Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vutLWV6eCEZJ0Kvlt3uN_3NtA_M.cer
File: vutLWV6eCEZJ0Kvlt3uN_3NtA_M.cer (raw, json)
Hash identifier: tm8FJzyuLa7Q2MiM0V/5bRD7JAIaL5D6YvleDpmZSA0=
Subject key identifier: BE:EB:4B:59:5E:9E:08:46:49:D0:AB:E5:B7:7B:8D:FF:73:6D:03:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC493125F21032D77F07EB1B41D82E93F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/bcbbf0bf-a2e0-42a4-8293-711496eb66d2/0/BEEB4B595E9E084649D0ABE5B77B8DFF736D03F3.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/bcbbf0bf-a2e0-42a4-8293-711496eb66d2/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 216089
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:12:5f:21:03:2d:77:f0:7e:b1:b4:1d:82:e9:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=beeb4b595e9e084649d0abe5b77b8dff736d03f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0c:10:1c:0b:a5:a7:39:7a:12:40:d0:6c:fc:
29:08:f6:4c:d1:9f:35:e7:67:65:f8:3d:54:dc:1e:
d3:42:6f:73:69:8a:48:4c:cc:9a:28:5e:45:42:f4:
b6:f6:5c:fc:dc:b0:5f:12:76:99:37:36:82:16:d8:
d0:5d:11:e6:66:23:78:0b:41:56:61:0d:81:5d:96:
c9:f3:35:59:db:6c:36:ed:87:30:24:0c:11:bd:d4:
88:9d:7e:09:50:a0:ba:4b:09:8c:dd:c5:b1:51:4e:
67:5c:77:95:f5:23:91:a7:6c:cb:11:7e:63:ff:19:
42:b1:18:b9:73:f3:bf:77:b2:09:9c:dd:44:d8:7a:
5e:45:bd:ef:79:bd:42:e3:4c:d4:86:09:eb:c1:bf:
cd:8f:99:48:e2:72:47:4d:4b:4b:27:3e:5a:59:26:
3f:16:24:f3:77:52:9c:e2:cc:c7:6b:3e:ea:e1:7d:
23:c6:46:c4:d8:60:2c:22:5a:f3:44:58:72:7c:91:
18:eb:aa:47:1f:21:5d:8e:d4:b8:01:55:88:f9:35:
63:65:7b:8f:e1:e8:95:fb:5b:21:0c:04:de:a7:16:
57:ba:36:44:93:b7:1a:fd:dc:fa:d0:4b:95:54:b4:
94:20:76:a1:4a:36:ae:cc:ad:68:8b:ef:d0:6b:6a:
b2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:EB:4B:59:5E:9E:08:46:49:D0:AB:E5:B7:7B:8D:FF:73:6D:03:F3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/bcbbf0bf-a2e0-42a4-8293-711496eb66d2/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/bcbbf0bf-a2e0-42a4-8293-711496eb66d2/0/BEEB4B595E9E084649D0ABE5B77B8DFF736D03F3.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216089
Signature Algorithm: sha256WithRSAEncryption
73:69:4e:94:43:71:fa:be:72:69:52:2b:d6:f3:b7:43:98:79:
22:5e:97:10:9a:a0:d7:18:a9:22:70:9c:c0:9f:6c:c7:98:69:
82:2b:3a:13:33:e0:57:dc:51:87:ad:06:79:c6:9c:05:50:b4:
ae:d9:4d:0a:c2:d9:62:13:2a:0b:c2:8a:47:0c:33:7a:02:40:
11:98:fc:9b:ff:4e:57:52:20:49:00:aa:84:a2:dd:fa:f3:0e:
cf:1f:2b:ee:4a:9a:31:31:a7:50:19:f0:76:c8:8e:9d:f9:3e:
93:a8:65:11:3f:0a:0c:b0:a3:06:46:e0:4e:2d:bf:36:93:da:
2e:47:fb:94:04:d4:c5:27:fd:95:f2:34:87:db:1a:7f:76:8d:
bf:f2:40:af:45:00:ac:c8:6a:74:46:90:17:7f:d8:4c:e9:a0:
b9:d1:98:5a:ee:1e:7e:46:9b:87:a3:47:de:61:da:7d:86:d8:
f5:b9:0f:d6:e5:80:06:18:30:b8:32:40:64:9a:da:0f:4e:8f:
62:d0:be:f4:a6:57:77:02:92:0a:9e:b4:a3:5e:5f:11:72:d2:
30:02:2e:55:7e:e2:36:83:b1:85:f5:27:dd:9d:91:3e:ee:23:
15:c2:24:23:ea:05:4c:4e:2e:24:c5:8d:9f:50:32:72:1d:19:
bd:f4:9d:c0
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgISAYzEkxJfIQMtd/B+sbQdguk/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTAzMDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZWViNGI1OTVlOWUwODQ2NDlkMGFiZTViNzdiOGRmZjczNmQwM2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygwQHAulpzl6EkDQbPwpCPZM0Z81
52dl+D1U3B7TQm9zaYpITMyaKF5FQvS29lz83LBfEnaZNzaCFtjQXRHmZiN4C0FW
YQ2BXZbJ8zVZ22w27YcwJAwRvdSInX4JUKC6SwmM3cWxUU5nXHeV9SORp2zLEX5j
/xlCsRi5c/O/d7IJnN1E2HpeRb3veb1C40zUhgnrwb/Nj5lI4nJHTUtLJz5aWSY/
FiTzd1Kc4szHaz7q4X0jxkbE2GAsIlrzRFhyfJEY66pHHyFdjtS4AVWI+TVjZXuP
4eiV+1shDATepxZXujZEk7ca/dz60EuVVLSUIHahSjauzK1oi+/Qa2qyiwIDAQAB
o4ICmzCCApcwHQYDVR0OBBYEFL7rS1lenghGSdCr5bd7jf9zbQPzMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2JjYmJm
MGJmLWEyZTAtNDJhNC04MjkzLTcxMTQ5NmViNjZkMi8wLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYmNi
YmYwYmYtYTJlMC00MmE0LTgyOTMtNzExNDk2ZWI2NmQyLzAvQkVFQjRCNTk1RTlF
MDg0NjQ5RDBBQkU1Qjc3QjhERkY3MzZEMDNGMy5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDTBkw
DQYJKoZIhvcNAQELBQADggEBAHNpTpRDcfq+cmlSK9bzt0OYeSJelxCaoNcYqSJw
nMCfbMeYaYIrOhMz4FfcUYetBnnGnAVQtK7ZTQrC2WITKgvCikcMM3oCQBGY/Jv/
TldSIEkAqoSi3frzDs8fK+5KmjExp1AZ8HbIjp35PpOoZRE/CgywowZG4E4tvzaT
2i5H+5QE1MUn/ZXyNIfbGn92jb/yQK9FAKzIanRGkBd/2EzpoLnRmFruHn5Gm4ej
R95h2n2G2PW5D9blgAYYMLgyQGSa2g9Oj2LQvvSmV3cCkgqetKNeXxFy0jACLlV+
4jaDsYX1J92dkT7uIxXCJCPqBUxOLiTFjZ9QMnIdGb30ncA=
-----END CERTIFICATE-----
Generated at Fri May 3 03:49:44 2024 by rpki-client on console-fra.rpki-client.org