Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer
File: Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer (raw, json)
Hash identifier: dO4milPGRTyjrqfTRgln6dDR7C0S4ych2ec1dmEBx3M=
Subject key identifier: 12:8F:DE:2B:FC:63:EF:E3:D1:32:DD:AC:78:37:E1:5C:7F:4B:49:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DE39C1625C8049120806BA5C40B698
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:30:56 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.84.248.0/23
IP: 193.105.244.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 14:36:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:39:c1:62:5c:80:49:12:08:06:ba:5c:40:b6:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:30:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=128fde2bfc63efe3d132ddac7837e15c7f4b49f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:55:67:e8:f5:bc:d6:a2:81:28:66:98:1f:3b:
f0:82:0b:81:0b:43:0a:2c:22:16:05:10:1b:76:31:
73:9a:04:11:f0:a8:27:5a:e4:58:88:5f:11:5a:ae:
86:24:ee:bd:ff:fc:91:c6:59:4e:fb:0c:91:79:41:
94:93:ff:b3:33:de:87:a1:dc:f7:32:f1:b6:9b:45:
ed:7b:0d:47:53:bf:91:89:e7:25:7c:fb:99:78:e9:
39:55:7a:03:09:ba:18:19:de:f7:95:92:86:7e:0d:
7d:62:1a:73:cb:8c:65:5e:7b:1c:ca:35:cf:04:26:
ec:19:37:a6:c8:12:ce:70:f3:4b:7b:6d:26:77:55:
7f:68:ee:b3:e8:96:96:3e:07:84:02:f5:0b:e4:30:
d0:fb:3d:26:ff:00:f2:60:27:dd:49:93:55:08:aa:
8f:5a:12:95:f2:59:80:3e:a9:34:5f:35:f4:6a:7f:
9c:b9:ea:ef:5c:dc:61:e2:7c:3e:54:db:77:a0:54:
37:42:99:a8:e2:9c:d7:ad:28:03:70:a1:d5:44:9b:
48:37:46:f0:7d:e3:b6:aa:f4:19:51:ea:78:38:54:
7b:9f:6e:31:30:f6:02:d3:ac:81:d6:3c:8e:9c:73:
57:be:c7:64:39:f5:65:df:28:36:b5:a0:fb:42:2f:
a5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:8F:DE:2B:FC:63:EF:E3:D1:32:DD:AC:78:37:E1:5C:7F:4B:49:F4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.248.0/23
193.105.244.0/23
Signature Algorithm: sha256WithRSAEncryption
38:cb:91:3f:0e:00:79:64:41:26:60:d3:83:84:0a:83:86:17:
dd:37:cb:f3:48:d4:4b:51:04:e7:f1:13:06:b8:3c:8b:fb:4b:
07:cb:88:e0:30:5f:a4:3b:61:31:db:cf:3c:27:60:f3:2f:e8:
8c:f2:0d:2f:32:00:c3:8f:88:b7:40:09:53:cf:5d:4e:a4:f0:
0b:e7:12:c7:2e:1d:5b:16:5f:64:a7:41:5e:b4:90:71:cc:f4:
0b:49:9e:96:b1:d3:28:bc:24:a2:74:71:74:c8:db:80:87:22:
6b:bd:c3:c8:5c:1f:42:b9:89:23:a0:18:0d:3f:97:18:82:33:
f6:55:05:93:9f:bb:86:5c:62:54:25:b6:6c:19:8c:25:ae:a6:
db:a8:a1:94:1e:f6:0c:55:fb:13:72:ae:b0:64:23:4f:9c:c4:
a9:f4:61:1a:1b:f9:ee:b8:cb:4c:fb:cf:1e:7a:af:e4:59:60:
50:6f:74:a6:22:7f:4e:7d:2e:6c:60:2b:62:a9:85:c6:46:d8:
cb:3f:22:4d:a6:cb:21:d2:20:36:f2:21:d5:c7:39:5e:2e:f7:
c5:48:59:8b:18:c4:22:a4:67:b4:4e:51:ac:f8:cf:3f:bc:86:
59:09:d0:cc:b2:c2:d2:2f:d3:90:26:24:86:92:ff:96:34:c6:
d2:93:ad:19
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgISAYzI3jnBYlyASRIIBrpcQLaYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDYzMDU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjhmZGUyYmZjNjNlZmUzZDEzMmRkYWM3ODM3ZTE1YzdmNGI0OWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFVn6PW81qKBKGaYHzvwgguBC0MK
LCIWBRAbdjFzmgQR8KgnWuRYiF8RWq6GJO69//yRxllO+wyReUGUk/+zM96Hodz3
MvG2m0Xtew1HU7+RieclfPuZeOk5VXoDCboYGd73lZKGfg19Yhpzy4xlXnscyjXP
BCbsGTemyBLOcPNLe20md1V/aO6z6JaWPgeEAvUL5DDQ+z0m/wDyYCfdSZNVCKqP
WhKV8lmAPqk0XzX0an+cuervXNxh4nw+VNt3oFQ3Qpmo4pzXrSgDcKHVRJtIN0bw
feO2qvQZUep4OFR7n24xMPYC06yB1jyOnHNXvsdkOfVl3yg2taD7Qi+lawIDAQAB
o4ICijCCAoYwHQYDVR0OBBYEFBKP3iv8Y+/j0TLdrHg34Vx/S0n0MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUzL2E5Zjgx
ZS03OWIyLTRjMmUtOWYzZS03YzI0ZWYwMjU5ZGIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTMvYTlmODFl
LTc5YjItNGMyZS05ZjNlLTdjMjRlZjAyNTlkYi8xL0VvX2VLX3hqNy1QUk10MnNl
RGZoWEg5TFNmUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQBwVT4AwQBwWn0MA0GCSqGSIb3DQEBCwUAA4IB
AQA4y5E/DgB5ZEEmYNODhAqDhhfdN8vzSNRLUQTn8RMGuDyL+0sHy4jgMF+kO2Ex
2888J2DzL+iM8g0vMgDDj4i3QAlTz11OpPAL5xLHLh1bFl9kp0FetJBxzPQLSZ6W
sdMovCSidHF0yNuAhyJrvcPIXB9CuYkjoBgNP5cYgjP2VQWTn7uGXGJUJbZsGYwl
rqbbqKGUHvYMVfsTcq6wZCNPnMSp9GEaG/nuuMtM+88eeq/kWWBQb3SmIn9OfS5s
YCtiqYXGRtjLPyJNpssh0iA28iHVxzleLvfFSFmLGMQipGe0TlGs+M8/vIZZCdDM
ssLSL9OQJiSGkv+WNMbSk60Z
-----END CERTIFICATE-----
Generated at Mon Jun 3 20:26:45 2024 by rpki-client on console-fra.rpki-client.org