Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xqnvrGfjS7iro4n_jw16HFZUM_0.cer
File: xqnvrGfjS7iro4n_jw16HFZUM_0.cer (raw, json)
Hash identifier: tmXBHOzowHhEJ6IBl4QIcMrlqR6hlslVN5pIDXvinSo=
Subject key identifier: C6:A9:EF:AC:67:E3:4B:B8:AB:A3:89:FF:8F:0D:7A:1C:56:54:33:FD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7275D51C2D91FA0673C5B88FD0C27D1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 206461
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:5d:51:c2:d9:1f:a0:67:3c:5b:88:fd:0c:27:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6a9efac67e34bb8aba389ff8f0d7a1c565433fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9a:f0:6a:35:a2:5d:89:4b:44:95:ba:df:95:
59:a3:75:5f:e9:a8:8a:8d:18:aa:1c:64:02:cb:ce:
0c:90:1a:ef:12:f5:ea:5c:43:e1:3d:53:26:04:e0:
ee:2e:76:26:f3:5b:06:84:a0:59:9e:29:75:6c:57:
4e:89:01:51:88:76:88:21:4d:69:44:38:1c:7c:18:
cc:ea:f0:fe:98:f2:05:71:aa:49:a1:cc:1d:7e:d9:
e4:3f:8f:c6:c4:0f:54:3c:62:08:21:00:5e:df:8a:
35:bf:4b:98:37:87:0a:fd:8e:31:f5:63:4d:59:a1:
85:58:fc:c2:46:43:25:3a:19:18:29:f9:f8:69:59:
3a:9a:6b:78:3b:ce:6c:c2:21:a5:7d:90:f3:ca:86:
6b:9d:b5:1d:9c:cf:62:02:27:ce:d3:78:cf:b2:d7:
8b:7f:7b:cc:52:85:c5:f3:0d:0b:3d:64:61:8c:8d:
04:a1:9a:12:58:3a:44:3f:a5:35:a6:9a:71:f2:80:
3c:f2:61:36:fc:6b:62:52:68:07:0e:7e:6b:7b:4b:
d2:7d:b7:d6:96:15:a4:ae:46:17:45:6b:d4:98:db:
bc:43:5b:58:55:9c:e2:47:f1:70:c3:ec:d2:34:e0:
d0:78:4b:9c:b1:3a:fc:33:04:29:89:e4:eb:4d:60:
a0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A9:EF:AC:67:E3:4B:B8:AB:A3:89:FF:8F:0D:7A:1C:56:54:33:FD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206461
Signature Algorithm: sha256WithRSAEncryption
6c:de:67:ca:ec:6b:ad:7a:d8:8d:9c:7a:07:0e:c7:50:cc:47:
0f:61:a4:a6:fa:ae:5b:5f:73:5d:ff:21:53:9b:cd:71:58:3a:
3e:ed:81:09:12:a4:26:0e:9d:a0:a0:79:fe:6b:04:fd:e8:d6:
a9:00:91:e4:bd:90:26:0d:7f:f1:e0:ad:2a:63:7b:51:2c:b3:
a8:a8:4a:8f:da:5c:c1:d1:e9:0c:31:67:f7:a3:83:3a:25:c7:
2b:7e:c5:be:bf:f0:98:08:e3:26:96:35:0e:a3:74:43:c2:55:
b3:ec:c1:91:5f:b0:a8:42:8d:a7:93:50:b9:66:a0:68:dd:f3:
2b:a4:17:43:a4:dc:bd:d1:40:45:1d:7e:77:fb:09:02:07:ec:
60:93:02:96:b3:63:cf:eb:42:0a:27:5d:68:49:3f:4a:d7:41:
5c:8b:d8:73:c4:17:3f:1c:ca:f0:44:d4:db:12:3f:a5:1e:b1:
a7:df:8e:d0:95:ba:a7:c8:42:9d:7d:ed:b1:fc:8e:16:a6:f9:
5e:3e:97:c9:7f:4f:51:aa:e6:fc:8d:37:e3:80:42:67:f7:46:
e2:88:b6:af:83:09:b1:1d:ce:33:ed:6a:33:8f:52:d7:78:40:
50:dd:14:9b:10:1f:15:d0:47:6b:c7:70:d8:18:5e:f8:87:97:
8a:7f:68:60
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYzHJ11RwtkfoGc8W4j9DCfRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMjIzMTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNmE5ZWZhYzY3ZTM0YmI4YWJhMzg5ZmY4ZjBkN2ExYzU2NTQzM2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkprwajWiXYlLRJW635VZo3Vf6aiK
jRiqHGQCy84MkBrvEvXqXEPhPVMmBODuLnYm81sGhKBZnil1bFdOiQFRiHaIIU1p
RDgcfBjM6vD+mPIFcapJocwdftnkP4/GxA9UPGIIIQBe34o1v0uYN4cK/Y4x9WNN
WaGFWPzCRkMlOhkYKfn4aVk6mmt4O85swiGlfZDzyoZrnbUdnM9iAifO03jPsteL
f3vMUoXF8w0LPWRhjI0EoZoSWDpEP6U1pppx8oA88mE2/GtiUmgHDn5re0vSfbfW
lhWkrkYXRWvUmNu8Q1tYVZziR/Fww+zSNODQeEucsTr8MwQpieTrTWCgfwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFMap76xn40u4q6OJ/48NehxWVDP9MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg2L2VhNzFj
NC0zZDVlLTRlNjgtODc3OS1kYzMzOTQyY2ExOTcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYvZWE3MWM0
LTNkNWUtNGU2OC04Nzc5LWRjMzM5NDJjYTE5Ny8xL3hxbnZyR2ZqUzdpcm80bl9q
dzE2SEZaVU1fMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMmfTANBgkqhkiG9w0BAQsFAAOCAQEAbN5nyuxrrXrY
jZx6Bw7HUMxHD2GkpvquW19zXf8hU5vNcVg6Pu2BCRKkJg6doKB5/msE/ejWqQCR
5L2QJg1/8eCtKmN7USyzqKhKj9pcwdHpDDFn96ODOiXHK37Fvr/wmAjjJpY1DqN0
Q8JVs+zBkV+wqEKNp5NQuWagaN3zK6QXQ6TcvdFARR1+d/sJAgfsYJMClrNjz+tC
CiddaEk/StdBXIvYc8QXPxzK8ETU2xI/pR6xp9+O0JW6p8hCnX3tsfyOFqb5Xj6X
yX9PUarm/I0344BCZ/dG4oi2r4MJsR3OM+1qM49S13hAUN0UmxAfFdBHa8dw2Bhe
+IeXin9oYA==
-----END CERTIFICATE-----
Generated at Fri May 3 07:35:27 2024 by rpki-client on console-ams.rpki-client.org