Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wTP57cPI4o8RNVPC8n1G2bK8lzY.cer
File: wTP57cPI4o8RNVPC8n1G2bK8lzY.cer (raw, json)
Hash identifier: Hv/1iS+xy/k6P2A99m8fLtgDyWIPWRUqDRJVtRQfiFk=
Subject key identifier: C1:33:F9:ED:C3:C8:E2:8F:11:35:53:C2:F2:7D:46:D9:B2:BC:97:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7270D369528C98C21E69E5E95775DB7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/6979b5-5a93-4233-9abc-09a368e693ff/1/wTP57cPI4o8RNVPC8n1G2bK8lzY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/6979b5-5a93-4233-9abc-09a368e693ff/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:14 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 209686
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:0d:36:95:28:c9:8c:21:e6:9e:5e:95:77:5d:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c133f9edc3c8e28f113553c2f27d46d9b2bc9736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3c:20:56:89:b2:7c:0f:9a:61:5c:03:89:8d:
bc:26:40:88:f8:50:83:ce:a3:41:cd:ed:0e:07:1d:
1e:e8:c2:c6:64:a8:67:1f:2a:85:49:0e:7a:77:ab:
9e:8b:23:d1:02:44:1d:6e:93:72:04:e1:43:be:96:
88:d4:a5:81:dd:15:9f:36:aa:7a:42:b7:d8:56:bb:
17:cc:5a:41:55:10:81:09:ae:78:6c:81:86:70:90:
9c:5a:34:88:6b:fa:04:68:e8:00:c2:d5:10:69:45:
78:8f:79:c0:2f:a4:86:7d:cc:4e:ad:5a:bc:ea:d6:
8b:82:dc:87:a8:0f:13:45:b4:82:88:32:91:29:4f:
47:47:27:f3:9c:48:a3:7c:24:0c:46:84:41:9e:93:
ae:2b:0c:1b:28:b2:09:b1:d3:45:7a:b8:35:b7:ec:
a8:7f:a4:67:30:ab:a0:a3:5a:af:3c:a1:38:b3:da:
4e:e0:3a:9e:f0:30:81:00:b0:da:f4:3e:f4:db:8c:
95:29:71:b4:07:87:f3:ac:09:09:5f:d4:81:45:b7:
5c:7b:91:98:0e:12:c2:e9:36:99:ff:8f:67:ec:f6:
85:68:86:ae:05:4b:e0:2c:49:20:ca:2b:45:de:cb:
91:0c:37:b3:60:ce:bd:37:00:0a:b7:12:fe:f1:16:
ae:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:33:F9:ED:C3:C8:E2:8F:11:35:53:C2:F2:7D:46:D9:B2:BC:97:36
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6979b5-5a93-4233-9abc-09a368e693ff/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6979b5-5a93-4233-9abc-09a368e693ff/1/wTP57cPI4o8RNVPC8n1G2bK8lzY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209686
Signature Algorithm: sha256WithRSAEncryption
56:97:62:95:04:2e:05:25:a5:0c:4f:f3:db:d5:1d:d2:12:15:
ab:69:de:58:80:e9:97:c3:01:ad:55:3b:a5:21:5e:6a:2e:ba:
2c:54:39:92:4c:b2:c0:97:79:19:f6:c0:6f:4f:b0:be:2a:08:
d1:ce:78:9f:59:3b:f0:cf:c6:13:0f:b9:04:42:6f:28:22:3b:
e1:fa:12:17:ed:d6:85:b3:33:f7:64:b2:59:11:76:fb:6e:9a:
25:07:44:8c:4e:2e:96:03:bf:ee:e4:a7:f7:9b:31:71:04:d3:
5f:ba:95:f4:d0:86:8e:ba:cf:29:30:77:df:dc:46:77:25:8b:
df:f3:4d:e4:9b:57:ac:cf:b3:89:de:05:f0:d5:00:a5:a6:be:
19:82:f3:cd:2c:f6:a5:a2:b7:c5:c4:b5:cd:20:2f:7d:b3:42:
f5:31:c6:7b:c3:ac:48:7d:b2:10:39:0d:ca:3b:45:63:c7:a0:
ba:01:32:c1:14:09:7d:ec:01:54:67:13:09:da:8f:d6:3d:76:
08:e6:c9:0c:13:86:94:02:4f:09:13:e4:18:7c:8a:c0:df:31:
e1:ed:9e:46:22:9a:46:5c:45:09:ca:8d:f6:91:8c:fd:35:d4:
f8:e6:db:2e:8b:94:8e:3a:0f:6e:28:93:ab:1d:1f:a0:f1:d9:
66:1d:3c:da
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYzHJw02lSjJjCHmnl6Vd123MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMjIzMTE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTMzZjllZGMzYzhlMjhmMTEzNTUzYzJmMjdkNDZkOWIyYmM5NzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTwgVomyfA+aYVwDiY28JkCI+FCD
zqNBze0OBx0e6MLGZKhnHyqFSQ56d6ueiyPRAkQdbpNyBOFDvpaI1KWB3RWfNqp6
QrfYVrsXzFpBVRCBCa54bIGGcJCcWjSIa/oEaOgAwtUQaUV4j3nAL6SGfcxOrVq8
6taLgtyHqA8TRbSCiDKRKU9HRyfznEijfCQMRoRBnpOuKwwbKLIJsdNFerg1t+yo
f6RnMKugo1qvPKE4s9pO4Dqe8DCBALDa9D7024yVKXG0B4fzrAkJX9SBRbdce5GY
DhLC6TaZ/49n7PaFaIauBUvgLEkgyitF3suRDDezYM69NwAKtxL+8RauXQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFMEz+e3DyOKPETVTwvJ9RtmyvJc2MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUwLzY5Nzli
NS01YTkzLTQyMzMtOWFiYy0wOWEzNjhlNjkzZmYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAvNjk3OWI1
LTVhOTMtNDIzMy05YWJjLTA5YTM2OGU2OTNmZi8xL3dUUDU3Y1BJNG84Uk5WUEM4
bjFHMmJLOGx6WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMzFjANBgkqhkiG9w0BAQsFAAOCAQEAVpdilQQuBSWl
DE/z29Ud0hIVq2neWIDpl8MBrVU7pSFeai66LFQ5kkyywJd5GfbAb0+wvioI0c54
n1k78M/GEw+5BEJvKCI74foSF+3WhbMz92SyWRF2+26aJQdEjE4ulgO/7uSn95sx
cQTTX7qV9NCGjrrPKTB339xGdyWL3/NN5JtXrM+zid4F8NUApaa+GYLzzSz2paK3
xcS1zSAvfbNC9THGe8OsSH2yEDkNyjtFY8egugEywRQJfewBVGcTCdqP1j12CObJ
DBOGlAJPCRPkGHyKwN8x4e2eRiKaRlxFCcqN9pGM/TXU+ObbLouUjjoPbiiTqx0f
oPHZZh082g==
-----END CERTIFICATE-----
Generated at Fri May 3 03:50:13 2024 by rpki-client on console-fra.rpki-client.org