Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yTxSxVdKn93NZkEgT8aijxdokLE.cer
File: yTxSxVdKn93NZkEgT8aijxdokLE.cer (raw, json)
Hash identifier: r5Gn3zbg6RAalkUl7qMsycKU6Kax1fao4vmSXKd3KIk=
Subject key identifier: C9:3C:52:C5:57:4A:9F:DD:CD:66:41:20:4F:C6:A2:8F:17:68:90:B1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DBE68EA1CFD987667FE0BAF919718A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a9/498a86-c051-4f79-9c17-e77cce79cf2a/1/yTxSxVdKn93NZkEgT8aijxdokLE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a9/498a86-c051-4f79-9c17-e77cce79cf2a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215812
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:e6:8e:a1:cf:d9:87:66:7f:e0:ba:f9:19:71:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c93c52c5574a9fddcd6641204fc6a28f176890b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2c:ec:d2:87:17:e7:c7:a1:09:b4:4b:da:d2:
d1:91:32:98:78:ac:13:15:21:18:15:54:56:07:e1:
76:1f:9b:d6:e6:63:6d:13:ac:cd:f4:33:b7:de:ea:
0f:32:71:9b:f7:5c:c9:5a:5f:99:f9:87:ba:6c:35:
00:c2:67:f0:f0:a1:f8:51:af:a2:1f:9d:e5:54:78:
99:d0:75:59:41:0a:60:b6:65:1b:38:0d:86:c3:35:
5b:5d:d5:3c:a1:51:0e:f7:76:79:df:4b:db:3f:6c:
f8:eb:ba:7d:03:bb:37:e4:86:7d:f2:98:00:24:0c:
b4:20:29:11:46:1f:4f:9a:c7:fe:5d:3a:6f:40:60:
30:40:d1:f2:32:a3:2e:2f:9f:14:04:10:96:ba:4d:
24:50:be:7c:9c:05:f0:61:fd:df:e1:9e:38:58:5c:
b0:7b:9b:ba:9b:7f:11:a0:b4:d1:12:f0:81:ed:1a:
85:42:18:88:61:1d:3c:d0:30:b8:02:fa:93:34:30:
87:c7:1a:8f:92:08:ae:8d:b0:62:b3:1c:6a:0b:9c:
56:3a:f1:37:c5:4c:fc:46:a9:8f:ec:77:29:25:b6:
3b:d9:bd:f0:4e:21:89:2d:76:d9:35:da:9b:9b:55:
b0:10:de:aa:68:e7:7e:81:26:c9:b4:fb:70:7a:32:
58:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:3C:52:C5:57:4A:9F:DD:CD:66:41:20:4F:C6:A2:8F:17:68:90:B1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/498a86-c051-4f79-9c17-e77cce79cf2a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/498a86-c051-4f79-9c17-e77cce79cf2a/1/yTxSxVdKn93NZkEgT8aijxdokLE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215812
Signature Algorithm: sha256WithRSAEncryption
3f:c7:16:02:8a:96:31:46:1a:49:72:14:f8:23:7d:37:54:95:
0e:f0:4c:4c:f5:3d:da:dd:79:cf:2c:e2:94:16:65:6a:cb:4a:
bb:8c:39:e8:33:e5:f0:35:ef:d9:11:5e:23:b2:21:28:6c:e2:
8a:5b:3c:ea:21:5b:e0:66:11:76:2d:58:97:fb:a3:2e:51:2d:
0a:8d:66:40:a0:71:4d:c2:a3:1c:b7:b4:30:f1:a5:28:a9:05:
02:3f:f9:48:23:2e:3a:80:ae:4f:8a:ff:37:8c:d0:2d:20:a8:
05:77:b1:27:87:51:bb:45:86:a0:c8:40:9a:f6:33:c8:fb:04:
dc:eb:b1:3f:40:d4:97:a0:88:87:ee:5e:22:26:e3:7b:d8:67:
ec:02:7b:81:34:96:d6:72:0a:fd:1e:66:2c:af:5f:05:8c:e1:
ff:99:b0:6b:ad:1b:cf:da:9e:59:32:be:92:a9:b2:b6:4a:d3:
19:27:65:04:22:f6:58:fe:17:a7:30:74:e3:03:8c:68:24:7d:
5e:e4:22:a0:df:c7:69:7c:07:65:0f:eb:c7:45:b6:51:ad:e8:
26:a8:6c:ee:6e:5a:b0:b9:cf:dd:6d:8d:3d:b1:27:5e:39:ba:
fe:a0:39:0f:b2:b7:3a:57:af:06:74:d0:7c:8f:16:99:74:72:
3c:9b:91:e0
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYzF2+aOoc/Zh2Z/4Lr5GXGKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTYyOTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTNjNTJjNTU3NGE5ZmRkY2Q2NjQxMjA0ZmM2YTI4ZjE3Njg5MGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5izs0ocX58ehCbRL2tLRkTKYeKwT
FSEYFVRWB+F2H5vW5mNtE6zN9DO33uoPMnGb91zJWl+Z+Ye6bDUAwmfw8KH4Ua+i
H53lVHiZ0HVZQQpgtmUbOA2GwzVbXdU8oVEO93Z530vbP2z467p9A7s35IZ98pgA
JAy0ICkRRh9Pmsf+XTpvQGAwQNHyMqMuL58UBBCWuk0kUL58nAXwYf3f4Z44WFyw
e5u6m38RoLTREvCB7RqFQhiIYR080DC4AvqTNDCHxxqPkgiujbBisxxqC5xWOvE3
xUz8RqmP7HcpJbY72b3wTiGJLXbZNdqbm1WwEN6qaOd+gSbJtPtwejJYWQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFMk8UsVXSp/dzWZBIE/Goo8XaJCxMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E5LzQ5OGE4
Ni1jMDUxLTRmNzktOWMxNy1lNzdjY2U3OWNmMmEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTkvNDk4YTg2
LWMwNTEtNGY3OS05YzE3LWU3N2NjZTc5Y2YyYS8xL3lUeFN4VmRLbjkzTlprRWdU
OGFpanhkb2tMRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNLBDANBgkqhkiG9w0BAQsFAAOCAQEAP8cWAoqWMUYa
SXIU+CN9N1SVDvBMTPU92t15zyzilBZlastKu4w56DPl8DXv2RFeI7IhKGziils8
6iFb4GYRdi1Yl/ujLlEtCo1mQKBxTcKjHLe0MPGlKKkFAj/5SCMuOoCuT4r/N4zQ
LSCoBXexJ4dRu0WGoMhAmvYzyPsE3OuxP0DUl6CIh+5eIibje9hn7AJ7gTSW1nIK
/R5mLK9fBYzh/5mwa60bz9qeWTK+kqmytkrTGSdlBCL2WP4XpzB04wOMaCR9XuQi
oN/HaXwHZQ/rx0W2Ua3oJqhs7m5asLnP3W2NPbEnXjm6/qA5D7K3OlevBnTQfI8W
mXRyPJuR4A==
-----END CERTIFICATE-----
Generated at Fri May 3 02:20:17 2024 by rpki-client on console-ams.rpki-client.org