWY2
LTA1ZjMtNDBkOS1iNmFlLTA3ZmZiNjZjNTRkZi8xL2Jubk91cFU3QjlxaUt2UElx
ckt4elU0aVNOQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMbtzANBgkqhkiG9w0BAQsFAAOCAQEARTRHrOBw0X2R
/9Go/921vvnVAvOdaGrHd7wp9jpvc5aKu+t5s6XiTV1y246QNlLkJZl3gzWj8cP3
6fdjlBz/aCesEYmv0kJs+v+4B429vKCAHWUYIgRu90Mlj9cMBZbGFFhtrkQfao3C
057y3gOTzjrMDFF0VKSk160ffvBRidfXwBv2BFyDG/SlzMmX26A3tv5AQQSCtcK7
BgPfLydp4eEOQsCbmpL2HcQFWCzIhOzDPmCcKjw8+z9ZXxurbR2qTbCqQcaWEQVM
aRyg3qZwLjJBSp0uUmCmrgbJQfj6pyeZsNUrb7vefu2BR/oCRn5ovAgTrBVZgP52
fMWiHWolYQ==
-----END CERTIFICATE-----
Generated at Fri May 3 07:52:00 2024 by rpki-client on console-fra.rpki-client.org