Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
File: navGJqwmQGaxxccJpIR383iDYd4.cer (raw, json)
Hash identifier: nrxdW/rdjPYH1DBZovZtDclu0r0/ZbkfdbHVuyLR+Qs=
Subject key identifier: 9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC80177E82A365519858D887C5270D6F3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:48 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212746
IP: 2001:678:c2c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:77:e8:2a:36:55:19:85:8d:88:7c:52:70:d6:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9dabc626ac264066b1c5c709a48477f3788361de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9a:2c:d8:56:7b:9c:1d:de:86:17:8b:22:e7:
78:3d:98:9b:5c:b6:9e:6d:7a:29:2c:16:a2:8c:0d:
8d:1b:fe:62:65:c4:9c:42:07:44:a1:9a:c5:04:29:
d1:01:57:7d:db:5f:6b:82:30:3e:4c:a1:d0:ce:33:
9e:93:bc:44:7a:77:0a:74:c9:fa:7f:4e:18:09:16:
65:97:fa:aa:a2:fa:1b:f5:0d:60:63:95:12:52:26:
1a:01:a1:97:e9:d3:5f:f9:b3:91:27:f0:df:5c:fb:
03:ee:f5:ce:c2:a3:c4:6b:d3:5b:38:4c:91:5c:97:
dc:70:1c:95:54:9e:78:ec:a3:22:ff:db:82:92:69:
60:a5:31:e3:15:97:f3:72:4e:d6:e9:d8:1a:31:8f:
bd:b9:75:c5:77:49:9a:1e:56:ac:30:a2:62:eb:ee:
e7:90:08:91:e7:b5:4c:0e:f9:53:da:8e:6c:c4:4d:
13:bd:25:85:89:c8:c6:c1:e4:9f:5b:4a:cd:04:bb:
d3:c6:7d:08:03:07:6f:78:92:87:ce:a2:8a:5c:ec:
cc:0a:07:8d:da:14:86:4d:e7:0e:81:10:6b:b0:52:
95:91:ce:a0:cb:73:bf:1f:c5:e1:8b:25:b7:79:2f:
3a:99:93:8f:07:0a:65:9c:6f:07:85:44:e6:09:f5:
57:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:c2c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212746
Signature Algorithm: sha256WithRSAEncryption
ad:98:20:c7:53:ee:d8:e2:c7:97:31:c3:27:2a:56:e7:e0:b6:
80:0a:19:fb:9c:2b:4d:9f:1b:1a:e3:ca:0b:a1:df:58:ea:23:
eb:31:7a:06:9a:80:cd:b1:2f:6b:13:46:29:c8:a7:6f:e1:87:
26:48:4c:f3:74:6f:e4:f6:2a:fa:30:36:a4:3b:21:ee:8e:1b:
46:dd:bd:16:b0:81:6c:e2:6b:a2:a9:ef:da:31:c9:d1:f9:bb:
f0:80:52:df:69:f4:fa:46:64:e6:86:ec:00:e8:06:49:6a:fc:
25:10:12:a9:2b:a2:d8:f0:65:93:9a:8b:7d:e3:74:ef:8b:c6:
7d:ae:ae:b9:43:76:b6:2b:c5:1f:f1:85:f5:56:88:59:3a:d1:
81:03:f9:f3:f0:53:fe:52:52:46:6d:3c:06:90:39:99:52:29:
70:73:1f:96:a5:9f:35:ba:8f:36:ff:5c:cf:29:14:93:8b:45:
87:15:23:d4:8a:a6:c0:10:40:b8:d6:d3:db:6c:76:fb:d5:33:
db:70:7a:f1:92:07:c5:5c:f7:d2:b4:45:8b:f9:d1:fc:ef:59:
28:da:bb:1b:6a:f1:8e:3d:78:a3:49:4f:bb:ff:29:80:df:ed:
98:79:2b:29:4c:6e:42:34:e7:70:eb:ae:14:a3:1a:d2:fb:37:
c9:92:ec:f1
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgISAYzIAXfoKjZVGYWNiHxScNbzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDIyOTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZGFiYzYyNmFjMjY0MDY2YjFjNWM3MDlhNDg0NzdmMzc4ODM2MWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZos2FZ7nB3ehheLIud4PZibXLae
bXopLBaijA2NG/5iZcScQgdEoZrFBCnRAVd9219rgjA+TKHQzjOek7xEencKdMn6
f04YCRZll/qqovob9Q1gY5USUiYaAaGX6dNf+bORJ/DfXPsD7vXOwqPEa9NbOEyR
XJfccByVVJ547KMi/9uCkmlgpTHjFZfzck7W6dgaMY+9uXXFd0maHlasMKJi6+7n
kAiR57VMDvlT2o5sxE0TvSWFicjGweSfW0rNBLvTxn0IAwdveJKHzqKKXOzMCgeN
2hSGTecOgRBrsFKVkc6gy3O/H8XhiyW3eS86mZOPBwplnG8HhUTmCfVXfQIDAQAB
o4ICozCCAp8wHQYDVR0OBBYEFJ2rxiasJkBmscXHCaSEd/N4g2HeMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA3LzE5YjAw
OC1iNmY5LTQyNzEtYjEzMC0wYjdlMzhhMTIyZmUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDcvMTliMDA4
LWI2ZjktNDI3MS1iMTMwLTBiN2UzOGExMjJmZS8xL25hdkdKcXdtUUdheHhjY0pw
SVIzODNpRFlkNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAwsMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwM/CjANBgkqhkiG9w0BAQsFAAOCAQEArZggx1Pu2OLHlzHDJypW5+C2gAoZ
+5wrTZ8bGuPKC6HfWOoj6zF6BpqAzbEvaxNGKcinb+GHJkhM83Rv5PYq+jA2pDsh
7o4bRt29FrCBbOJroqnv2jHJ0fm78IBS32n0+kZk5obsAOgGSWr8JRASqSui2PBl
k5qLfeN074vGfa6uuUN2tivFH/GF9VaIWTrRgQP58/BT/lJSRm08BpA5mVIpcHMf
lqWfNbqPNv9czykUk4tFhxUj1IqmwBBAuNbT22x2+9Uz23B68ZIHxVz30rRFi/nR
/O9ZKNq7G2rxjj14o0lPu/8pgN/tmHkrKUxuQjTncOuuFKMa0vs3yZLs8Q==
-----END CERTIFICATE-----
Generated at Fri May 3 02:13:35 2024 by rpki-client on console-ams.rpki-client.org