Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.cer
File: w3zXlUPxp3KZ0GmqNhUYVFMN2GI.cer (raw, json)
Hash identifier: Mbg72s38o5TQs4ZY3qOUFN0N7MKmfBBNjyCEoDNf+gE=
Subject key identifier: C3:7C:D7:95:43:F1:A7:72:99:D0:69:AA:36:15:18:54:53:0D:D8:62
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB2D50AB8F9B32DB4D577F0CB87663
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:53 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 201414
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:2d:50:ab:8f:9b:32:db:4d:57:7f:0c:b8:76:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c37cd79543f1a77299d069aa36151854530dd862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c7:f4:3d:a1:ce:d7:df:78:7f:28:d9:90:b0:
9e:40:91:fa:40:71:89:69:5a:b7:93:d7:b8:45:67:
b7:ad:d5:0e:a0:dd:36:0c:88:2f:c0:ae:0c:ea:f4:
b1:b0:a9:2e:44:c3:1e:f2:7a:c7:5e:7a:01:9e:ea:
7c:e5:71:a1:5a:f3:d8:2e:00:3a:65:5d:5d:72:8a:
7b:47:3f:fb:e8:78:d2:bc:9a:00:c7:19:0f:7c:b9:
1d:20:63:af:97:06:27:fa:da:45:ea:3b:d0:37:19:
17:3b:cb:b6:74:61:87:8d:7e:4f:43:f9:d4:78:5e:
f5:0f:b6:a9:75:17:47:6c:75:0a:3c:11:c5:ab:b9:
93:de:cd:3a:f4:fe:15:e7:06:ac:79:da:45:6a:3c:
c6:91:df:7e:19:07:25:9c:c6:b5:51:d4:29:7e:4c:
63:78:2d:b1:15:46:cc:f9:ed:1a:7f:2f:7d:a0:37:
69:37:b9:32:48:77:c2:4c:a7:6e:e1:32:95:70:d6:
8d:88:9e:db:da:9a:30:d9:df:67:c5:2d:d0:e7:c0:
3e:99:b3:bc:44:05:03:b9:52:1e:9a:ed:57:3a:d4:
6f:6d:d7:e3:85:bd:b2:12:17:d8:22:e8:a2:86:ee:
f0:a5:7a:e6:62:00:34:10:a5:28:5c:6c:63:da:ca:
78:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7C:D7:95:43:F1:A7:72:99:D0:69:AA:36:15:18:54:53:0D:D8:62
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201414
Signature Algorithm: sha256WithRSAEncryption
6a:34:83:cf:b7:16:35:b2:59:72:5b:d6:7a:d7:df:2d:f8:7a:
d2:d1:c7:4f:22:1b:73:4b:fc:6b:fc:e7:bf:6e:9d:b3:02:16:
b9:5f:af:fc:bb:00:c0:6f:89:f4:25:e8:a8:30:36:c6:da:90:
63:bc:ca:38:cc:60:48:6b:4f:e5:5c:c9:33:e8:3e:80:9f:44:
12:18:b5:f2:eb:fe:df:05:c0:d6:91:95:e5:a6:36:6f:e2:8d:
9c:ff:d7:21:5d:95:aa:95:38:cf:fc:72:b4:0b:69:be:b9:f1:
67:7b:9b:e8:d9:2e:bd:28:29:0e:a2:2b:d9:fa:23:bd:45:6f:
b8:35:02:e9:0d:6f:c3:77:1e:d9:87:39:0d:15:d3:7e:0b:40:
77:80:32:20:aa:d9:74:b6:17:a6:54:2c:3d:b9:06:2b:0f:f8:
71:9a:24:19:e5:d7:9e:04:37:91:0d:34:c3:e6:cb:cb:5b:be:
8d:d3:df:aa:fc:44:e1:46:87:db:b2:b8:8d:1b:27:7d:56:87:
e0:af:a1:84:0c:63:33:4a:bc:5f:9a:07:ff:da:16:03:3b:a7:
1f:ca:61:2a:c1:11:4e:fb:15:42:9f:2c:5f:66:22:23:d1:97:
8f:37:b5:ab:4e:53:35:e9:d8:ca:a1:7c:a9:be:d9:bd:cd:1b:
0f:d3:db:5e
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYzC2y1Qq4+bMttNV38MuHZjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDIyOTUzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzdjZDc5NTQzZjFhNzcyOTlkMDY5YWEzNjE1MTg1NDUzMGRkODYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMf0PaHO1994fyjZkLCeQJH6QHGJ
aVq3k9e4RWe3rdUOoN02DIgvwK4M6vSxsKkuRMMe8nrHXnoBnup85XGhWvPYLgA6
ZV1dcop7Rz/76HjSvJoAxxkPfLkdIGOvlwYn+tpF6jvQNxkXO8u2dGGHjX5PQ/nU
eF71D7apdRdHbHUKPBHFq7mT3s069P4V5wasedpFajzGkd9+GQclnMa1UdQpfkxj
eC2xFUbM+e0afy99oDdpN7kySHfCTKdu4TKVcNaNiJ7b2pow2d9nxS3Q58A+mbO8
RAUDuVIemu1XOtRvbdfjhb2yEhfYIuiihu7wpXrmYgA0EKUoXGxj2sp4bQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFMN815VD8adymdBpqjYVGFRTDdhiMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZiLzZhZjE0
Mi0wYWM2LTRlNzYtOTA0Mi03MTQ4MWJiMGE1MmYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmIvNmFmMTQy
LTBhYzYtNGU3Ni05MDQyLTcxNDgxYmIwYTUyZi8xL3czelhsVVB4cDNLWjBHbXFO
aFVZVkZNTjJHSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMSxjANBgkqhkiG9w0BAQsFAAOCAQEAajSDz7cWNbJZ
clvWetffLfh60tHHTyIbc0v8a/znv26dswIWuV+v/LsAwG+J9CXoqDA2xtqQY7zK
OMxgSGtP5VzJM+g+gJ9EEhi18uv+3wXA1pGV5aY2b+KNnP/XIV2VqpU4z/xytAtp
vrnxZ3ub6NkuvSgpDqIr2fojvUVvuDUC6Q1vw3ce2Yc5DRXTfgtAd4AyIKrZdLYX
plQsPbkGKw/4cZokGeXXngQ3kQ00w+bLy1u+jdPfqvxE4UaH27K4jRsnfVaH4K+h
hAxjM0q8X5oH/9oWAzunH8phKsERTvsVQp8sX2YiI9GXjze1q05TNenYyqF8qb7Z
vc0bD9PbXg==
-----END CERTIFICATE-----
Generated at Fri May 3 08:24:48 2024 by rpki-client on console-fra.rpki-client.org