![](/console.gif)
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jLb-ZWc_sSi7RFpfTfubpY4BmFQ.cer
File: jLb-ZWc_sSi7RFpfTfubpY4BmFQ.cer (raw, json)
Hash identifier: klgm3aiMWuy4cpEqlfpIf0nFTxQNZBJAc/T7Zk/MKTY=
Subject key identifier: 8C:B6:FE:65:67:3F:B1:28:BB:44:5A:5F:4D:FB:9B:A5:8E:01:98:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018FEFD0821217D3F054AC6726C7AC721B59
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/713cdf-b72c-4ce9-ac4f-89e9d48a4365/1/jLb-ZWc_sSi7RFpfTfubpY4BmFQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/713cdf-b72c-4ce9-ac4f-89e9d48a4365/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 06 Jun 2024 23:09:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215259
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ef:d0:82:12:17:d3:f0:54:ac:67:26:c7:ac:72:1b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 6 23:09:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8cb6fe65673fb128bb445a5f4dfb9ba58e019854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6a:58:a3:81:81:35:f0:f1:1d:65:27:c5:0d:
e3:26:a5:24:53:69:ee:37:1f:64:60:37:fb:c5:ca:
a4:a4:de:a3:5a:02:be:f2:05:db:be:81:17:00:ea:
6e:44:89:eb:d7:4a:b5:80:94:0d:38:88:7d:24:4c:
4c:d6:e2:d0:cc:81:9b:07:68:66:d1:d1:c5:8c:80:
bc:74:ce:e6:b6:4e:f3:30:e9:72:09:52:aa:7d:ad:
6f:40:2f:ba:37:d1:81:5c:6e:6e:24:66:c7:a6:34:
e8:75:c9:dd:b4:d9:e0:b7:4e:a6:ad:17:da:9a:6b:
84:56:03:5a:c1:b9:99:69:f5:9b:3e:bb:8e:02:7e:
d6:d7:ce:22:6f:05:ec:42:4c:2e:3a:55:d0:f8:68:
2a:2d:1b:08:6d:e0:92:f0:48:de:27:db:a5:0a:25:
70:3e:b1:64:95:33:34:19:4a:b4:37:dd:bf:9c:38:
50:56:d4:fe:ea:97:96:ef:3e:af:5c:bd:60:60:d6:
61:5b:ed:e4:d5:bb:ea:f8:7e:31:20:4a:8f:bb:f0:
c9:f6:67:e7:66:b1:0a:17:5a:8c:5c:ba:ff:53:23:
c5:ac:37:6c:23:8d:69:60:94:9a:6e:e0:80:1b:28:
ad:fc:0a:df:04:e8:dc:13:ab:dd:df:f1:98:6f:7e:
da:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B6:FE:65:67:3F:B1:28:BB:44:5A:5F:4D:FB:9B:A5:8E:01:98:54
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/713cdf-b72c-4ce9-ac4f-89e9d48a4365/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/713cdf-b72c-4ce9-ac4f-89e9d48a4365/1/jLb-ZWc_sSi7RFpfTfubpY4BmFQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215259
Signature Algorithm: sha256WithRSAEncryption
4b:dc:79:4d:1f:04:1c:e4:0a:db:ae:70:4d:e2:5a:29:7a:1f:
f7:df:50:22:b0:35:f8:06:90:54:46:e4:d3:55:f0:f0:52:c8:
60:92:71:6a:a6:66:e9:18:05:25:fe:ca:42:2d:0c:47:09:a8:
56:46:b1:92:c0:b1:01:27:ee:59:81:39:89:c5:7c:17:59:c2:
43:e1:3b:c0:aa:d9:71:b7:2b:62:72:2b:8a:e4:7e:b5:1b:a2:
42:14:a4:96:ea:0f:bc:bb:54:88:85:03:91:54:a2:98:83:4b:
71:03:19:28:fe:b1:33:a7:65:50:29:b0:73:7f:e7:47:23:46:
9c:b1:46:a8:37:1b:8a:b3:75:68:ab:73:8e:f4:6d:21:c2:b1:
dc:d4:20:b3:ff:74:25:e6:20:94:ea:27:30:9e:44:c7:df:a1:
10:1d:90:87:7f:88:df:08:35:a0:67:38:81:42:48:7b:fe:6d:
71:6e:a7:df:4a:00:72:1e:24:30:1c:d3:c2:4e:0d:24:50:3f:
bf:dd:07:fd:11:d6:16:3c:6e:2f:9e:20:38:fb:e3:27:5e:6c:
c7:e6:23:29:04:da:a0:07:58:3c:a3:d8:5b:b5:99:62:b1:90:
f3:00:70:6d:c9:ca:4e:f8:05:b1:2e:54:cc:39:df:7a:3c:47:
fb:b9:90:f2
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAY/v0IISF9PwVKxnJseschtZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNjA2MjMwOTMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Y2I2ZmU2NTY3M2ZiMTI4YmI0NDVhNWY0ZGZiOWJhNThlMDE5ODU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGpYo4GBNfDxHWUnxQ3jJqUkU2nu
Nx9kYDf7xcqkpN6jWgK+8gXbvoEXAOpuRInr10q1gJQNOIh9JExM1uLQzIGbB2hm
0dHFjIC8dM7mtk7zMOlyCVKqfa1vQC+6N9GBXG5uJGbHpjTodcndtNngt06mrRfa
mmuEVgNawbmZafWbPruOAn7W184ibwXsQkwuOlXQ+GgqLRsIbeCS8EjeJ9ulCiVw
PrFklTM0GUq0N92/nDhQVtT+6peW7z6vXL1gYNZhW+3k1bvq+H4xIEqPu/DJ9mfn
ZrEKF1qMXLr/UyPFrDdsI41pYJSabuCAGyit/ArfBOjcE6vd3/GYb37aQwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFIy2/mVnP7Eou0RaX037m6WOAZhUMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJjLzcxM2Nk
Zi1iNzJjLTRjZTktYWM0Zi04OWU5ZDQ4YTQzNjUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMvNzEzY2Rm
LWI3MmMtNGNlOS1hYzRmLTg5ZTlkNDhhNDM2NS8xL2pMYi1aV2Nfc1NpN1JGcGZU
ZnVicFk0Qm1GUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNI2zANBgkqhkiG9w0BAQsFAAOCAQEAS9x5TR8EHOQK
265wTeJaKXof999QIrA1+AaQVEbk01Xw8FLIYJJxaqZm6RgFJf7KQi0MRwmoVkax
ksCxASfuWYE5icV8F1nCQ+E7wKrZcbcrYnIriuR+tRuiQhSkluoPvLtUiIUDkVSi
mINLcQMZKP6xM6dlUCmwc3/nRyNGnLFGqDcbirN1aKtzjvRtIcKx3NQgs/90JeYg
lOonMJ5Ex9+hEB2Qh3+I3wg1oGc4gUJIe/5tcW6n30oAch4kMBzTwk4NJFA/v90H
/RHWFjxuL54gOPvjJ15sx+YjKQTaoAdYPKPYW7WZYrGQ8wBwbcnKTvgFsS5UzDnf
ejxH+7mQ8g==
-----END CERTIFICATE-----
Generated at Sat Sep 7 21:11:16 2024 by rpki-client on console-fra.rpki-client.org