Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h66JOPDgseq2FIgzbSPKORh9bqM.cer
File: h66JOPDgseq2FIgzbSPKORh9bqM.cer (raw, json)
Hash identifier: 2R9o/XZDoJxhLNQBo+WHv4Kh7JeuBHEnnt5YrhPVdOk=
Subject key identifier: 87:AE:89:38:F0:E0:B1:EA:B6:14:88:33:6D:23:CA:39:18:7D:6E:A3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E7DAB8F5F096884530E36707CA2F74B11
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 27 Mar 2024 02:09:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215256
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7d:ab:8f:5f:09:68:84:53:0e:36:70:7c:a2:f7:4b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 27 02:09:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87ae8938f0e0b1eab61488336d23ca39187d6ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a0:7f:2e:2c:c0:b9:ff:b2:66:78:94:d5:79:
96:43:e1:53:24:5a:b8:fc:8b:d6:03:46:11:82:99:
ac:67:9d:64:c9:66:7d:30:cb:63:13:7a:a8:77:5b:
19:0b:73:e5:e6:78:1e:9d:d7:7e:28:56:64:da:8d:
9b:f0:37:e0:39:58:0b:d2:bf:17:ce:7c:ed:df:76:
f8:04:61:b1:3e:ef:8d:ff:47:17:f6:96:15:0f:01:
0c:12:06:f0:74:a5:b1:58:21:0d:04:b9:2f:f9:e4:
21:c9:b6:25:66:bb:12:da:a2:c3:2d:89:5d:44:c1:
25:17:85:41:ae:45:f3:d6:ad:8e:34:43:9d:ae:6f:
f7:d9:2e:84:2b:b6:b7:8e:a4:f9:97:1f:2a:ad:3f:
66:2a:e6:a4:0c:ff:c8:5c:33:8d:67:b1:7b:b8:ed:
a4:71:80:c4:6c:15:22:93:06:fc:76:46:9d:9c:0e:
19:79:63:63:7f:85:8c:3b:76:09:89:68:d5:a8:01:
63:5a:90:51:3e:11:fc:c9:76:1c:d4:51:ec:b0:1c:
bc:4b:7d:bd:3f:fe:96:82:80:97:63:3e:ce:ad:7f:
d9:dc:0c:5a:33:81:81:0d:ab:ec:12:3b:f1:ad:48:
a2:36:af:ae:05:3f:8d:8a:b9:d5:4a:a7:d2:f5:fb:
ca:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:AE:89:38:F0:E0:B1:EA:B6:14:88:33:6D:23:CA:39:18:7D:6E:A3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215256
Signature Algorithm: sha256WithRSAEncryption
92:70:b0:60:de:cb:68:d7:ff:66:42:fd:6f:4a:d7:a9:9b:bb:
df:58:a0:50:63:2e:08:e5:9d:bc:df:18:bc:72:9e:07:c1:3a:
2d:51:52:54:1f:50:50:6d:b4:a3:b6:91:90:2b:bf:7b:d0:db:
6d:1b:ed:c9:6b:2d:40:8f:a1:7d:b9:69:4d:d2:91:e7:c5:ab:
5b:5d:94:6d:5c:0c:46:7e:24:9e:d1:b7:3e:03:a9:6c:06:0a:
ff:6b:1d:b5:5e:cb:73:d9:93:49:2b:3d:24:a3:e0:d3:ac:99:
dc:3e:5f:22:c3:6e:40:06:87:43:be:7d:03:81:e2:ec:4a:41:
e2:c4:05:78:8e:97:40:e8:41:86:94:f7:9e:1c:60:fb:2d:b9:
6e:32:5f:f1:d3:65:74:8d:06:d3:72:c7:3f:ee:fe:3a:39:ad:
33:95:d5:15:3e:5f:ab:39:7f:41:55:9e:c2:fe:2d:74:4c:b6:
07:97:2f:d3:df:3e:9b:eb:79:91:c2:10:86:e7:cc:3e:8b:27:
6c:3e:f7:29:c5:fa:2a:13:b4:b9:9d:cf:8d:51:bc:c7:b1:77:
05:61:31:df:15:42:8f:28:67:98:25:c4:81:eb:c4:c2:c2:ec:
01:92:45:42:fa:88:b4:d3:34:a7:6e:38:f8:03:f7:01:5c:0d:
21:96:0c:1d
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAY59q49fCWiEUw42cHyi90sRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMzI3MDIwOTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4N2FlODkzOGYwZTBiMWVhYjYxNDg4MzM2ZDIzY2EzOTE4N2Q2ZWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qB/LizAuf+yZniU1XmWQ+FTJFq4
/IvWA0YRgpmsZ51kyWZ9MMtjE3qod1sZC3Pl5ngendd+KFZk2o2b8DfgOVgL0r8X
znzt33b4BGGxPu+N/0cX9pYVDwEMEgbwdKWxWCENBLkv+eQhybYlZrsS2qLDLYld
RMElF4VBrkXz1q2ONEOdrm/32S6EK7a3jqT5lx8qrT9mKuakDP/IXDONZ7F7uO2k
cYDEbBUikwb8dkadnA4ZeWNjf4WMO3YJiWjVqAFjWpBRPhH8yXYc1FHssBy8S329
P/6WgoCXYz7OrX/Z3AxaM4GBDavsEjvxrUiiNq+uBT+NirnVSqfS9fvKIQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFIeuiTjw4LHqthSIM20jyjkYfW6jMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U0LzVlZjNl
Mi0zMWZlLTQ2NjQtYjVkZi0yOWQwYmExMmVkYTIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTQvNWVmM2Uy
LTMxZmUtNDY2NC1iNWRmLTI5ZDBiYTEyZWRhMi8xL2g2NkpPUERnc2VxMkZJZ3pi
U1BLT1JoOWJxTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNI2DANBgkqhkiG9w0BAQsFAAOCAQEAknCwYN7LaNf/
ZkL9b0rXqZu731igUGMuCOWdvN8YvHKeB8E6LVFSVB9QUG20o7aRkCu/e9DbbRvt
yWstQI+hfblpTdKR58WrW12UbVwMRn4kntG3PgOpbAYK/2sdtV7Lc9mTSSs9JKPg
06yZ3D5fIsNuQAaHQ759A4Hi7EpB4sQFeI6XQOhBhpT3nhxg+y25bjJf8dNldI0G
03LHP+7+OjmtM5XVFT5fqzl/QVWewv4tdEy2B5cv098+m+t5kcIQhufMPosnbD73
KcX6KhO0uZ3PjVG8x7F3BWEx3xVCjyhnmCXEgevEwsLsAZJFQvqItNM0p244+AP3
AVwNIZYMHQ==
-----END CERTIFICATE-----
Generated at Fri May 3 07:25:24 2024 by rpki-client on console-ams.rpki-client.org