Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dgf2ne5DrAHX3-rKm3aiQOpu82Y.cer
File: dgf2ne5DrAHX3-rKm3aiQOpu82Y.cer (raw, json)
Hash identifier: Glli7YAFDk7QTf1UXDAkKjtS86zw+m/QIe+LHaK1MXY=
Subject key identifier: 76:07:F6:9D:EE:43:AC:01:D7:DF:EA:CA:9B:76:A2:40:EA:6E:F3:66
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01903CFF7DFD22B19BD2E551E39AF346BD4C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ea/2cdb3d-ab43-4526-8357-c0243a3bdafb/1/dgf2ne5DrAHX3-rKm3aiQOpu82Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ea/2cdb3d-ab43-4526-8357-c0243a3bdafb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 21 Jun 2024 22:51:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 214646
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3c:ff:7d:fd:22:b1:9b:d2:e5:51:e3:9a:f3:46:bd:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 21 22:51:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7607f69dee43ac01d7dfeaca9b76a240ea6ef366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6a:e4:cd:3c:34:75:7c:61:9d:22:4c:af:d9:
70:ee:c8:48:1e:26:fd:4b:f3:39:de:26:bf:7e:f7:
2b:60:f9:71:26:e7:0f:5a:11:ad:22:76:7f:61:d4:
bb:d8:e6:70:de:dd:89:2b:6e:c7:6f:fb:76:46:a5:
ae:ce:22:1e:11:51:c3:77:fe:37:fa:66:c7:f5:82:
fc:ac:79:38:83:02:d6:39:97:7a:93:8c:9a:d6:f6:
69:43:1d:3d:15:ef:f2:62:2d:c3:b4:d7:46:29:68:
f2:6e:37:0a:3f:8e:a5:4b:02:73:75:cf:af:59:ef:
57:f0:13:d3:4a:a8:7f:68:c3:f5:66:b3:71:44:cb:
56:b9:39:86:10:58:58:a4:11:4c:6a:44:0f:3d:9f:
08:85:2e:00:c8:c6:fe:f3:e1:a8:3a:e7:71:92:99:
a3:51:bc:28:62:ce:b8:c0:8e:16:e5:62:92:50:3c:
3f:38:c5:1f:3b:4f:af:93:5d:17:3a:34:b7:ba:0a:
c3:4b:9e:54:a7:56:1d:ad:89:fc:dc:9d:ea:91:10:
9e:d4:a0:81:b0:df:0d:89:6d:fc:d7:45:00:07:95:
a1:cc:69:a5:6e:ae:dc:a0:b7:f3:66:67:c7:6e:53:
7d:18:f8:0b:2c:35:89:a9:c3:be:36:01:9f:a2:be:
f2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:07:F6:9D:EE:43:AC:01:D7:DF:EA:CA:9B:76:A2:40:EA:6E:F3:66
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/2cdb3d-ab43-4526-8357-c0243a3bdafb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/2cdb3d-ab43-4526-8357-c0243a3bdafb/1/dgf2ne5DrAHX3-rKm3aiQOpu82Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214646
Signature Algorithm: sha256WithRSAEncryption
7b:82:21:5e:f6:1d:ab:7b:2b:35:a5:69:f4:02:bf:65:e8:13:
cd:5e:00:6e:a2:e8:4a:23:96:61:2e:29:5c:7f:13:01:20:7f:
8b:7d:cf:da:2a:b4:56:d3:49:ca:45:a0:18:85:5c:39:14:1a:
6e:62:15:7e:aa:79:8e:9f:12:37:e7:e9:bc:33:09:0e:b7:66:
09:ce:fa:04:3e:fe:b4:5d:f8:29:f7:c7:de:e0:37:cb:15:ca:
c8:09:f2:b3:2f:66:28:a5:b9:28:61:c6:18:29:10:1e:b0:fc:
bc:72:a6:2b:16:ed:6a:96:7e:5a:07:4a:7d:ba:96:2f:25:d2:
da:ec:83:24:ba:9d:ae:30:9c:12:a5:bc:d1:f0:d6:54:66:3d:
c9:a9:2e:cb:7f:f6:ea:7b:54:26:b9:f3:7b:95:db:14:3f:ed:
16:50:8e:33:28:48:fe:15:46:ae:6d:07:20:9c:d7:21:e0:34:
f1:ae:de:61:e2:84:dc:04:cf:34:f2:d6:49:cf:20:6a:5a:49:
22:83:90:3d:ac:b0:72:9a:54:10:1d:1b:cd:27:1e:e8:34:cc:
4e:17:32:4c:41:f1:77:5f:4d:64:1d:9b:b4:2a:ac:6e:8f:da:
d1:64:3f:45:3c:4f:ed:0c:ef:1b:84:b5:b7:91:36:22:b7:40:
9e:cb:ce:11
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZA8/339IrGb0uVR45rzRr1MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNjIxMjI1MTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjA3ZjY5ZGVlNDNhYzAxZDdkZmVhY2E5Yjc2YTI0MGVhNmVmMzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmrkzTw0dXxhnSJMr9lw7shIHib9
S/M53ia/fvcrYPlxJucPWhGtInZ/YdS72OZw3t2JK27Hb/t2RqWuziIeEVHDd/43
+mbH9YL8rHk4gwLWOZd6k4ya1vZpQx09Fe/yYi3DtNdGKWjybjcKP46lSwJzdc+v
We9X8BPTSqh/aMP1ZrNxRMtWuTmGEFhYpBFMakQPPZ8IhS4AyMb+8+GoOudxkpmj
UbwoYs64wI4W5WKSUDw/OMUfO0+vk10XOjS3ugrDS55Up1YdrYn83J3qkRCe1KCB
sN8NiW3810UAB5WhzGmlbq7coLfzZmfHblN9GPgLLDWJqcO+NgGfor7y6wIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFHYH9p3uQ6wB19/qypt2okDqbvNmMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VhLzJjZGIz
ZC1hYjQzLTQ1MjYtODM1Ny1jMDI0M2EzYmRhZmIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvMmNkYjNk
LWFiNDMtNDUyNi04MzU3LWMwMjQzYTNiZGFmYi8xL2RnZjJuZTVEckFIWDMtcktt
M2FpUU9wdTgyWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNGdjANBgkqhkiG9w0BAQsFAAOCAQEAe4IhXvYdq3sr
NaVp9AK/ZegTzV4AbqLoSiOWYS4pXH8TASB/i33P2iq0VtNJykWgGIVcORQabmIV
fqp5jp8SN+fpvDMJDrdmCc76BD7+tF34KffH3uA3yxXKyAnysy9mKKW5KGHGGCkQ
HrD8vHKmKxbtapZ+WgdKfbqWLyXS2uyDJLqdrjCcEqW80fDWVGY9yakuy3/26ntU
Jrnze5XbFD/tFlCOMyhI/hVGrm0HIJzXIeA08a7eYeKE3ATPNPLWSc8galpJIoOQ
PaywcppUEB0bzSce6DTMThcyTEHxd19NZB2btCqsbo/a0WQ/RTxP7QzvG4S1t5E2
IrdAnsvOEQ==
-----END CERTIFICATE-----
Generated at Sat Sep 7 21:08:17 2024 by rpki-client on console-fra.rpki-client.org