Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gTpCg40uRe1drUEUYG2XKaZQHSM.cer
File: gTpCg40uRe1drUEUYG2XKaZQHSM.cer (raw, json)
Hash identifier: uMzbnbhMaspluY9AlMjmRoTDbGa0D11UBZaDuxMi6EU=
Subject key identifier: 81:3A:42:83:8D:2E:45:ED:5D:AD:41:14:60:6D:97:29:A6:50:1D:23
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC80163B814A58AB6C4688EC1F872A2A8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/8c38a3-c204-4dcf-9c47-5348fe77ba73/1/gTpCg40uRe1drUEUYG2XKaZQHSM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/8c38a3-c204-4dcf-9c47-5348fe77ba73/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:43 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2001:67c:12a4::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:63:b8:14:a5:8a:b6:c4:68:8e:c1:f8:72:a2:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=813a42838d2e45ed5dad4114606d9729a6501d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a0:69:0a:f2:c2:39:cb:a4:1d:2e:bd:d3:f3:
cd:e1:b5:87:6b:99:af:6f:7a:56:ad:c2:63:90:b6:
32:3a:83:55:9d:5c:82:3b:47:61:24:e4:c6:16:fa:
a1:ac:a7:52:81:34:ae:59:4c:13:98:be:a5:ac:cf:
9a:06:50:70:05:73:99:40:51:40:a8:c2:ff:7b:2a:
a0:ee:f8:bf:83:87:6e:d4:61:a1:4d:f3:a2:28:5a:
d2:7a:55:9d:7d:a8:3c:7d:c6:81:0f:d7:1b:80:b7:
1a:df:38:55:cb:17:ac:4e:b6:63:8e:16:df:80:4c:
ae:aa:e5:9f:c2:47:1a:bd:6d:0c:1d:ea:33:61:89:
f3:67:5a:31:74:af:5d:58:db:d8:57:e3:16:cf:ea:
51:95:ca:15:4c:b8:35:2f:3a:78:77:2e:73:52:fb:
a8:c3:82:08:1c:05:70:e6:84:d2:82:01:c8:6a:30:
e2:b8:34:9a:a8:1f:21:65:dd:f6:7d:22:6f:1c:ec:
3f:ae:e2:18:82:b7:cc:7e:f3:8f:2a:cb:a5:46:4e:
f7:d0:96:59:9e:9f:3c:fa:2b:f1:18:ed:02:c0:2d:
21:36:d0:4e:8e:1b:2d:57:4d:ff:4d:94:80:29:ef:
70:0b:8b:6a:47:5f:f9:a0:f0:4e:da:ae:28:0b:9d:
23:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:3A:42:83:8D:2E:45:ED:5D:AD:41:14:60:6D:97:29:A6:50:1D:23
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8c38a3-c204-4dcf-9c47-5348fe77ba73/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8c38a3-c204-4dcf-9c47-5348fe77ba73/1/gTpCg40uRe1drUEUYG2XKaZQHSM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:12a4::/48
Signature Algorithm: sha256WithRSAEncryption
a7:6b:d4:2e:00:34:f1:b5:1a:47:9c:cb:53:9a:b0:99:69:b0:
40:7c:43:01:a7:66:9c:1a:44:bd:0d:2c:bc:7c:24:5a:b0:3d:
d3:e6:cf:98:2a:ca:d6:8f:ac:74:33:c6:2d:b6:d2:97:54:28:
10:10:1b:58:14:f4:d1:81:71:6e:9a:da:67:5b:5b:ae:bc:d5:
35:d6:33:fa:f7:67:5f:a3:68:84:a5:66:6c:88:3c:49:fe:44:
17:59:c4:3b:a7:81:85:75:42:40:76:8a:57:a4:a5:ff:25:e3:
d0:de:e4:47:b6:40:f3:72:d3:4d:6f:ca:a5:c0:2d:24:f1:83:
b6:32:17:32:e6:5f:a5:6c:62:df:f5:68:af:d2:0f:21:06:ca:
00:ce:a9:96:26:51:2e:bf:7b:d5:d8:3e:cf:8b:5a:3d:ba:3d:
8e:11:b1:34:3f:89:a1:3b:63:b2:0b:48:63:3d:7d:4c:af:1c:
43:a6:51:ec:34:7a:bb:f2:81:2b:10:ec:cc:95:65:00:dd:6e:
29:49:63:c1:0c:86:f7:44:bc:0d:c6:07:6c:a3:d6:fb:e2:0e:
fc:fb:25:87:f4:85:6f:67:86:78:80:8e:8b:7c:2b:fb:5e:44:
50:02:34:4d:a0:df:a9:1b:cc:db:f8:a0:4c:55:a0:b3:6e:72:
df:93:ff:69
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgISAYzIAWO4FKWKtsRojsH4cqKoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDIyOTQzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTNhNDI4MzhkMmU0NWVkNWRhZDQxMTQ2MDZkOTcyOWE2NTAxZDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6BpCvLCOcukHS690/PN4bWHa5mv
b3pWrcJjkLYyOoNVnVyCO0dhJOTGFvqhrKdSgTSuWUwTmL6lrM+aBlBwBXOZQFFA
qML/eyqg7vi/g4du1GGhTfOiKFrSelWdfag8fcaBD9cbgLca3zhVyxesTrZjjhbf
gEyuquWfwkcavW0MHeozYYnzZ1oxdK9dWNvYV+MWz+pRlcoVTLg1Lzp4dy5zUvuo
w4IIHAVw5oTSggHIajDiuDSaqB8hZd32fSJvHOw/ruIYgrfMfvOPKsulRk730JZZ
np88+ivxGO0CwC0hNtBOjhstV03/TZSAKe9wC4tqR1/5oPBO2q4oC50jcQIDAQAB
o4IChzCCAoMwHQYDVR0OBBYEFIE6QoONLkXtXa1BFGBtlymmUB0jMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE2LzhjMzhh
My1jMjA0LTRkY2YtOWM0Ny01MzQ4ZmU3N2JhNzMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvOGMzOGEz
LWMyMDQtNGRjZi05YzQ3LTUzNDhmZTc3YmE3My8xL2dUcENnNDB1UmUxZHJVRVVZ
RzJYS2FaUUhTTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBKkMA0GCSqGSIb3DQEBCwUAA4IBAQCn
a9QuADTxtRpHnMtTmrCZabBAfEMBp2acGkS9DSy8fCRasD3T5s+YKsrWj6x0M8Yt
ttKXVCgQEBtYFPTRgXFumtpnW1uuvNU11jP692dfo2iEpWZsiDxJ/kQXWcQ7p4GF
dUJAdopXpKX/JePQ3uRHtkDzctNNb8qlwC0k8YO2Mhcy5l+lbGLf9Wiv0g8hBsoA
zqmWJlEuv3vV2D7Pi1o9uj2OEbE0P4mhO2OyC0hjPX1MrxxDplHsNHq78oErEOzM
lWUA3W4pSWPBDIb3RLwNxgdso9b74g78+yWH9IVvZ4Z4gI6LfCv7XkRQAjRNoN+p
G8zb+KBMVaCzbnLfk/9p
-----END CERTIFICATE-----
Generated at Fri May 3 03:35:21 2024 by rpki-client on console-fra.rpki-client.org