Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h1OJAqRY4WbWJY2Fs_jxuTUpWUI.cer
File: h1OJAqRY4WbWJY2Fs_jxuTUpWUI.cer (raw, json)
Hash identifier: Wl40JxYYApDZqepQ9ldqv4akJ4JUyhbNIlBnU+4hOr4=
Subject key identifier: 87:53:89:02:A4:58:E1:66:D6:25:8D:85:B3:F8:F1:B9:35:29:59:42
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC492BA0D0DC5B9EF91939B09CF7D714B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/1/87538902A458E166D6258D85B3F8F1B935295942.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:29:59 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 199691
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:ba:0d:0d:c5:b9:ef:91:93:9b:09:cf:7d:71:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87538902a458e166d6258d85b3f8f1b935295942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2f:6b:24:19:a3:57:83:ae:f7:9b:83:22:d8:
0a:3f:26:00:b4:00:9f:d3:05:83:49:e2:24:5b:71:
21:60:e5:f0:d8:2d:76:29:d1:94:b2:c7:09:7c:18:
5b:96:03:fa:5c:d4:01:92:28:0d:19:56:98:e5:53:
c3:89:88:2b:de:23:05:f4:e9:e6:46:04:e6:e1:31:
be:1b:88:d5:dc:78:0a:d3:38:43:73:f5:92:d8:15:
e8:c5:ac:14:a8:f4:dc:13:4c:52:91:5e:c2:60:10:
8e:fd:7a:df:25:16:93:43:2d:5b:16:e8:b4:6d:bc:
44:4b:78:ac:86:0f:52:04:61:0b:7a:8b:49:e1:4d:
aa:4a:a3:51:f9:3f:3f:24:15:42:17:34:ff:4d:d6:
a5:b4:c4:c8:82:e3:c9:cb:85:f5:25:09:36:d6:35:
6b:c5:62:7d:69:51:44:67:5c:9e:46:4a:19:68:cf:
04:30:75:5a:a6:4a:53:c1:7d:da:d8:86:57:2c:15:
52:0d:68:74:54:73:b3:47:67:a0:f5:74:c7:fd:ac:
9e:54:b8:56:33:bb:4c:99:1a:67:42:94:c3:66:91:
80:84:c7:4f:b3:83:a0:36:ff:0e:bd:bf:2d:f9:66:
a4:58:7a:74:ee:41:8b:39:b8:a3:40:b9:d9:3e:f3:
88:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:53:89:02:A4:58:E1:66:D6:25:8D:85:B3:F8:F1:B9:35:29:59:42
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/1/87538902A458E166D6258D85B3F8F1B935295942.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199691
Signature Algorithm: sha256WithRSAEncryption
5b:dd:9a:58:17:1b:96:ef:97:d9:10:1d:06:87:70:6c:b3:6d:
9d:ef:d9:ec:41:6c:34:fa:2c:e7:47:65:d3:7f:de:7f:38:59:
b8:c1:9f:0c:f7:46:5e:15:c8:ef:a7:9e:df:22:8c:b9:87:23:
f0:26:1f:bd:df:d7:12:c0:36:a0:4c:8a:c0:33:c4:16:eb:5d:
ac:2c:b3:35:b3:73:d9:2f:03:22:f1:1f:2a:ae:4d:19:16:8e:
0a:cc:e1:02:4d:c6:ce:62:16:c7:cf:a6:3c:80:c9:a1:6c:f6:
de:c0:54:8b:5c:1c:8e:d8:aa:66:55:c5:68:eb:7a:24:06:7d:
1d:ec:5e:2a:ed:ec:a1:b3:53:d8:21:94:40:4e:28:74:95:1f:
27:78:40:01:14:c3:8a:39:83:6e:09:09:12:ce:41:8d:57:f7:
75:d1:48:39:0e:c5:cb:d2:e5:8a:30:bb:12:2f:25:71:06:38:
2b:e1:b3:e8:0f:78:eb:1c:76:fb:77:29:0d:f6:5f:36:c4:70:
f5:ac:91:cb:79:c3:5f:b4:01:97:75:da:b7:66:e0:ec:00:02:
4d:2b:14:e2:0d:5e:76:87:45:d8:ad:43:08:9d:57:bd:78:4c:
50:97:78:83:8a:06:10:b4:00:74:0c:ee:f4:8b:1a:1f:cc:db:
eb:4d:40:7b
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgISAYzEkroNDcW575GTmwnPfXFLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTAyOTU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NzUzODkwMmE0NThlMTY2ZDYyNThkODViM2Y4ZjFiOTM1Mjk1OTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsS9rJBmjV4Ou95uDItgKPyYAtACf
0wWDSeIkW3EhYOXw2C12KdGUsscJfBhblgP6XNQBkigNGVaY5VPDiYgr3iMF9Onm
RgTm4TG+G4jV3HgK0zhDc/WS2BXoxawUqPTcE0xSkV7CYBCO/XrfJRaTQy1bFui0
bbxES3ishg9SBGELeotJ4U2qSqNR+T8/JBVCFzT/TdaltMTIguPJy4X1JQk21jVr
xWJ9aVFEZ1yeRkoZaM8EMHVapkpTwX3a2IZXLBVSDWh0VHOzR2eg9XTH/ayeVLhW
M7tMmRpnQpTDZpGAhMdPs4OgNv8Ovb8t+WakWHp07kGLObijQLnZPvOIBQIDAQAB
o4ICmzCCApcwHQYDVR0OBBYEFIdTiQKkWOFm1iWNhbP48bk1KVlCMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzNkYTRk
OGI0LWExNTctNDYzNC1hYjE4LTNlZjlkMDk4MjM1Mi8xLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvM2Rh
NGQ4YjQtYTE1Ny00NjM0LWFiMTgtM2VmOWQwOTgyMzUyLzEvODc1Mzg5MDJBNDU4
RTE2NkQ2MjU4RDg1QjNGOEYxQjkzNTI5NTk0Mi5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDDAsw
DQYJKoZIhvcNAQELBQADggEBAFvdmlgXG5bvl9kQHQaHcGyzbZ3v2exBbDT6LOdH
ZdN/3n84WbjBnwz3Rl4VyO+nnt8ijLmHI/AmH73f1xLANqBMisAzxBbrXawsszWz
c9kvAyLxHyquTRkWjgrM4QJNxs5iFsfPpjyAyaFs9t7AVItcHI7YqmZVxWjreiQG
fR3sXirt7KGzU9ghlEBOKHSVHyd4QAEUw4o5g24JCRLOQY1X93XRSDkOxcvS5Yow
uxIvJXEGOCvhs+gPeOscdvt3KQ32XzbEcPWskct5w1+0AZd12rdm4OwAAk0rFOIN
XnaHRditQwidV714TFCXeIOKBhC0AHQM7vSLGh/M2+tNQHs=
-----END CERTIFICATE-----
Generated at Fri May 3 03:35:53 2024 by rpki-client on console-fra.rpki-client.org