Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i90UJnygnMoHmH6ySP91hWkRpHQ.cer
File: i90UJnygnMoHmH6ySP91hWkRpHQ.cer (raw, json)
Hash identifier: G3HcWnq3PgSATIk4Oa2T2qioyo8J/YORItem0cP+JTE=
Subject key identifier: 8B:DD:14:26:7C:A0:9C:CA:07:98:7E:B2:48:FF:75:85:69:11:A4:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B6B48E5C20FC4A2D4BF0168574B467
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/3c1fed-4546-4bff-80d1-99c741a3a312/1/i90UJnygnMoHmH6ySP91hWkRpHQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/3c1fed-4546-4bff-80d1-99c741a3a312/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 205712
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:b4:8e:5c:20:fc:4a:2d:4b:f0:16:85:74:b4:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8bdd14267ca09cca07987eb248ff75856911a474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bf:01:20:d5:d1:7b:26:91:61:84:2e:4c:9c:
f5:31:44:fa:4f:f5:f2:9c:30:16:ca:25:8f:50:53:
07:92:f9:c3:d0:d3:ba:38:01:0a:2a:24:84:e4:53:
d3:4b:a7:9e:fc:a5:7a:6d:ef:26:4e:29:90:cf:79:
7f:18:cd:88:a2:de:9a:ec:67:43:5a:cc:53:3b:eb:
f6:fc:ce:22:71:9f:5d:60:ac:6a:38:f2:21:a9:28:
04:63:31:2b:5f:a9:07:15:25:1d:ec:6f:e1:14:c3:
b7:bf:e5:e6:9f:1f:11:b0:99:de:7f:b8:0b:4c:bd:
3e:e6:3c:72:16:d5:b9:93:e0:bb:8e:fe:13:a9:00:
53:12:1d:47:6b:f0:93:3a:20:08:39:8a:3a:75:37:
1d:99:cd:52:de:a1:d8:f0:d5:90:b8:02:7c:bc:34:
3c:57:f5:44:4c:f3:3a:96:1a:14:a1:29:b0:16:ac:
26:62:e1:69:d2:97:71:25:d8:92:bc:6a:80:0e:df:
a9:31:c1:08:0e:4d:14:51:84:7a:fd:52:5f:26:32:
76:cd:89:c9:41:2b:54:23:db:7f:f6:31:8e:4a:2b:
2f:d1:c9:21:02:b3:e8:c6:6f:e1:81:be:c2:d3:40:
fc:3e:5b:68:71:65:2c:d1:d2:17:fd:0b:ff:48:44:
2a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:DD:14:26:7C:A0:9C:CA:07:98:7E:B2:48:FF:75:85:69:11:A4:74
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/3c1fed-4546-4bff-80d1-99c741a3a312/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/3c1fed-4546-4bff-80d1-99c741a3a312/1/i90UJnygnMoHmH6ySP91hWkRpHQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205712
Signature Algorithm: sha256WithRSAEncryption
a5:03:4b:e9:ac:32:e3:ca:5c:52:0e:7c:cb:b4:e2:16:e7:52:
47:6b:63:db:54:aa:b1:a3:ee:22:f0:27:44:4e:70:3d:fc:8e:
c7:ea:a5:6b:ac:4b:18:9f:c8:84:df:d2:04:ef:01:c0:a9:03:
b0:f9:84:37:4f:25:bf:bc:72:6e:2f:3f:02:70:cf:77:36:08:
96:39:dc:7b:c6:74:36:0c:4b:b3:d9:5a:af:25:e7:d7:e4:d3:
1c:f3:3f:49:ab:4f:86:a9:23:77:61:3a:0f:8e:9a:aa:13:6c:
9b:3f:5a:f7:fa:b9:c6:13:0c:90:9b:c6:77:f0:ae:b9:c5:dd:
28:7e:b4:7d:f2:66:fe:39:f6:e1:66:c6:11:13:3e:1a:a5:e3:
2a:f7:89:9d:b8:cf:c4:bb:7a:0d:ea:3b:96:67:10:ff:27:9e:
ee:99:d3:1c:a7:8c:e4:84:e7:66:51:e9:be:46:92:4e:09:e4:
74:7e:74:05:d2:fd:cf:0e:b4:3b:b9:ae:c3:9e:d0:8b:ea:e4:
5e:ce:c8:94:4f:96:c1:26:44:22:ac:1f:51:43:bf:29:c9:f1:
46:1b:5b:68:87:f6:27:19:f4:6d:c6:58:f1:14:46:4a:7b:d2:
f8:e0:d9:64:2a:6f:03:f0:a0:a6:ab:50:96:c0:ef:f0:51:ea:
4f:3a:7e:4c
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYzDtrSOXCD8Si1L8BaFdLRnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDYyOTQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YmRkMTQyNjdjYTA5Y2NhMDc5ODdlYjI0OGZmNzU4NTY5MTFhNDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArL8BINXReyaRYYQuTJz1MUT6T/Xy
nDAWyiWPUFMHkvnD0NO6OAEKKiSE5FPTS6ee/KV6be8mTimQz3l/GM2Iot6a7GdD
WsxTO+v2/M4icZ9dYKxqOPIhqSgEYzErX6kHFSUd7G/hFMO3v+Xmnx8RsJnef7gL
TL0+5jxyFtW5k+C7jv4TqQBTEh1Ha/CTOiAIOYo6dTcdmc1S3qHY8NWQuAJ8vDQ8
V/VETPM6lhoUoSmwFqwmYuFp0pdxJdiSvGqADt+pMcEIDk0UUYR6/VJfJjJ2zYnJ
QStUI9t/9jGOSisv0ckhArPoxm/hgb7C00D8PltocWUs0dIX/Qv/SEQq/QIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFIvdFCZ8oJzKB5h+skj/dYVpEaR0MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IyLzNjMWZl
ZC00NTQ2LTRiZmYtODBkMS05OWM3NDFhM2EzMTIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjIvM2MxZmVk
LTQ1NDYtNGJmZi04MGQxLTk5Yzc0MWEzYTMxMi8xL2k5MFVKbnlnbk1vSG1INnlT
UDkxaFdrUnBIUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMjkDANBgkqhkiG9w0BAQsFAAOCAQEApQNL6awy48pc
Ug58y7TiFudSR2tj21SqsaPuIvAnRE5wPfyOx+qla6xLGJ/IhN/SBO8BwKkDsPmE
N08lv7xybi8/AnDPdzYIljnce8Z0NgxLs9laryXn1+TTHPM/SatPhqkjd2E6D46a
qhNsmz9a9/q5xhMMkJvGd/CuucXdKH60ffJm/jn24WbGERM+GqXjKveJnbjPxLt6
Deo7lmcQ/yee7pnTHKeM5ITnZlHpvkaSTgnkdH50BdL9zw60O7muw57Qi+rkXs7I
lE+WwSZEIqwfUUO/KcnxRhtbaIf2Jxn0bcZY8RRGSnvS+ODZZCpvA/CgpqtQlsDv
8FHqTzp+TA==
-----END CERTIFICATE-----
Generated at Fri May 3 09:32:56 2024 by rpki-client on console-ams.rpki-client.org