Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fgdwhBDMdkNEuM-k8-NopeJStlA.cer
File: fgdwhBDMdkNEuM-k8-NopeJStlA.cer (raw, json)
Hash identifier: UVKyQBZGNmWLtRDoAZ3IMeKM5yc0GWrdlOPuy1Hr/Wc=
Subject key identifier: 7E:07:70:84:10:CC:76:43:44:B8:CF:A4:F3:E3:68:A5:E2:52:B6:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA99707EEC482A1CCF3CFE2918AE4E4B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/8f5e59-7f71-4cf2-a619-3f0295eee951/1/fgdwhBDMdkNEuM-k8-NopeJStlA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/8f5e59-7f71-4cf2-a619-3f0295eee951/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 14:35:02 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 199075
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:70:7e:ec:48:2a:1c:cf:3c:fe:29:18:ae:4e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 14:35:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e07708410cc764344b8cfa4f3e368a5e252b650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:aa:76:84:33:ea:f9:8b:2b:75:a2:43:a2:e9:
d6:0c:20:64:fa:94:31:4c:01:ae:ca:0a:8e:cb:49:
94:e4:8d:75:9f:60:61:d9:fa:a5:64:2d:72:b5:58:
0b:61:d1:ac:ca:51:70:a7:8e:66:16:c5:bc:16:cc:
7f:66:0b:88:2f:34:73:fe:b2:b4:a0:85:c9:47:59:
aa:28:34:2c:76:40:4d:58:95:e1:0c:9e:dc:9b:39:
5e:e2:f9:04:2b:c9:03:19:90:4c:8b:f5:2a:93:f7:
d5:a6:43:9a:fa:56:81:61:29:c8:47:54:ad:d5:c6:
97:01:ed:44:82:e0:c0:82:d3:7e:56:1b:5d:6b:77:
11:a9:1d:f8:91:34:11:ac:af:48:bf:12:50:7f:ff:
dd:16:29:ca:eb:25:3e:35:ec:69:44:1a:d8:78:9d:
ce:4e:0d:11:d1:24:14:47:0a:96:f9:8c:c1:cf:f3:
d1:60:77:12:bf:90:3a:af:97:af:13:da:04:ff:90:
06:17:0e:ee:17:3b:e0:ae:3f:a1:76:49:4d:9e:14:
9b:45:b2:7d:98:fc:ff:1f:5b:da:aa:f8:93:34:bd:
5b:9a:cc:c5:30:5c:5f:35:6c:3d:d3:1b:0d:77:4b:
34:3a:ca:8d:28:d9:5e:59:22:9b:6b:dc:48:c7:62:
94:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:07:70:84:10:CC:76:43:44:B8:CF:A4:F3:E3:68:A5:E2:52:B6:50
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8f5e59-7f71-4cf2-a619-3f0295eee951/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8f5e59-7f71-4cf2-a619-3f0295eee951/1/fgdwhBDMdkNEuM-k8-NopeJStlA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199075
Signature Algorithm: sha256WithRSAEncryption
0a:31:05:79:79:b2:b0:be:87:e9:36:a9:d3:6e:cb:d1:e1:41:
37:75:c1:35:03:1a:8e:4b:42:33:a6:59:2e:94:2a:73:ca:5f:
20:87:58:75:67:22:86:75:43:87:3a:b7:82:76:7b:b9:24:80:
e4:f5:73:3a:1d:52:d2:40:dd:fd:7f:79:ea:f5:97:dc:f1:84:
06:dd:ec:b1:31:ea:0f:c1:8f:a1:5e:d9:1a:99:30:0b:84:69:
5a:11:4d:8a:f3:2a:0a:de:0c:85:4a:55:0d:95:2d:e9:13:d4:
e2:86:04:83:4f:2e:91:40:58:e0:a8:b6:d0:b4:49:d7:dc:b5:
17:84:cb:c3:a9:09:4e:0c:12:8a:74:ba:03:a5:a0:11:d9:fc:
03:fb:7f:90:75:12:4c:97:0d:1a:f0:ad:37:90:cf:50:3d:f0:
06:14:a5:c5:4a:fe:cf:db:8c:bb:ae:9d:a7:c1:cc:92:9f:e2:
bf:87:75:c6:a8:a0:3c:ad:6f:cf:cc:d0:8f:0b:c1:e5:df:fe:
e4:08:2a:26:6a:7b:27:e7:21:7b:ba:f9:83:14:37:7f:d6:39:
dc:9f:cb:5d:9c:36:5c:ed:81:62:39:5a:c6:f9:93:f0:19:0e:
ff:43:d9:42:59:be:71:f1:45:be:8b:f3:f5:34:e9:5f:f2:ed:
39:9d:28:e5
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYzKmXB+7EgqHM88/ikYrk5LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTQzNTAyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTA3NzA4NDEwY2M3NjQzNDRiOGNmYTRmM2UzNjhhNWUyNTJiNjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/Kp2hDPq+YsrdaJDounWDCBk+pQx
TAGuygqOy0mU5I11n2Bh2fqlZC1ytVgLYdGsylFwp45mFsW8Fsx/ZguILzRz/rK0
oIXJR1mqKDQsdkBNWJXhDJ7cmzle4vkEK8kDGZBMi/Uqk/fVpkOa+laBYSnIR1St
1caXAe1EguDAgtN+Vhtda3cRqR34kTQRrK9IvxJQf//dFinK6yU+NexpRBrYeJ3O
Tg0R0SQURwqW+YzBz/PRYHcSv5A6r5evE9oE/5AGFw7uFzvgrj+hdklNnhSbRbJ9
mPz/H1vaqviTNL1bmszFMFxfNWw90xsNd0s0OsqNKNleWSKba9xIx2KUCwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFH4HcIQQzHZDRLjPpPPjaKXiUrZQMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VlLzhmNWU1
OS03ZjcxLTRjZjItYTYxOS0zZjAyOTVlZWU5NTEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWUvOGY1ZTU5
LTdmNzEtNGNmMi1hNjE5LTNmMDI5NWVlZTk1MS8xL2ZnZHdoQkRNZGtORXVNLWs4
LU5vcGVKU3RsQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMJozANBgkqhkiG9w0BAQsFAAOCAQEACjEFeXmysL6H
6Tap027L0eFBN3XBNQMajktCM6ZZLpQqc8pfIIdYdWcihnVDhzq3gnZ7uSSA5PVz
Oh1S0kDd/X956vWX3PGEBt3ssTHqD8GPoV7ZGpkwC4RpWhFNivMqCt4MhUpVDZUt
6RPU4oYEg08ukUBY4Ki20LRJ19y1F4TLw6kJTgwSinS6A6WgEdn8A/t/kHUSTJcN
GvCtN5DPUD3wBhSlxUr+z9uMu66dp8HMkp/iv4d1xqigPK1vz8zQjwvB5d/+5Agq
Jmp7J+che7r5gxQ3f9Y53J/LXZw2XO2BYjlaxvmT8BkO/0PZQlm+cfFFvovz9TTp
X/LtOZ0o5Q==
-----END CERTIFICATE-----
Generated at Fri May 3 02:08:55 2024 by rpki-client on console-ams.rpki-client.org