Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vm0t9XQLV9Se09LeKamMvGfyAWU.cer
File: vm0t9XQLV9Se09LeKamMvGfyAWU.cer (raw, json)
Hash identifier: wDy6odkGn9D8+0YwPdLcMYiol6zqdipbTQWnkJSDoVM=
Subject key identifier: BE:6D:2D:F5:74:0B:57:D4:9E:D3:D2:DE:29:A9:8C:BC:67:F2:01:65
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86EEBC71EE92102357F589E339219A7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:29:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 60360
AS: 60375
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6e:eb:c7:1e:e9:21:02:35:7f:58:9e:33:92:19:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be6d2df5740b57d49ed3d2de29a98cbc67f20165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0a:23:73:ad:4d:d8:8c:08:6e:be:f8:36:8a:
bd:27:33:84:b1:3b:3d:a7:42:fd:e3:47:bc:cb:15:
5a:24:ae:63:5d:7e:b9:97:db:21:56:b8:7f:7f:3e:
0f:55:6f:f7:4e:e1:ce:71:5c:e4:0d:a1:79:69:19:
32:21:d5:17:ec:be:a9:fa:e5:d2:df:df:21:14:ca:
d7:57:93:4b:61:85:07:89:f6:44:d9:7c:f5:3b:23:
f7:6a:d7:d7:ae:35:93:5b:f3:bd:e9:60:c2:e4:3c:
85:5f:8f:72:55:98:1c:b4:8f:33:5e:10:90:c0:2f:
2b:ea:e7:7b:6c:15:f8:e6:56:3a:59:ff:be:15:7e:
34:70:ee:ed:c2:fc:e1:a9:6e:c0:5f:25:ac:22:11:
3f:6b:8a:9c:96:04:45:79:b1:8a:31:33:98:0e:1a:
61:1d:f8:87:11:87:ff:a9:1d:be:fc:64:a7:61:c2:
b6:40:b4:02:68:e4:ef:ae:4a:34:b4:27:b0:4f:a4:
38:31:15:5f:8f:60:81:0e:8a:eb:e0:4f:e0:11:bf:
ee:fb:24:46:3f:cc:3e:25:00:ae:ad:90:6b:d2:33:
22:5c:16:24:88:ba:23:e1:f0:2d:d4:26:61:d8:ff:
98:91:4c:b4:b7:5c:3d:8b:b7:67:d1:f1:8c:bc:f2:
69:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:6D:2D:F5:74:0B:57:D4:9E:D3:D2:DE:29:A9:8C:BC:67:F2:01:65
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60360
60375
Signature Algorithm: sha256WithRSAEncryption
75:50:54:70:eb:23:83:a4:f9:99:33:80:08:e5:92:f4:ed:f0:
44:94:35:a3:b3:4a:e6:31:11:b2:f1:9a:04:04:39:a1:14:ee:
3e:3b:2f:8c:f8:a8:25:a0:b4:69:9a:7c:96:0a:ae:20:0c:54:
b5:e0:c0:3c:3e:9a:33:33:d1:f4:7d:f5:c4:0f:12:f6:7e:88:
8f:40:0a:88:67:00:18:70:ab:28:dc:73:cf:91:67:1b:33:d8:
97:4c:0a:f8:09:d1:41:d6:75:c3:54:72:38:6f:c3:85:8d:5c:
64:ec:96:4b:d3:9b:a9:78:58:49:66:d2:e8:90:aa:ec:83:78:
96:f6:01:69:19:35:29:38:fb:c8:7e:65:60:a2:13:e7:1e:ac:
8e:88:ae:05:7f:6c:32:6c:92:1f:9a:74:9c:ba:77:61:2a:1d:
9b:2a:24:40:df:d8:81:04:86:31:63:19:4e:7f:e6:fb:cf:45:
12:ad:90:c0:30:cd:79:a8:3c:cf:cf:75:0a:5e:9d:fd:61:43:
44:1a:be:bc:c0:b8:d5:38:50:e4:84:b7:27:91:7c:b6:4e:41:
72:8a:8c:36:6e:42:6c:33:c0:b7:1a:9e:e9:87:67:6a:30:b8:
96:6d:8f:9e:4f:97:b5:db:d8:7e:eb:66:08:b4:e6:87:c1:98:
35:43:df:46
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzIbuvHHukhAjV/WJ4zkhmnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDQyOTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTZkMmRmNTc0MGI1N2Q0OWVkM2QyZGUyOWE5OGNiYzY3ZjIwMTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgojc61N2IwIbr74Noq9JzOEsTs9
p0L940e8yxVaJK5jXX65l9shVrh/fz4PVW/3TuHOcVzkDaF5aRkyIdUX7L6p+uXS
398hFMrXV5NLYYUHifZE2Xz1OyP3atfXrjWTW/O96WDC5DyFX49yVZgctI8zXhCQ
wC8r6ud7bBX45lY6Wf++FX40cO7twvzhqW7AXyWsIhE/a4qclgRFebGKMTOYDhph
HfiHEYf/qR2+/GSnYcK2QLQCaOTvrko0tCewT6Q4MRVfj2CBDorr4E/gEb/u+yRG
P8w+JQCurZBr0jMiXBYkiLoj4fAt1CZh2P+YkUy0t1w9i7dn0fGMvPJpKQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFL5tLfV0C1fUntPS3impjLxn8gFlMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYxLzBjZTM3
My05Mjk4LTQ4ZmMtOTI1OS1iYTkxNzhjNzlmYzYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjEvMGNlMzcz
LTkyOTgtNDhmYy05MjU5LWJhOTE3OGM3OWZjNi8xL3ZtMHQ5WFFMVjlTZTA5TGVL
YW1NdkdmeUFXVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEIAQH/BBAwDqAMMAoCAwDryAIDAOvXMA0GCSqGSIb3DQEBCwUAA4IBAQB1UFRw
6yODpPmZM4AI5ZL07fBElDWjs0rmMRGy8ZoEBDmhFO4+Oy+M+KgloLRpmnyWCq4g
DFS14MA8PpozM9H0ffXEDxL2foiPQAqIZwAYcKso3HPPkWcbM9iXTAr4CdFB1nXD
VHI4b8OFjVxk7JZL05upeFhJZtLokKrsg3iW9gFpGTUpOPvIfmVgohPnHqyOiK4F
f2wybJIfmnScundhKh2bKiRA39iBBIYxYxlOf+b7z0USrZDAMM15qDzPz3UKXp39
YUNEGr68wLjVOFDkhLcnkXy2TkFyiow2bkJsM8C3Gp7ph2dqMLiWbY+eT5e129h+
62YItOaHwZg1Q99G
-----END CERTIFICATE-----
Generated at Wed Nov 27 01:08:24 2024 by rpki-client on console-fra.rpki-client.org