Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/w5JjfwbbxBhtlQKakrKbMOn0lA0.cer
File: w5JjfwbbxBhtlQKakrKbMOn0lA0.cer (raw, json)
Hash identifier: T2gt0iBku+v8+Ip8ibIKhh8Yj5yzEQlYTCkHf/QQeY0=
Subject key identifier: C3:92:63:7F:06:DB:C4:18:6D:95:02:9A:92:B2:9B:30:E9:F4:94:0D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01919626417A3AA561D15CD1E3DB6F69879A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1b/825b0b-976f-472e-a6a1-ce4d96f492ec/1/w5JjfwbbxBhtlQKakrKbMOn0lA0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1b/825b0b-976f-472e-a6a1-ce4d96f492ec/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 27 Aug 2024 23:22:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 214299
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 Nov 2024 08:27:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:96:26:41:7a:3a:a5:61:d1:5c:d1:e3:db:6f:69:87:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 27 23:22:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c392637f06dbc4186d95029a92b29b30e9f4940d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:06:f0:af:5b:c3:18:0c:11:84:9b:3b:b4:f9:
80:35:6f:31:97:c2:ff:d8:e6:b1:23:f0:95:d8:17:
42:b5:e7:85:b9:ca:bb:03:8d:6f:54:e1:fd:1b:52:
c9:4e:39:bd:7e:f7:e5:c0:33:7b:86:dc:d5:8b:13:
61:5f:ca:7c:4e:86:04:6a:81:f5:4c:ac:20:60:88:
62:d0:e5:28:6b:d6:a8:26:31:13:3a:ea:05:6e:29:
b2:3f:ea:71:37:fd:1d:de:52:25:6f:d4:f6:1e:a5:
14:b1:0a:87:6d:1f:18:07:4c:48:1c:f6:71:8f:24:
3c:a0:79:79:2f:15:0c:7f:47:ce:03:84:57:f1:7c:
a6:b7:c6:83:4d:a2:29:70:2f:8c:d4:b6:ae:c7:fc:
fe:ae:ad:58:ed:4f:ae:a5:5d:18:ca:80:a5:60:f0:
06:50:4a:ae:17:18:cb:28:15:75:f6:9b:ca:85:37:
62:c2:b7:24:b8:77:05:65:f6:ca:cf:c3:18:14:5b:
44:3e:cb:23:67:86:63:74:8c:2c:a2:bb:ba:8b:fb:
19:92:d1:81:15:f1:2e:13:53:73:e2:bd:5d:e3:93:
df:e5:6a:f8:93:76:2f:27:34:7f:8e:97:3c:2d:f1:
b9:82:56:e9:93:51:25:24:88:b1:ee:d2:fd:cb:65:
8a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:92:63:7F:06:DB:C4:18:6D:95:02:9A:92:B2:9B:30:E9:F4:94:0D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/825b0b-976f-472e-a6a1-ce4d96f492ec/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/825b0b-976f-472e-a6a1-ce4d96f492ec/1/w5JjfwbbxBhtlQKakrKbMOn0lA0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214299
Signature Algorithm: sha256WithRSAEncryption
1e:0c:1e:36:66:82:46:2d:93:fe:ff:f5:0f:56:14:bb:30:97:
c9:fa:d6:b0:b0:c6:3f:52:87:2c:3b:9d:24:0b:2d:3c:8d:b0:
5d:02:fe:11:2d:a5:96:ca:11:f2:30:83:e5:1d:98:9b:8c:a7:
28:4e:32:31:b5:21:e0:eb:43:d2:4d:22:52:ca:17:18:a1:d3:
66:a4:97:68:92:d2:83:6e:e7:fb:ca:56:1a:cd:2f:f6:a1:60:
a6:eb:68:52:7c:99:2a:06:d3:0e:a3:6a:5f:4e:4d:bf:fe:a2:
9c:86:6c:15:c0:79:22:ba:31:ef:ec:cc:1c:4e:3b:b9:b6:9b:
a9:da:20:d6:be:78:84:70:be:03:00:b9:09:58:d1:92:cc:94:
cc:80:bb:86:3d:9b:34:8a:6d:b5:36:03:70:77:d5:c9:39:8e:
e2:fa:17:1f:31:19:d8:37:70:1a:2a:e0:bc:28:04:2f:08:73:
81:b5:14:36:0b:94:f1:ed:95:04:4f:84:13:21:88:c3:69:96:
d2:72:56:6e:f1:0a:b3:e1:00:38:aa:1d:6c:81:41:59:98:e1:
34:ff:16:87:45:08:62:e3:84:9b:d7:ac:c8:11:31:10:c5:b5:
2d:ea:ef:23:1f:a4:23:85:df:8d:df:e0:4d:64:22:2e:73:76:
0b:92:db:d5
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZGWJkF6OqVh0VzR49tvaYeaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwODI3MjMyMjU1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzkyNjM3ZjA2ZGJjNDE4NmQ5NTAyOWE5MmIyOWIzMGU5ZjQ5NDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQbwr1vDGAwRhJs7tPmANW8xl8L/
2OaxI/CV2BdCteeFucq7A41vVOH9G1LJTjm9fvflwDN7htzVixNhX8p8ToYEaoH1
TKwgYIhi0OUoa9aoJjETOuoFbimyP+pxN/0d3lIlb9T2HqUUsQqHbR8YB0xIHPZx
jyQ8oHl5LxUMf0fOA4RX8Xymt8aDTaIpcC+M1Laux/z+rq1Y7U+upV0YyoClYPAG
UEquFxjLKBV19pvKhTdiwrckuHcFZfbKz8MYFFtEPssjZ4ZjdIwsoru6i/sZktGB
FfEuE1Nz4r1d45Pf5Wr4k3YvJzR/jpc8LfG5glbpk1ElJIix7tL9y2WKQwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFMOSY38G28QYbZUCmpKymzDp9JQNMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFiLzgyNWIw
Yi05NzZmLTQ3MmUtYTZhMS1jZTRkOTZmNDkyZWMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWIvODI1YjBi
LTk3NmYtNDcyZS1hNmExLWNlNGQ5NmY0OTJlYy8xL3c1Smpmd2JieEJodGxRS2Fr
cktiTU9uMGxBMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNFGzANBgkqhkiG9w0BAQsFAAOCAQEAHgweNmaCRi2T
/v/1D1YUuzCXyfrWsLDGP1KHLDudJAstPI2wXQL+ES2llsoR8jCD5R2Ym4ynKE4y
MbUh4OtD0k0iUsoXGKHTZqSXaJLSg27n+8pWGs0v9qFgputoUnyZKgbTDqNqX05N
v/6inIZsFcB5Irox7+zMHE47ubabqdog1r54hHC+AwC5CVjRksyUzIC7hj2bNIpt
tTYDcHfVyTmO4voXHzEZ2DdwGirgvCgELwhzgbUUNguU8e2VBE+EEyGIw2mW0nJW
bvEKs+EAOKodbIFBWZjhNP8Wh0UIYuOEm9esyBExEMW1LervIx+kI4Xfjd/gTWQi
LnN2C5Lb1Q==
-----END CERTIFICATE-----
Generated at Wed Nov 27 14:11:59 2024 by rpki-client on console-ams.rpki-client.org