Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nOJtRY_xfGdYhaBbmBpxCbVYo50.cer
File: nOJtRY_xfGdYhaBbmBpxCbVYo50.cer (raw, json)
Hash identifier: derSbVXAdeGhTKOwiSjIbs/MDjHKbZi//53NrEYkMtY=
Subject key identifier: 9C:E2:6D:45:8F:F1:7C:67:58:85:A0:5B:98:1A:71:09:B5:58:A3:9D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DBF5DA3D49B98FD830CD200878BC54
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/0/9CE26D458FF17C675885A05B981A7109B558A39D.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:30:44 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 200351
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:f5:da:3d:49:b9:8f:d8:30:cd:20:08:78:bc:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ce26d458ff17c675885a05b981a7109b558a39d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:81:d3:19:1b:84:92:07:65:80:2b:6c:6d:d9:
80:0f:25:b0:6a:00:3e:50:ad:6a:8f:26:d5:ff:30:
b7:b1:d3:6a:ad:c6:ac:1e:b0:85:e0:6d:c3:43:f5:
55:94:f2:34:69:b1:d7:3a:3e:db:07:75:73:04:19:
80:aa:cf:0a:06:8d:bb:69:28:c9:3f:31:3a:32:65:
96:a5:d0:88:52:76:59:47:65:b0:e7:7c:38:58:8c:
f1:d1:fb:a8:34:3f:dd:2f:67:f9:83:5b:9f:77:e7:
23:ce:8f:68:37:d3:23:b8:91:0d:81:e5:a3:63:23:
49:57:fe:af:a7:bf:fd:27:2b:32:07:9c:7e:7b:c1:
12:e3:70:e7:f8:57:2e:e7:f6:6f:d1:b2:7b:ae:5d:
c4:b3:ec:d7:e4:cb:6e:4b:df:80:5e:6a:79:16:be:
e0:f1:eb:34:7c:56:9a:d4:e9:95:f2:a5:85:ea:5b:
c8:6e:b1:54:10:15:7d:91:f2:32:13:02:e2:40:4d:
9c:02:79:ec:d5:b6:e1:48:cf:67:fb:16:7c:f3:ec:
24:59:e4:ec:de:10:97:2f:fd:7c:53:e7:a6:12:6a:
34:3e:5c:27:af:e6:a9:3f:dc:34:88:7d:fc:fe:bb:
aa:11:3a:73:32:03:db:05:ca:5e:c2:6c:e4:19:f7:
d8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E2:6D:45:8F:F1:7C:67:58:85:A0:5B:98:1A:71:09:B5:58:A3:9D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/0/9CE26D458FF17C675885A05B981A7109B558A39D.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200351
Signature Algorithm: sha256WithRSAEncryption
65:6d:36:2f:ac:40:57:15:54:7b:86:ac:50:1d:0c:24:28:9e:
b8:0b:e7:37:f4:57:1c:ef:da:ab:34:00:0c:a5:8a:0d:a5:c2:
aa:b3:76:93:73:40:02:86:0b:6d:a6:3b:fe:33:72:2b:71:8b:
70:7c:b3:83:a2:4b:b6:1e:58:6d:57:16:4c:c2:42:53:7c:a0:
82:c2:c4:f9:80:f8:cb:3c:79:ab:d8:83:26:9f:ff:59:4d:21:
d6:0c:6f:7f:2d:4e:f7:d3:13:75:58:76:c2:8a:e2:27:70:b4:
56:86:20:13:55:cc:87:79:e8:f5:1a:10:8b:2e:cb:1f:1f:4d:
66:da:48:74:54:63:31:25:18:58:b1:7e:e8:6e:9b:18:82:b8:
d9:9e:05:b0:be:d2:a3:86:ec:9d:04:ac:f4:de:62:cf:08:34:
5c:78:ed:35:24:47:0e:92:fb:ab:e3:ef:09:83:dc:eb:6e:9f:
ba:37:98:a3:36:a9:a4:2d:13:ff:b9:f9:b2:22:8a:cd:b0:e4:
79:3f:2a:f5:ce:91:a2:2f:df:b5:e4:94:de:ef:cd:20:6d:cb:
db:76:fc:bd:c9:40:9d:16:cc:61:44:ce:e5:04:8c:68:09:3c:
92:7b:b9:7b:c4:84:86:cd:51:70:e3:ae:d8:da:bf:81:76:8e:
7b:08:d1:10
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgISAYzC2/XaPUm5j9gwzSAIeLxUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDIzMDQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Y2UyNmQ0NThmZjE3YzY3NTg4NWEwNWI5ODFhNzEwOWI1NThhMzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YHTGRuEkgdlgCtsbdmADyWwagA+
UK1qjybV/zC3sdNqrcasHrCF4G3DQ/VVlPI0abHXOj7bB3VzBBmAqs8KBo27aSjJ
PzE6MmWWpdCIUnZZR2Ww53w4WIzx0fuoND/dL2f5g1ufd+cjzo9oN9MjuJENgeWj
YyNJV/6vp7/9JysyB5x+e8ES43Dn+Fcu5/Zv0bJ7rl3Es+zX5MtuS9+AXmp5Fr7g
8es0fFaa1OmV8qWF6lvIbrFUEBV9kfIyEwLiQE2cAnns1bbhSM9n+xZ88+wkWeTs
3hCXL/18U+emEmo0Plwnr+apP9w0iH38/ruqETpzMgPbBcpewmzkGffYgQIDAQAB
o4ICmzCCApcwHQYDVR0OBBYEFJzibUWP8XxnWIWgW5gacQm1WKOdMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk4MmY4
NWJjLTNkNjktNDhhMi1iOWMzLTdlZjBhODM5Y2UxOS8wLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTgy
Zjg1YmMtM2Q2OS00OGEyLWI5YzMtN2VmMGE4MzljZTE5LzAvOUNFMjZENDU4RkYx
N0M2NzU4ODVBMDVCOTgxQTcxMDlCNTU4QTM5RC5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDDp8w
DQYJKoZIhvcNAQELBQADggEBAGVtNi+sQFcVVHuGrFAdDCQonrgL5zf0Vxzv2qs0
AAylig2lwqqzdpNzQAKGC22mO/4zcitxi3B8s4OiS7YeWG1XFkzCQlN8oILCxPmA
+Ms8eavYgyaf/1lNIdYMb38tTvfTE3VYdsKK4idwtFaGIBNVzId56PUaEIsuyx8f
TWbaSHRUYzElGFixfuhumxiCuNmeBbC+0qOG7J0ErPTeYs8INFx47TUkRw6S+6vj
7wmD3Otun7o3mKM2qaQtE/+5+bIiis2w5Hk/KvXOkaIv37XklN7vzSBty9t2/L3J
QJ0WzGFEzuUEjGgJPJJ7uXvEhIbNUXDjrtjav4F2jnsI0RA=
-----END CERTIFICATE-----
Generated at Wed Jun 12 18:05:59 2024 by rpki-client on console-fra.rpki-client.org