Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qd2fa2VJHZDE4Z6clgJSRmwsnRI.cer
File: qd2fa2VJHZDE4Z6clgJSRmwsnRI.cer (raw, json)
Hash identifier: 6Yg8ktcFnpaw7AQ7u1K6XFhwpt8WaqS+l2i8Wb8e7Lw=
Subject key identifier: A9:DD:9F:6B:65:49:1D:90:C4:E1:9E:9C:96:02:52:46:6C:2C:9D:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F9538A2A090DAEF64AE3E191F0D16E881
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 20 May 2024 08:57:47 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215216
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:95:38:a2:a0:90:da:ef:64:ae:3e:19:1f:0d:16:e8:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 20 08:57:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a9dd9f6b65491d90c4e19e9c960252466c2c9d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:61:36:d2:2e:c2:3d:3b:0a:2d:cd:f1:7d:fd:
61:61:21:0c:42:46:be:bd:20:a5:21:d2:0c:8d:c3:
86:e1:92:ec:e8:e9:8c:24:7b:ba:ab:83:6d:28:a2:
b9:f2:32:45:e8:1a:c0:7f:41:ab:f6:90:7a:ec:92:
9c:2e:37:d0:bc:ac:29:5a:25:a4:fb:37:4a:25:d9:
22:5b:3d:3f:93:74:60:a6:86:71:3e:91:69:b1:37:
0c:27:7b:98:4e:0b:0d:fd:4c:d8:64:23:51:5f:ae:
0c:16:14:cf:62:6f:aa:1a:a5:87:d8:2d:71:ef:6f:
59:b2:10:b6:e1:9c:af:a8:13:5b:d8:dc:34:8f:86:
cb:3d:52:52:8d:be:43:5b:1b:03:43:d0:dd:25:7d:
a9:6b:68:8b:77:96:75:55:6d:4f:22:1d:44:52:4b:
63:82:b6:64:d4:3e:cc:b1:75:a8:6b:14:40:e1:fc:
37:c2:ad:19:de:08:00:40:bc:92:0e:8e:d0:e1:a3:
f4:9d:75:d3:9a:b4:f6:e0:d4:7a:45:7a:e7:80:5b:
bb:6d:77:1e:30:10:b9:38:71:38:05:31:b4:3a:36:
40:4f:e9:91:a6:58:d9:39:50:0b:05:94:e9:23:29:
1c:20:19:d5:3b:6e:ba:fb:3d:18:c1:d1:ce:db:25:
d2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:DD:9F:6B:65:49:1D:90:C4:E1:9E:9C:96:02:52:46:6C:2C:9D:12
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215216
Signature Algorithm: sha256WithRSAEncryption
27:b2:7f:7f:ec:b5:df:ee:fd:e9:84:be:0f:f7:f7:67:06:6d:
92:e6:3b:8b:65:db:e5:2d:af:35:b8:56:47:10:9f:58:07:fd:
eb:16:ec:9f:34:e1:78:76:6a:8c:66:1f:c1:6f:fb:0c:0e:4c:
54:c3:74:ca:62:d6:94:4f:09:2c:db:b4:81:15:a5:67:e6:34:
53:fe:0f:9f:5b:93:39:bd:11:d2:f4:bd:d3:65:37:b1:c7:ec:
5d:29:4b:bd:27:e8:a9:70:0a:47:96:31:47:a3:79:9c:ff:db:
35:6a:03:03:b7:b0:77:a4:c0:5f:da:32:5c:e4:4e:14:df:e8:
24:da:f2:c8:f6:65:7d:eb:e3:ea:58:de:6f:4e:ef:6c:b7:85:
01:5c:37:44:5d:29:80:13:19:64:3f:f5:30:52:2c:5b:3e:78:
b2:9f:4f:09:aa:82:f2:9b:ca:56:50:6f:56:d7:02:e1:a7:a5:
38:c8:bb:42:ef:ea:66:07:38:71:53:08:0e:33:96:a2:ff:61:
2a:81:d0:b6:83:f6:93:20:fe:bc:ac:d4:b3:f0:51:9f:c7:c2:
d1:02:0c:5d:23:42:7b:ab:c8:cb:08:24:5a:2c:97:df:3f:54:
49:78:ea:f8:d5:5f:78:01:06:9f:ab:c6:99:37:6c:97:63:fc:
33:ce:ea:59
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgISAY+VOKKgkNrvZK4+GR8NFuiBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNTIwMDg1NzQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOWRkOWY2YjY1NDkxZDkwYzRlMTllOWM5NjAyNTI0NjZjMmM5ZDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGE20i7CPTsKLc3xff1hYSEMQka+
vSClIdIMjcOG4ZLs6OmMJHu6q4NtKKK58jJF6BrAf0Gr9pB67JKcLjfQvKwpWiWk
+zdKJdkiWz0/k3RgpoZxPpFpsTcMJ3uYTgsN/UzYZCNRX64MFhTPYm+qGqWH2C1x
729ZshC24ZyvqBNb2Nw0j4bLPVJSjb5DWxsDQ9DdJX2pa2iLd5Z1VW1PIh1EUktj
grZk1D7MsXWoaxRA4fw3wq0Z3ggAQLySDo7Q4aP0nXXTmrT24NR6RXrngFu7bXce
MBC5OHE4BTG0OjZAT+mRpljZOVALBZTpIykcIBnVO266+z0YwdHO2yXS+wIDAQAB
o4ICmzCCApcwHQYDVR0OBBYEFKndn2tlSR2QxOGenJYCUkZsLJ0SMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzI0ZGI2
ZTBlLTY5NmMtNGY4OS04ZDQ4LTI3NDU1OTcwMGFmNS8xLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMjRk
YjZlMGUtNjk2Yy00Zjg5LThkNDgtMjc0NTU5NzAwYWY1LzEvQTlERDlGNkI2NTQ5
MUQ5MEM0RTE5RTlDOTYwMjUyNDY2QzJDOUQxMi5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDSLAw
DQYJKoZIhvcNAQELBQADggEBACeyf3/std/u/emEvg/392cGbZLmO4tl2+UtrzW4
VkcQn1gH/esW7J804Xh2aoxmH8Fv+wwOTFTDdMpi1pRPCSzbtIEVpWfmNFP+D59b
kzm9EdL0vdNlN7HH7F0pS70n6KlwCkeWMUejeZz/2zVqAwO3sHekwF/aMlzkThTf
6CTa8sj2ZX3r4+pY3m9O72y3hQFcN0RdKYATGWQ/9TBSLFs+eLKfTwmqgvKbylZQ
b1bXAuGnpTjIu0Lv6mYHOHFTCA4zlqL/YSqB0LaD9pMg/rys1LPwUZ/HwtECDF0j
QnuryMsIJFosl98/VEl46vjVX3gBBp+rxpk3bJdj/DPO6lk=
-----END CERTIFICATE-----
Generated at Sat Sep 7 21:22:30 2024 by rpki-client on console-ams.rpki-client.org