Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zRQ2kCMKRApot6iqmCefL2Xf7ig.cer
File: zRQ2kCMKRApot6iqmCefL2Xf7ig.cer (raw, json)
Hash identifier: S4VK3UPTdZK3jB8MO9JIrJWpwfDjVVJWIHA2JTf8aik=
Subject key identifier: CD:14:36:90:23:0A:44:0A:68:B7:A8:AA:98:27:9F:2F:65:DF:EE:28
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64A84C2D8A9457FE250C1849FE10E03
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:30:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2001:678:d4c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:84:c2:d8:a9:45:7f:e2:50:c1:84:9f:e1:0e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd143690230a440a68b7a8aa98279f2f65dfee28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:60:0a:03:5d:92:9b:66:77:4e:08:b4:5b:c0:
24:ed:84:fa:f8:e8:d7:8b:2e:84:13:75:d6:54:bd:
93:bc:29:ef:ea:f0:4d:ab:cb:a1:72:1a:cf:f8:9c:
2a:4e:27:f7:e2:db:03:54:a4:14:b2:67:07:28:ba:
03:d2:87:fe:71:c7:d4:de:24:70:6e:bf:9c:f4:f6:
fb:1c:89:e6:9f:ac:55:fd:9a:b3:3c:7a:c5:0c:82:
dd:72:99:c3:22:fc:27:50:79:77:70:9c:b9:1f:0f:
42:e5:7a:e3:fc:a4:c0:d9:e8:92:41:7e:ed:e8:5d:
e7:d4:be:86:ff:bd:a0:66:ce:20:b8:45:c4:17:e5:
43:4d:50:8f:be:b6:ec:ff:7a:55:7d:3f:3b:42:17:
5a:31:e6:2d:ac:87:2c:73:c0:05:2c:91:f4:93:4a:
67:1b:40:85:1b:96:f4:cd:10:82:5f:74:63:ba:90:
2d:40:93:a6:13:45:11:3e:cd:74:9a:13:a7:cf:63:
2c:d9:74:f9:39:16:35:15:69:19:9d:2e:69:ac:dd:
28:bb:83:2c:07:bd:72:4e:3b:41:f9:5f:60:e7:27:
62:7e:02:c9:2c:3d:dc:e3:9f:f9:c4:07:b2:93:12:
a6:4b:80:a7:a7:5f:04:82:bc:14:63:0b:0a:08:ed:
7a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:14:36:90:23:0A:44:0A:68:B7:A8:AA:98:27:9F:2F:65:DF:EE:28
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:d4c::/48
Signature Algorithm: sha256WithRSAEncryption
10:52:00:73:55:4a:49:13:56:1e:d4:57:3a:7c:ec:c9:8e:57:
05:69:4f:3a:2e:7c:15:a2:08:73:8f:9e:71:83:88:27:bb:45:
55:93:8e:3e:74:7d:ae:4d:d3:7d:d4:65:50:f8:12:ef:94:b2:
52:d2:28:92:93:74:ef:80:eb:1e:13:23:c8:e4:68:bf:40:29:
f3:29:fe:12:a3:8b:3d:18:1f:9a:46:4e:05:46:a4:87:c8:dc:
d2:68:6f:4c:4d:f7:7f:c9:b9:7c:b9:cb:83:02:0c:07:88:fd:
42:75:74:59:bf:b3:30:97:81:46:e3:dd:04:35:52:46:a6:81:
8b:02:10:96:55:f5:0c:bf:ac:1c:20:2d:aa:81:88:8c:9f:27:
e8:c7:54:f8:13:8e:73:de:31:68:b4:f7:5a:29:02:7f:6b:be:
7b:63:47:0e:4b:02:28:48:64:31:ea:24:f8:0f:ba:ba:1a:ca:
f8:35:4b:42:48:33:b2:f0:e0:f0:33:b0:f4:07:51:72:b3:17:
90:0b:6b:1e:a1:46:02:21:f4:8d:a3:ac:92:43:b2:6e:b7:cd:
7a:87:21:48:87:73:15:bf:f9:bb:6c:e8:bc:ea:e3:ab:0d:e7:
11:8c:fc:9b:44:81:9e:a2:a9:2a:7a:99:06:9c:56:45:88:20:
44:6b:65:00
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgISAYzGSoTC2KlFf+JQwYSf4Q4DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTgzMDIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDE0MzY5MDIzMGE0NDBhNjhiN2E4YWE5ODI3OWYyZjY1ZGZlZTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2AKA12Sm2Z3Tgi0W8Ak7YT6+OjX
iy6EE3XWVL2TvCnv6vBNq8uhchrP+JwqTif34tsDVKQUsmcHKLoD0of+ccfU3iRw
br+c9Pb7HInmn6xV/ZqzPHrFDILdcpnDIvwnUHl3cJy5Hw9C5Xrj/KTA2eiSQX7t
6F3n1L6G/72gZs4guEXEF+VDTVCPvrbs/3pVfT87QhdaMeYtrIcsc8AFLJH0k0pn
G0CFG5b0zRCCX3RjupAtQJOmE0URPs10mhOnz2Ms2XT5ORY1FWkZnS5prN0ou4Ms
B71yTjtB+V9g5ydifgLJLD3c45/5xAeykxKmS4Cnp18EgrwUYwsKCO16eQIDAQAB
o4IChzCCAoMwHQYDVR0OBBYEFM0UNpAjCkQKaLeoqpgnny9l3+4oMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ5LzA5NDU2
ZS1hNzFjLTQzYjMtYmQ0MC04ZWUzZDk4Y2FkNWIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDkvMDk0NTZl
LWE3MWMtNDNiMy1iZDQwLThlZTNkOThjYWQ1Yi8xL3pSUTJrQ01LUkFwb3Q2aXFt
Q2VmTDJYZjdpZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA1MMA0GCSqGSIb3DQEBCwUAA4IBAQAQ
UgBzVUpJE1Ye1Fc6fOzJjlcFaU86LnwVoghzj55xg4gnu0VVk44+dH2uTdN91GVQ
+BLvlLJS0iiSk3TvgOseEyPI5Gi/QCnzKf4So4s9GB+aRk4FRqSHyNzSaG9MTfd/
ybl8ucuDAgwHiP1CdXRZv7Mwl4FG490ENVJGpoGLAhCWVfUMv6wcIC2qgYiMnyfo
x1T4E45z3jFotPdaKQJ/a757Y0cOSwIoSGQx6iT4D7q6Gsr4NUtCSDOy8ODwM7D0
B1FysxeQC2seoUYCIfSNo6ySQ7Jut816hyFIh3MVv/m7bOi86uOrDecRjPybRIGe
oqkqepkGnFZFiCBEa2UA
-----END CERTIFICATE-----
Generated at Fri May 3 09:43:26 2024 by rpki-client on console-ams.rpki-client.org