Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iQ8_qyNJwBsayP0LkhxgMYzhhNY.cer
File: iQ8_qyNJwBsayP0LkhxgMYzhhNY.cer (raw, json)
Hash identifier: 3Be9E8qTAQMd4AuofVJr1PLlaZfJgZmaRxsMUPUzKx8=
Subject key identifier: 89:0F:3F:AB:23:49:C0:1B:1A:C8:FD:0B:92:1C:60:31:8C:E1:84:D6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D016B203ED8892DA272F7E6E9F459344F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/1ce3e3-c859-4b71-b6d2-9359d8de2975/1/iQ8_qyNJwBsayP0LkhxgMYzhhNY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/1ce3e3-c859-4b71-b6d2-9359d8de2975/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 13 Jan 2024 06:03:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 216247
IP: 2a13:efc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:01:6b:20:3e:d8:89:2d:a2:72:f7:e6:e9:f4:59:34:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 13 06:03:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=890f3fab2349c01b1ac8fd0b921c60318ce184d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:83:06:dd:d5:35:b5:0b:72:64:14:40:46:df:
c0:73:a9:3f:98:74:fb:17:6f:74:55:4b:39:f5:ef:
a5:6b:36:c7:88:19:db:3d:0b:24:c5:d5:68:e4:64:
70:c0:45:da:0a:dd:0a:20:87:3c:e7:37:3b:d1:a8:
2f:99:ea:4f:6a:2f:0c:5e:da:07:43:da:fa:14:41:
57:ca:7b:08:c8:74:07:d7:b6:1b:27:1e:21:2f:e3:
0e:40:42:a5:46:d7:36:bc:be:86:c5:08:1a:d6:bb:
0a:0b:fd:7c:89:84:0f:0a:c3:d8:0d:e3:af:63:94:
0a:25:9b:dd:ff:b9:fc:a5:0b:5a:a0:42:ef:8e:4d:
26:07:60:1b:4b:8e:19:01:e6:6b:7b:d9:d0:ed:72:
fc:7e:30:d0:83:2e:b0:14:a9:50:1c:6a:1c:e2:e8:
e2:fd:a6:ca:a0:ba:5f:ac:33:dc:0b:4c:9d:9e:a6:
1c:91:5d:15:8d:23:7a:9a:b0:82:31:93:0f:df:e7:
e0:6f:4f:5a:54:9d:6e:1f:17:db:53:67:ef:ba:67:
16:8c:57:1e:c4:a8:04:34:25:25:47:04:bd:7b:c6:
5c:65:3f:37:46:d9:9e:7b:df:0f:58:2b:3a:af:e9:
00:50:bd:7f:e7:a3:7e:2f:59:ae:40:5b:b3:fc:c1:
50:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:0F:3F:AB:23:49:C0:1B:1A:C8:FD:0B:92:1C:60:31:8C:E1:84:D6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1ce3e3-c859-4b71-b6d2-9359d8de2975/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1ce3e3-c859-4b71-b6d2-9359d8de2975/1/iQ8_qyNJwBsayP0LkhxgMYzhhNY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:efc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216247
Signature Algorithm: sha256WithRSAEncryption
a0:15:bc:66:0e:d6:ce:f6:8e:d0:e8:68:49:52:d6:63:b2:08:
0c:c2:6f:fc:96:4c:1d:1b:d9:76:3d:03:ec:78:d8:f3:5a:b2:
ba:1a:5c:79:aa:20:37:0b:5e:73:07:b6:54:a3:bf:4b:3b:78:
eb:55:c9:62:bb:46:01:6b:34:1c:67:c5:30:fa:c5:dd:a8:71:
59:47:56:40:9c:c9:2b:19:34:2d:84:3a:cf:27:65:fb:01:ab:
58:1f:ab:ce:95:14:ec:d3:74:a5:40:02:e2:4d:3f:b4:7b:1f:
b9:31:72:25:d3:92:d5:3d:18:a2:64:1a:94:5b:51:9f:20:27:
ca:a2:7f:ce:c3:06:f8:f0:80:15:9c:0e:b8:41:48:b2:50:f4:
b9:cc:4e:16:93:d4:69:bd:4b:63:57:d2:6a:74:10:c0:19:5e:
87:ee:85:7b:f5:c1:64:ce:1b:cb:dc:80:44:a8:2f:ed:fb:51:
1f:34:ac:a3:32:9b:da:d5:b6:05:0c:2d:8a:04:e0:db:e3:23:
b1:d3:fd:34:9f:fd:7f:16:cc:13:ca:0d:3e:65:06:0e:35:ae:
4e:f7:ff:13:60:30:f5:f6:44:e7:52:d8:52:70:2e:c7:61:b4:
10:04:8c:6d:a1:71:8e:c3:23:4f:e3:48:c8:4a:e9:f2:41:55:
ce:8f:90:cb
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgISAY0BayA+2IktonL35un0WTRPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTEzMDYwMzM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTBmM2ZhYjIzNDljMDFiMWFjOGZkMGI5MjFjNjAzMThjZTE4NGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IMG3dU1tQtyZBRARt/Ac6k/mHT7
F290VUs59e+lazbHiBnbPQskxdVo5GRwwEXaCt0KIIc85zc70agvmepPai8MXtoH
Q9r6FEFXynsIyHQH17YbJx4hL+MOQEKlRtc2vL6GxQga1rsKC/18iYQPCsPYDeOv
Y5QKJZvd/7n8pQtaoELvjk0mB2AbS44ZAeZre9nQ7XL8fjDQgy6wFKlQHGoc4uji
/abKoLpfrDPcC0ydnqYckV0VjSN6mrCCMZMP3+fgb09aVJ1uHxfbU2fvumcWjFce
xKgENCUlRwS9e8ZcZT83Rtmee98PWCs6r+kAUL1/56N+L1muQFuz/MFQJQIDAQAB
o4ICoTCCAp0wHQYDVR0OBBYEFIkPP6sjScAbGsj9C5IcYDGM4YTWMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcxLzFjZTNl
My1jODU5LTRiNzEtYjZkMi05MzU5ZDhkZTI5NzUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzEvMWNlM2Uz
LWM4NTktNGI3MS1iNmQyLTkzNTlkOGRlMjk3NS8xL2lROF9xeU5Kd0JzYXlQMExr
aHhnTVl6aGhOWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUDKhPvwDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMDTLcwDQYJKoZIhvcNAQELBQADggEBAKAVvGYO1s72jtDoaElS1mOyCAzCb/yW
TB0b2XY9A+x42PNasroaXHmqIDcLXnMHtlSjv0s7eOtVyWK7RgFrNBxnxTD6xd2o
cVlHVkCcySsZNC2EOs8nZfsBq1gfq86VFOzTdKVAAuJNP7R7H7kxciXTktU9GKJk
GpRbUZ8gJ8qif87DBvjwgBWcDrhBSLJQ9LnMThaT1Gm9S2NX0mp0EMAZXofuhXv1
wWTOG8vcgESoL+37UR80rKMym9rVtgUMLYoE4NvjI7HT/TSf/X8WzBPKDT5lBg41
rk73/xNgMPX2ROdS2FJwLsdhtBAEjG2hcY7DI0/jSMhK6fJBVc6PkMs=
-----END CERTIFICATE-----
Generated at Fri May 3 11:58:37 2024 by rpki-client on console-ams.rpki-client.org