Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50eFUAaL94IgQIwl1hK8L7AkYME.cer
File: 50eFUAaL94IgQIwl1hK8L7AkYME.cer (raw, json)
Hash identifier: nJRjRoo9XP+tOVdHzoAoKYxn3DAgRoqDX23fn+WdpkI=
Subject key identifier: E7:47:85:50:06:8B:F7:82:20:40:8C:25:D6:12:BC:2F:B0:24:60:C1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F15A4F1F500613BEF786B17FD4CB92CA2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 25 Apr 2024 14:24:42 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 16253
IP: 217.142.0.0/20
IP: 2a03:f0c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:15:a4:f1:f5:00:61:3b:ef:78:6b:17:fd:4c:b9:2c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 25 14:24:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e7478550068bf78220408c25d612bc2fb02460c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:18:18:18:7c:d7:55:df:24:fc:42:87:57:d8:
a4:1b:31:16:b0:4e:36:7a:95:9d:52:9d:e0:e0:56:
ce:5b:c4:cd:46:e5:68:e5:d3:58:1a:32:98:a0:a7:
65:fa:7a:d8:81:8f:63:4b:cc:d3:7d:d5:a7:4c:fa:
23:28:aa:91:24:7e:a8:d4:fa:7b:25:04:47:f8:0f:
89:c9:95:b7:0c:23:ab:1b:f7:fd:46:96:54:0d:4e:
d1:2e:1b:2b:6f:25:c8:7f:ba:9c:53:93:d1:6e:5f:
46:62:ea:76:b4:91:65:ae:9c:73:f2:01:2c:6a:f5:
b1:9a:49:dc:bf:6d:86:7b:3f:fb:1f:cd:10:5c:dd:
ef:4d:4d:5c:7d:f0:54:28:33:5d:66:c6:49:dd:ae:
ab:0d:27:bf:41:f2:f3:ee:be:11:b7:c5:44:f9:19:
91:14:86:93:89:01:5b:76:bc:a9:70:d5:2b:51:af:
52:d6:43:7b:25:c2:75:c0:6b:35:01:dd:12:00:c5:
f9:0c:9e:2e:84:52:de:3b:f7:3f:45:df:8d:cd:ff:
dd:03:2e:72:db:7a:01:22:21:a8:5f:a7:3a:05:26:
42:05:22:66:17:fa:6b:94:cc:b5:79:7a:38:d6:7b:
96:06:a4:bc:e4:e2:88:82:d3:6e:66:49:17:84:b8:
df:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:47:85:50:06:8B:F7:82:20:40:8C:25:D6:12:BC:2F:B0:24:60:C1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.142.0.0/20
IPv6:
2a03:f0c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
16253
Signature Algorithm: sha256WithRSAEncryption
14:f1:1e:09:3d:8e:78:0b:63:4f:fb:ec:25:33:6d:9c:80:1e:
52:4b:46:94:82:37:28:df:92:48:41:88:4b:ed:ca:eb:a0:e4:
7c:ce:79:7d:c8:64:4e:7d:38:3c:c6:bf:e2:17:06:47:70:25:
e6:fb:8b:a9:d4:c8:ce:cd:fd:28:a8:fa:4a:43:57:c0:24:36:
84:67:29:a7:fe:ae:73:00:79:60:32:ba:77:df:34:bb:3f:55:
79:23:49:66:9d:c3:c8:19:b4:e9:ff:f1:1b:a6:3c:c2:59:ec:
89:98:c7:dc:7f:ed:ea:3c:54:8a:af:4b:0d:61:63:fb:9b:5c:
35:4d:57:56:23:5a:13:f5:48:8a:78:9b:1e:6f:48:63:6e:1a:
a0:f0:af:49:ef:2c:55:09:ea:3c:9b:08:61:2d:3d:48:be:9c:
2b:53:7d:6c:6f:9c:c7:5a:35:d6:77:6d:aa:22:58:79:68:f4:
23:dd:94:ef:3d:7d:84:ef:27:bd:f7:c7:a8:59:e0:3f:95:55:
01:8f:30:f0:c2:ee:ee:05:09:f7:e6:23:90:be:d2:50:f7:5a:
88:5b:7d:26:75:f3:22:1f:a3:a7:6d:2f:98:ad:81:da:06:52:
44:ed:f3:f4:55:96:9f:8d:e3:b2:81:bd:47:87:83:eb:77:13:
b1:34:54:bf
-----BEGIN CERTIFICATE-----
MIIFojCCBIqgAwIBAgISAY8VpPH1AGE773hrF/1MuSyiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNDI1MTQyNDQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzQ3ODU1MDA2OGJmNzgyMjA0MDhjMjVkNjEyYmMyZmIwMjQ2MGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRgYGHzXVd8k/EKHV9ikGzEWsE42
epWdUp3g4FbOW8TNRuVo5dNYGjKYoKdl+nrYgY9jS8zTfdWnTPojKKqRJH6o1Pp7
JQRH+A+JyZW3DCOrG/f9RpZUDU7RLhsrbyXIf7qcU5PRbl9GYup2tJFlrpxz8gEs
avWxmkncv22Gez/7H80QXN3vTU1cffBUKDNdZsZJ3a6rDSe/QfLz7r4Rt8VE+RmR
FIaTiQFbdrypcNUrUa9S1kN7JcJ1wGs1Ad0SAMX5DJ4uhFLeO/c/Rd+Nzf/dAy5y
23oBIiGoX6c6BSZCBSJmF/prlMy1eXo41nuWBqS85OKIgtNuZkkXhLjfNQIDAQAB
o4ICrjCCAqowHQYDVR0OBBYEFOdHhVAGi/eCIECMJdYSvC+wJGDBMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIyLzYzNTUx
MS03MWYzLTRmNTctOTEzOS03ZGEzY2QyNTNiZjYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjIvNjM1NTEx
LTcxZjMtNGY1Ny05MTM5LTdkYTNjZDI1M2JmNi8xLzUwZUZVQWFMOTRJZ1FJd2wx
aEs4TDdBa1lNRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQE2Y4AMA0EAgACMAcDBQAqA/DAMBkGCCsGAQUF
BwEIAQH/BAowCKAGMAQCAj99MA0GCSqGSIb3DQEBCwUAA4IBAQAU8R4JPY54C2NP
++wlM22cgB5SS0aUgjco35JIQYhL7crroOR8znl9yGROfTg8xr/iFwZHcCXm+4up
1MjOzf0oqPpKQ1fAJDaEZymn/q5zAHlgMrp33zS7P1V5I0lmncPIGbTp//EbpjzC
WeyJmMfcf+3qPFSKr0sNYWP7m1w1TVdWI1oT9UiKeJseb0hjbhqg8K9J7yxVCeo8
mwhhLT1IvpwrU31sb5zHWjXWd22qIlh5aPQj3ZTvPX2E7ye998eoWeA/lVUBjzDw
wu7uBQn35iOQvtJQ91qIW30mdfMiH6OnbS+YrYHaBlJE7fP0VZafjeOygb1Hh4Pr
dxOxNFS/
-----END CERTIFICATE-----
Generated at Wed May 22 23:55:50 2024 by rpki-client on console-fra.rpki-client.org