Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ubjmb62BRkWYT9TqrTE7b-AFibc.cer
File: ubjmb62BRkWYT9TqrTE7b-AFibc.cer (raw, json)
Hash identifier: I7j9Asf6pSY15dSCsH3o6HJlRu4Rz+hdCi8ldqIktPc=
Subject key identifier: B9:B8:E6:6F:AD:81:46:45:98:4F:D4:EA:AD:31:3B:6F:E0:05:89:B7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2963E093581689975FEB00CB40C5E1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:32:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 201242
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:63:e0:93:58:16:89:97:5f:eb:00:cb:40:c5:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:32:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b9b8e66fad814645984fd4eaad313b6fe00589b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:37:4d:5e:61:af:55:e2:c6:60:d9:16:98:33:
e0:0c:22:ba:8f:3e:d8:78:ca:91:47:57:97:b4:d1:
cc:fa:5c:3a:4a:d1:6d:2d:42:d0:4b:bd:29:1b:fa:
fa:7f:1e:e3:e7:74:24:44:60:4c:e6:f8:bc:7d:60:
91:c6:ae:eb:3c:11:06:f4:4c:39:f9:69:f0:98:40:
5a:c0:c4:cd:82:9c:60:2c:23:ae:37:e2:40:b7:51:
92:45:16:33:0d:9e:3d:70:b1:4e:46:87:e7:a1:02:
bd:6c:c5:93:0d:a4:9f:34:d2:1e:81:ba:26:7d:76:
62:f0:aa:49:35:4f:aa:f4:91:ed:9c:25:03:8a:7c:
93:a8:b4:ba:a3:19:fc:83:c5:62:58:55:d0:01:b2:
6c:ec:07:cd:b9:78:f2:0a:ca:75:27:1b:5c:57:30:
13:36:c8:cb:29:6e:39:24:19:be:35:6c:23:53:52:
a8:7f:72:fc:e8:7c:31:b0:a9:3b:23:6a:a1:b2:c4:
2f:d8:9a:a7:09:88:51:ab:5f:08:dd:44:03:f1:2c:
71:6c:44:b3:29:b3:48:8c:e3:65:65:9e:fb:80:55:
ba:d5:2a:c3:ea:b2:e7:73:3e:6c:c4:ee:d0:19:f0:
d0:85:ce:c8:07:b4:8a:b5:b3:03:96:29:4b:80:c9:
0b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B8:E6:6F:AD:81:46:45:98:4F:D4:EA:AD:31:3B:6F:E0:05:89:B7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201242
Signature Algorithm: sha256WithRSAEncryption
02:bf:cf:07:00:48:42:d4:de:84:68:0a:39:b6:8e:e6:92:63:
33:f1:fc:e3:ea:26:41:64:e5:d5:ed:dd:d5:5d:59:4d:64:d6:
80:c9:af:b0:c8:fd:94:87:0f:4e:f9:6d:68:d6:81:18:70:b0:
32:b6:ba:20:2b:a4:78:f9:07:ba:99:77:0d:d2:64:78:ea:5b:
15:70:7a:f4:81:97:31:26:6a:66:91:a4:8e:d0:9c:5b:95:e6:
d4:8e:12:c2:33:e1:83:1a:38:0c:d1:29:dd:c8:25:b5:9d:42:
8e:09:c7:80:15:60:a7:de:96:1e:1e:ae:bb:62:28:27:57:34:
92:47:40:8a:bf:0d:a7:3a:11:5f:ee:d3:02:01:b8:65:4f:df:
f7:8a:4e:1c:68:50:97:60:ec:3b:9b:ba:ae:e1:95:e8:71:4a:
b7:71:94:1d:dc:9c:e0:db:8e:53:e0:e1:43:96:03:93:53:51:
fb:aa:73:16:f0:60:1a:b8:46:78:d7:da:c3:98:3a:0a:76:b8:
1d:c6:1c:b8:ca:46:98:e6:b3:cb:80:2f:25:44:32:0a:5a:8e:
85:55:83:40:20:fb:d4:2c:48:72:ca:41:04:f5:bb:b8:97:4b:
08:3d:20:67:5b:74:87:a8:a9:19:a0:29:5d:e7:23:03:f6:c1:
ce:77:1b:08
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYzKKWPgk1gWiZdf6wDLQMXhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTIzMjM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOWI4ZTY2ZmFkODE0NjQ1OTg0ZmQ0ZWFhZDMxM2I2ZmUwMDU4OWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDdNXmGvVeLGYNkWmDPgDCK6jz7Y
eMqRR1eXtNHM+lw6StFtLULQS70pG/r6fx7j53QkRGBM5vi8fWCRxq7rPBEG9Ew5
+WnwmEBawMTNgpxgLCOuN+JAt1GSRRYzDZ49cLFORofnoQK9bMWTDaSfNNIegbom
fXZi8KpJNU+q9JHtnCUDinyTqLS6oxn8g8ViWFXQAbJs7AfNuXjyCsp1JxtcVzAT
NsjLKW45JBm+NWwjU1Kof3L86HwxsKk7I2qhssQv2JqnCYhRq18I3UQD8SxxbESz
KbNIjONlZZ77gFW61SrD6rLncz5sxO7QGfDQhc7IB7SKtbMDlilLgMkLrwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFLm45m+tgUZFmE/U6q0xO2/gBYm3MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzllLzAyNDVl
Yi1jYWEyLTQwNjMtYmRlZi0yYTYxYzRlM2UwNTcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWUvMDI0NWVi
LWNhYTItNDA2My1iZGVmLTJhNjFjNGUzZTA1Ny8xL3Viam1iNjJCUmtXWVQ5VHFy
VEU3Yi1BRmliYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMSGjANBgkqhkiG9w0BAQsFAAOCAQEAAr/PBwBIQtTe
hGgKObaO5pJjM/H84+omQWTl1e3d1V1ZTWTWgMmvsMj9lIcPTvltaNaBGHCwMra6
ICukePkHupl3DdJkeOpbFXB69IGXMSZqZpGkjtCcW5Xm1I4SwjPhgxo4DNEp3cgl
tZ1CjgnHgBVgp96WHh6uu2IoJ1c0kkdAir8NpzoRX+7TAgG4ZU/f94pOHGhQl2Ds
O5u6ruGV6HFKt3GUHdyc4NuOU+DhQ5YDk1NR+6pzFvBgGrhGeNfaw5g6Cna4HcYc
uMpGmOazy4AvJUQyClqOhVWDQCD71CxIcspBBPW7uJdLCD0gZ1t0h6ipGaApXecj
A/bBzncbCA==
-----END CERTIFICATE-----
Generated at Fri May 3 14:17:50 2024 by rpki-client on console-ams.rpki-client.org