Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hGhM2vJd5AvvwejkIoWo1ew4kEc.cer
File: hGhM2vJd5AvvwejkIoWo1ew4kEc.cer (raw, json)
Hash identifier: aWdM0j3x/jKcG8dnkfT7IHm+GMYpBxWFQU2byvb1INg=
Subject key identifier: 84:68:4C:DA:F2:5D:E4:0B:EF:C1:E8:E4:22:85:A8:D5:EC:38:90:47
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0190593933A3F8F299F4F367034ED72F1F55
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/c0383a-f271-4c1e-b5ca-decb22062c70/1/hGhM2vJd5AvvwejkIoWo1ew4kEc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/c0383a-f271-4c1e-b5ca-decb22062c70/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 27 Jun 2024 10:23:59 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215261
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:59:39:33:a3:f8:f2:99:f4:f3:67:03:4e:d7:2f:1f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 27 10:23:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=84684cdaf25de40befc1e8e42285a8d5ec389047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b4:27:c8:c4:bf:b5:72:64:40:f9:22:9d:42:
27:bf:93:d4:7b:92:98:e8:d8:04:7b:52:17:2b:27:
07:26:b1:bd:76:db:4d:89:a7:f6:13:c9:9b:7f:16:
0a:01:a5:01:09:d4:7c:cd:a4:d2:a1:29:f6:e5:6d:
38:80:4a:5c:8a:b4:14:4d:17:73:ac:2c:d9:00:c2:
a2:5c:88:ee:b9:5b:84:9e:ab:6c:27:63:ad:1a:3d:
bd:61:d2:95:0d:6f:de:70:cc:fb:bd:60:6c:ff:86:
08:68:ee:66:cd:54:69:f0:96:fa:19:1e:3c:c4:04:
18:d9:4b:ee:23:c5:50:5f:56:ff:5f:18:13:0f:ec:
e4:61:06:56:c7:6e:3e:cc:21:75:4b:1b:86:8b:6c:
10:a8:20:42:5b:f0:99:01:08:99:1a:ff:09:c0:67:
29:1b:16:98:11:f8:82:d5:80:31:fd:b2:d8:2e:db:
d2:c2:a9:b7:9a:5b:7e:b3:b8:ef:d7:64:38:b7:3f:
11:b0:83:e2:aa:ac:9a:43:c6:bc:f3:76:d3:da:a2:
35:f7:2c:48:0a:65:02:68:23:40:b5:5d:66:af:8d:
9a:bb:96:bc:f9:41:8b:17:6c:89:d9:96:c8:1c:ab:
ae:1d:d7:05:43:6f:dd:d1:bf:b6:25:b8:81:64:7e:
f1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:68:4C:DA:F2:5D:E4:0B:EF:C1:E8:E4:22:85:A8:D5:EC:38:90:47
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c0383a-f271-4c1e-b5ca-decb22062c70/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c0383a-f271-4c1e-b5ca-decb22062c70/1/hGhM2vJd5AvvwejkIoWo1ew4kEc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215261
Signature Algorithm: sha256WithRSAEncryption
96:fc:93:16:0c:c9:c1:52:5c:a7:8f:8a:09:a8:4b:b0:88:ba:
d8:81:b2:7e:d0:84:f3:3f:35:ee:eb:d6:9f:53:31:5e:cd:ee:
46:16:2d:d0:da:e1:3b:ff:84:0e:3a:38:51:19:85:7f:36:de:
cf:09:2c:c7:d5:72:cb:25:53:6f:ad:80:73:21:6f:e0:b2:f7:
0a:6d:f2:09:d3:ae:a8:bc:28:a2:12:09:fa:51:14:ac:bd:51:
84:c2:40:2e:cf:30:f3:09:dc:58:dd:5d:7d:f5:fa:c7:e8:00:
05:07:82:72:f1:38:fb:d5:27:45:84:ab:7c:93:ee:aa:24:d1:
f9:04:16:95:8c:c5:bb:93:7a:eb:8e:e4:03:f8:d9:87:ef:39:
64:d3:74:9c:cc:aa:23:3f:c0:3c:9b:54:bb:87:e5:d2:26:b0:
ec:66:cf:d8:9a:65:92:bf:04:f2:5f:de:77:0d:58:53:d3:61:
d8:e3:a7:14:5a:9f:ac:27:c9:ff:c4:0b:73:d5:bb:7e:12:2d:
71:d1:f9:23:53:f9:7d:a9:00:d3:39:44:c4:39:cc:12:f9:37:
d8:9c:38:cd:78:41:4c:22:c3:8e:c8:b8:e6:cc:df:c5:a5:9c:
6a:a9:32:90:09:44:1a:71:0d:dd:47:c3:62:5a:56:48:f3:59:
f6:53:a4:b4
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZBZOTOj+PKZ9PNnA07XLx9VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNjI3MTAyMzU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDY4NGNkYWYyNWRlNDBiZWZjMWU4ZTQyMjg1YThkNWVjMzg5MDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLQnyMS/tXJkQPkinUInv5PUe5KY
6NgEe1IXKycHJrG9dttNiaf2E8mbfxYKAaUBCdR8zaTSoSn25W04gEpcirQUTRdz
rCzZAMKiXIjuuVuEnqtsJ2OtGj29YdKVDW/ecMz7vWBs/4YIaO5mzVRp8Jb6GR48
xAQY2UvuI8VQX1b/XxgTD+zkYQZWx24+zCF1SxuGi2wQqCBCW/CZAQiZGv8JwGcp
GxaYEfiC1YAx/bLYLtvSwqm3mlt+s7jv12Q4tz8RsIPiqqyaQ8a883bT2qI19yxI
CmUCaCNAtV1mr42au5a8+UGLF2yJ2ZbIHKuuHdcFQ2/d0b+2JbiBZH7xlwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFIRoTNryXeQL78Ho5CKFqNXsOJBHMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhhL2MwMzgz
YS1mMjcxLTRjMWUtYjVjYS1kZWNiMjIwNjJjNzAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGEvYzAzODNh
LWYyNzEtNGMxZS1iNWNhLWRlY2IyMjA2MmM3MC8xL2hHaE0ydkpkNUF2dndlamtJ
b1dvMWV3NGtFYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNI3TANBgkqhkiG9w0BAQsFAAOCAQEAlvyTFgzJwVJc
p4+KCahLsIi62IGyftCE8z817uvWn1MxXs3uRhYt0NrhO/+EDjo4URmFfzbezwks
x9VyyyVTb62AcyFv4LL3Cm3yCdOuqLwoohIJ+lEUrL1RhMJALs8w8wncWN1dffX6
x+gABQeCcvE4+9UnRYSrfJPuqiTR+QQWlYzFu5N6647kA/jZh+85ZNN0nMyqIz/A
PJtUu4fl0iaw7GbP2Jplkr8E8l/edw1YU9Nh2OOnFFqfrCfJ/8QLc9W7fhItcdH5
I1P5fakA0zlExDnMEvk32Jw4zXhBTCLDjsi45szfxaWcaqkykAlEGnEN3UfDYlpW
SPNZ9lOktA==
-----END CERTIFICATE-----
Generated at Sat Sep 7 21:21:11 2024 by rpki-client on console-ams.rpki-client.org