Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc2ljxUk2CM2224M8qKf-vLaifg.cer
File: cc2ljxUk2CM2224M8qKf-vLaifg.cer (raw, json)
Hash identifier: uF/Rmqh0amauGVQjegwR3h8E6k8UpcaGycxc1PgO/v0=
Subject key identifier: 71:CD:A5:8F:15:24:D8:23:36:DB:6E:0C:F2:A2:9F:FA:F2:DA:89:F8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86FA91FD41BC1AFEC8A22B1ECD9C88B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/cc2ljxUk2CM2224M8qKf-vLaifg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:30:10 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 13059
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:a9:1f:d4:1b:c1:af:ec:8a:22:b1:ec:d9:c8:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=71cda58f1524d82336db6e0cf2a29ffaf2da89f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b7:0f:69:3b:4a:8b:b8:7d:68:89:2b:8e:d1:
e6:cd:31:d4:a1:c0:e5:68:5f:55:32:33:3c:93:32:
1c:a7:9b:34:d3:82:fe:3f:ab:7c:67:65:2f:77:c2:
65:2e:0b:d8:bc:03:a0:2e:12:5c:4d:f2:95:b0:3a:
95:5c:e5:22:4b:64:5e:86:a0:f8:2c:d6:d1:e3:92:
a8:43:0f:c0:88:12:95:36:23:eb:95:c1:28:ec:09:
4c:f8:89:60:bc:88:dd:b3:81:81:30:57:32:11:4b:
5d:95:5b:51:b3:93:c4:37:f2:e6:b4:35:b4:da:5b:
a4:06:9f:cb:55:1b:42:63:c5:80:c3:ef:ff:d8:0a:
5b:69:6d:67:85:a3:ff:98:08:94:03:25:cc:b0:9e:
62:b9:74:6d:7e:93:67:15:39:33:03:ad:a5:a5:01:
69:e9:34:9f:b4:48:9a:19:ac:dc:d0:29:73:54:a0:
a7:2d:c2:a4:54:2a:c5:9f:d6:ce:5d:a9:7a:78:e0:
29:5b:79:33:9b:3f:67:97:b8:9f:aa:58:fb:de:ad:
26:81:ae:8a:cf:54:ac:2c:e1:57:9f:f7:db:57:11:
6e:ab:7f:6b:8d:14:e1:a8:17:29:1f:f7:f9:e3:95:
da:1f:cd:29:04:21:79:c0:62:93:71:78:38:79:36:
12:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CD:A5:8F:15:24:D8:23:36:DB:6E:0C:F2:A2:9F:FA:F2:DA:89:F8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/cc2ljxUk2CM2224M8qKf-vLaifg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13059
Signature Algorithm: sha256WithRSAEncryption
84:dd:bc:88:e2:b4:c2:14:3a:85:67:1c:e3:3f:94:58:d5:e6:
10:84:64:b4:21:2f:57:f5:7e:60:ab:4a:fe:b3:66:bc:7c:5b:
fd:f1:36:74:33:14:4b:99:ef:5e:08:17:f1:4e:02:fb:6c:9f:
87:e7:23:4d:94:0f:ac:62:51:16:c0:08:7c:9c:d9:56:7f:15:
a6:59:f3:ca:04:86:bd:81:48:d0:2b:f5:bd:58:e1:0e:3c:51:
7e:0e:9a:45:22:0c:48:a6:da:d4:a3:c5:ab:12:e2:7e:cc:0f:
81:e7:c3:84:53:f9:f6:22:09:50:33:16:cd:4f:66:85:18:88:
7a:f8:4a:be:4b:65:61:e0:0a:e7:6e:ae:7e:4a:fb:14:af:58:
2f:3b:f5:bd:54:bb:59:c0:84:e9:26:6b:02:d2:79:5a:d7:69:
b4:fa:c2:24:6a:11:6d:12:59:0f:7d:10:d1:75:a2:3c:41:54:
a3:d8:2a:eb:34:68:e8:82:57:24:8d:30:ba:85:48:f4:43:ed:
e7:7d:f0:fe:4d:0b:9e:5a:20:be:4f:df:21:dc:d4:80:63:f2:
bb:af:d2:24:a9:92:52:9c:c5:08:aa:eb:62:c2:75:b6:c8:85:
bd:9d:78:21:4d:43:48:eb:bf:9c:2f:3e:b5:58:10:9d:de:ea:
23:8e:d3:42
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgISAYzIb6kf1BvBr+yKIrHs2ciLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDQzMDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MWNkYTU4ZjE1MjRkODIzMzZkYjZlMGNmMmEyOWZmYWYyZGE4OWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrcPaTtKi7h9aIkrjtHmzTHUocDl
aF9VMjM8kzIcp5s004L+P6t8Z2Uvd8JlLgvYvAOgLhJcTfKVsDqVXOUiS2RehqD4
LNbR45KoQw/AiBKVNiPrlcEo7AlM+IlgvIjds4GBMFcyEUtdlVtRs5PEN/LmtDW0
2lukBp/LVRtCY8WAw+//2ApbaW1nhaP/mAiUAyXMsJ5iuXRtfpNnFTkzA62lpQFp
6TSftEiaGazc0ClzVKCnLcKkVCrFn9bOXal6eOApW3kzmz9nl7ifqlj73q0mga6K
z1SsLOFXn/fbVxFuq39rjRThqBcpH/f545XaH80pBCF5wGKTcXg4eTYS0wIDAQAB
o4ICfjCCAnowHQYDVR0OBBYEFHHNpY8VJNgjNttuDPKin/ry2on4MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RmL2EzNTU0
MC1hYTU4LTRhM2MtYWI0NS1iYzJkMTdmZThiZWIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYvYTM1NTQw
LWFhNTgtNGEzYy1hYjQ1LWJjMmQxN2ZlOGJlYi8xL2NjMmxqeFVrMkNNMjIyNE04
cUtmLXZMYWlmZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBkGCCsGAQUF
BwEIAQH/BAowCKAGMAQCAjMDMA0GCSqGSIb3DQEBCwUAA4IBAQCE3byI4rTCFDqF
ZxzjP5RY1eYQhGS0IS9X9X5gq0r+s2a8fFv98TZ0MxRLme9eCBfxTgL7bJ+H5yNN
lA+sYlEWwAh8nNlWfxWmWfPKBIa9gUjQK/W9WOEOPFF+DppFIgxIptrUo8WrEuJ+
zA+B58OEU/n2IglQMxbNT2aFGIh6+Eq+S2Vh4Arnbq5+SvsUr1gvO/W9VLtZwITp
JmsC0nla12m0+sIkahFtElkPfRDRdaI8QVSj2CrrNGjoglckjTC6hUj0Q+3nffD+
TQueWiC+T98h3NSAY/K7r9IkqZJSnMUIqutiwnW2yIW9nXghTUNI67+cLz61WBCd
3uojjtNC
-----END CERTIFICATE-----
Generated at Fri May 3 07:14:42 2024 by rpki-client on console-ams.rpki-client.org