Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xoW9hw_VDCBaQKM9TI1EzRCIRp8.cer
File: xoW9hw_VDCBaQKM9TI1EzRCIRp8.cer (raw, json)
Hash identifier: OKPt9vNfirJ1FMcaFeXOTX9LsRvbmVVwDqR+Nu8wzic=
Subject key identifier: C6:85:BD:87:0F:D5:0C:20:5A:40:A3:3D:4C:8D:44:CD:10:88:46:9F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01901EB3AF27916F4CCCBEB78F02E33EFFF7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/482bfa-386f-43f8-adc2-1867f824f839/1/xoW9hw_VDCBaQKM9TI1EzRCIRp8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/482bfa-386f-43f8-adc2-1867f824f839/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 16 Jun 2024 01:40:10 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210254
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Jun 2024 18:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:b3:af:27:91:6f:4c:cc:be:b7:8f:02:e3:3e:ff:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 16 01:40:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c685bd870fd50c205a40a33d4c8d44cd1088469f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:f3:d5:4a:05:b3:6f:57:52:7f:36:c0:0d:d1:
28:55:e4:6f:4d:3c:a8:8d:c9:8b:ab:2a:13:a0:94:
f3:11:0f:e7:2a:84:39:45:14:3b:fb:09:ce:0b:0e:
ba:dd:c6:2b:20:1d:05:b5:7d:bf:84:86:83:6d:d1:
49:cd:f6:f9:8f:e0:99:a9:22:2a:9b:37:0d:d8:98:
10:fa:ee:64:82:de:63:01:df:8b:10:c1:ce:6e:74:
84:64:da:ce:45:9f:79:03:fc:da:fb:75:b6:4a:2b:
e5:26:b2:cc:99:07:56:ea:fc:8a:00:dd:ec:fd:7a:
ba:b6:b5:74:0f:18:29:4f:07:f1:64:f5:37:6a:cc:
61:79:9a:b0:fe:d1:22:b4:87:58:92:2d:a3:72:a8:
05:fd:81:df:94:e1:f7:e2:cb:55:28:5f:21:ea:fe:
50:41:c2:61:eb:89:30:8f:fd:d5:b1:45:3c:fd:fa:
06:45:dc:15:62:d2:f3:4c:fb:bd:41:37:01:bf:b5:
d0:d0:f0:0e:c7:98:09:f3:b1:67:23:3f:9d:a5:64:
65:dc:e6:39:e8:e3:1f:32:eb:71:f0:82:95:03:b3:
ea:11:7c:21:6e:f6:b8:6c:46:30:48:f4:38:fe:db:
23:bc:e9:f2:33:b9:c9:37:21:0b:2f:4d:fc:7b:d7:
a4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:85:BD:87:0F:D5:0C:20:5A:40:A3:3D:4C:8D:44:CD:10:88:46:9F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/482bfa-386f-43f8-adc2-1867f824f839/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/482bfa-386f-43f8-adc2-1867f824f839/1/xoW9hw_VDCBaQKM9TI1EzRCIRp8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210254
Signature Algorithm: sha256WithRSAEncryption
29:40:89:d0:0e:32:19:07:09:16:39:ba:b0:46:55:52:70:24:
e2:ac:1a:6a:34:c9:ca:fe:2f:9c:f8:38:1d:87:7c:a2:f1:e0:
ef:53:66:e2:01:da:31:f4:90:15:7c:ab:66:a6:78:72:a0:d1:
33:ee:41:98:88:9f:48:4a:c9:e7:fc:0e:14:f0:9c:e5:f9:6f:
de:06:01:53:1b:c8:ac:10:31:9a:58:3a:49:f1:59:c8:79:9a:
d5:af:a8:c1:61:6d:d3:70:56:86:bd:cb:0e:ae:3f:0c:81:fb:
9d:19:40:64:04:2a:60:3e:89:08:11:b5:b4:d3:ee:7a:bd:87:
62:58:dc:49:07:b2:68:9d:43:05:1f:7d:7d:23:8a:55:1a:e5:
e1:f4:45:67:ff:a4:83:ba:4c:d9:d5:3a:d0:c9:22:9c:33:c7:
2f:87:2a:2e:b8:25:92:6c:19:bf:1d:de:9f:60:33:4f:ec:3a:
42:87:50:11:a3:5c:8a:7c:63:18:b2:c0:92:f3:1f:35:4f:a0:
f2:d6:ee:18:e2:57:ba:90:ae:1d:bb:8c:ba:e8:8b:ad:0c:c7:
23:ff:ee:ef:eb:3c:27:9f:fa:65:49:93:81:1b:dc:68:af:9c:
e0:59:97:52:46:3f:6e:92:0b:69:22:ac:76:db:c2:a8:12:20:
d8:9a:ba:6a
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZAes68nkW9MzL63jwLjPv/3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNjE2MDE0MDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjg1YmQ4NzBmZDUwYzIwNWE0MGEzM2Q0YzhkNDRjZDEwODg0NjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8vPVSgWzb1dSfzbADdEoVeRvTTyo
jcmLqyoToJTzEQ/nKoQ5RRQ7+wnOCw663cYrIB0FtX2/hIaDbdFJzfb5j+CZqSIq
mzcN2JgQ+u5kgt5jAd+LEMHObnSEZNrORZ95A/za+3W2SivlJrLMmQdW6vyKAN3s
/Xq6trV0DxgpTwfxZPU3asxheZqw/tEitIdYki2jcqgF/YHflOH34stVKF8h6v5Q
QcJh64kwj/3VsUU8/foGRdwVYtLzTPu9QTcBv7XQ0PAOx5gJ87FnIz+dpWRl3OY5
6OMfMutx8IKVA7PqEXwhbva4bEYwSPQ4/tsjvOnyM7nJNyELL038e9ek2wIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFMaFvYcP1QwgWkCjPUyNRM0QiEafMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc3LzQ4MmJm
YS0zODZmLTQzZjgtYWRjMi0xODY3ZjgyNGY4MzkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcvNDgyYmZh
LTM4NmYtNDNmOC1hZGMyLTE4NjdmODI0ZjgzOS8xL3hvVzlod19WRENCYVFLTTlU
STFFelJDSVJwOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM1TjANBgkqhkiG9w0BAQsFAAOCAQEAKUCJ0A4yGQcJ
Fjm6sEZVUnAk4qwaajTJyv4vnPg4HYd8ovHg71Nm4gHaMfSQFXyrZqZ4cqDRM+5B
mIifSErJ5/wOFPCc5flv3gYBUxvIrBAxmlg6SfFZyHma1a+owWFt03BWhr3LDq4/
DIH7nRlAZAQqYD6JCBG1tNPuer2HYljcSQeyaJ1DBR99fSOKVRrl4fRFZ/+kg7pM
2dU60MkinDPHL4cqLrglkmwZvx3en2AzT+w6QodQEaNcinxjGLLAkvMfNU+g8tbu
GOJXupCuHbuMuuiLrQzHI//u7+s8J5/6ZUmTgRvcaK+c4FmXUkY/bpILaSKsdtvC
qBIg2Jq6ag==
-----END CERTIFICATE-----
Generated at Thu Jun 20 04:18:35 2024 by rpki-client on console.sobornost.net