Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g7ky0jXyELk5XWhJF10vcs6r1wk.cer
File: g7ky0jXyELk5XWhJF10vcs6r1wk.cer (raw, json)
Hash identifier: kKhDyL8vElun6dNXuI/kTAeH6JXCJ2JMhFVpINUED5E=
Subject key identifier: 83:B9:32:D2:35:F2:10:B9:39:5D:68:49:17:5D:2F:72:CE:AB:D7:09
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86F037AF6A5AE8633602F30FA933F00
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/219bed-0481-48d0-84c8-985e8eadc95f/1/g7ky0jXyELk5XWhJF10vcs6r1wk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/219bed-0481-48d0-84c8-985e8eadc95f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:29:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212641
IP: 2001:67c:2470::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:03:7a:f6:a5:ae:86:33:60:2f:30:fa:93:3f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83b932d235f210b9395d6849175d2f72ceabd709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a8:2e:a8:f6:7d:04:c9:da:48:4d:06:db:7a:
8e:27:7c:cb:b8:86:b4:53:de:56:65:4c:a8:fc:8d:
81:0f:04:32:10:af:51:e2:27:75:5a:a6:51:d2:44:
ae:1a:98:dc:45:0b:3d:12:20:3d:7c:1f:ee:19:07:
0d:4b:e5:2a:d1:96:1c:6e:b3:64:6b:2b:9d:22:17:
a7:a1:19:69:a1:e8:ea:2f:f2:28:6a:ff:5e:56:5c:
ea:89:8c:d0:25:09:26:47:0d:ae:25:cd:fa:cf:8b:
0d:09:ea:4f:ce:4c:e2:61:2c:6e:13:8d:18:9e:0d:
b7:95:16:0f:32:96:f4:a5:40:27:fd:c1:75:ca:ce:
31:a7:51:0f:fb:45:34:f7:e2:7f:f8:a3:4d:de:6c:
fa:61:f3:9f:72:d2:04:31:96:0e:2a:8b:77:b1:5f:
83:9c:9c:15:f6:01:cd:41:39:cc:92:98:52:a0:07:
da:bb:e5:39:6d:fd:9f:05:e6:56:ab:7c:58:0b:09:
7a:2c:fc:d3:0e:66:4b:da:6d:fb:b1:a0:1c:36:45:
dd:cd:8a:15:08:b6:37:de:9f:63:2f:a3:00:a4:9d:
3c:dd:1f:07:a4:76:c5:7d:95:7b:51:bc:54:ae:e0:
5e:de:2f:bb:cb:e5:df:c5:d7:53:87:c9:6b:85:de:
87:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B9:32:D2:35:F2:10:B9:39:5D:68:49:17:5D:2F:72:CE:AB:D7:09
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/219bed-0481-48d0-84c8-985e8eadc95f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/219bed-0481-48d0-84c8-985e8eadc95f/1/g7ky0jXyELk5XWhJF10vcs6r1wk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2470::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212641
Signature Algorithm: sha256WithRSAEncryption
86:df:ad:10:1d:9a:f6:83:e8:ea:99:ae:5a:1d:2f:7b:da:88:
a6:41:32:f5:1b:05:68:d2:64:b8:1c:c2:a7:58:b8:3b:36:00:
d7:e1:82:b1:12:8a:43:24:5d:46:40:8d:13:5b:3b:ae:69:64:
26:36:8b:6e:11:40:45:f6:2b:a5:a7:29:b8:49:96:bc:3d:05:
81:69:08:76:6d:c6:64:36:e6:a1:5e:a1:cf:da:f6:10:82:73:
7c:47:27:80:82:b2:1b:46:a9:9e:3f:35:a8:15:e3:6e:a1:49:
67:e3:d6:69:56:88:97:1e:6a:57:d6:81:36:33:84:e4:6a:3a:
fc:02:11:3d:cb:63:af:e7:25:b2:0e:eb:cb:81:aa:1a:49:bd:
9e:fb:e2:87:58:48:b9:4c:57:af:09:ab:0f:30:91:02:d5:6a:
2e:f6:d5:36:5d:7d:99:d1:45:2d:a2:91:75:33:00:da:6a:97:
08:4e:69:d8:1d:a0:93:c8:eb:68:fe:d4:ee:11:a9:eb:39:3d:
ff:f9:28:7d:5e:de:c3:14:8d:c3:67:95:0e:36:c6:91:13:00:
d9:8e:22:ef:9f:b7:05:de:3b:4d:b3:05:73:64:95:46:c4:39:
4d:ea:b1:13:c1:4c:09:14:1f:51:b3:c2:e3:28:38:5e:9f:bf:
8f:26:28:46
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgISAYzIbwN69qWuhjNgLzD6kz8AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDQyOTI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4M2I5MzJkMjM1ZjIxMGI5Mzk1ZDY4NDkxNzVkMmY3MmNlYWJkNzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKguqPZ9BMnaSE0G23qOJ3zLuIa0
U95WZUyo/I2BDwQyEK9R4id1WqZR0kSuGpjcRQs9EiA9fB/uGQcNS+Uq0ZYcbrNk
ayudIhenoRlpoejqL/Ioav9eVlzqiYzQJQkmRw2uJc36z4sNCepPzkziYSxuE40Y
ng23lRYPMpb0pUAn/cF1ys4xp1EP+0U09+J/+KNN3mz6YfOfctIEMZYOKot3sV+D
nJwV9gHNQTnMkphSoAfau+U5bf2fBeZWq3xYCwl6LPzTDmZL2m37saAcNkXdzYoV
CLY33p9jL6MApJ083R8HpHbFfZV7UbxUruBe3i+7y+XfxddTh8lrhd6HjQIDAQAB
o4ICozCCAp8wHQYDVR0OBBYEFIO5MtI18hC5OV1oSRddL3LOq9cJMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdlLzIxOWJl
ZC0wNDgxLTQ4ZDAtODRjOC05ODVlOGVhZGM5NWYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2UvMjE5YmVk
LTA0ODEtNDhkMC04NGM4LTk4NWU4ZWFkYzk1Zi8xL2c3a3kwalh5RUxrNVhXaEpG
MTB2Y3M2cjF3ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCRwMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwM+oTANBgkqhkiG9w0BAQsFAAOCAQEAht+tEB2a9oPo6pmuWh0ve9qIpkEy
9RsFaNJkuBzCp1i4OzYA1+GCsRKKQyRdRkCNE1s7rmlkJjaLbhFARfYrpacpuEmW
vD0FgWkIdm3GZDbmoV6hz9r2EIJzfEcngIKyG0apnj81qBXjbqFJZ+PWaVaIlx5q
V9aBNjOE5Go6/AIRPctjr+clsg7ry4GqGkm9nvvih1hIuUxXrwmrDzCRAtVqLvbV
Nl19mdFFLaKRdTMA2mqXCE5p2B2gk8jraP7U7hGp6zk9//kofV7ewxSNw2eVDjbG
kRMA2Y4i75+3Bd47TbMFc2SVRsQ5TeqxE8FMCRQfUbPC4yg4Xp+/jyYoRg==
-----END CERTIFICATE-----
Generated at Fri May 3 03:35:05 2024 by rpki-client on console-fra.rpki-client.org