Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79JQ80H_zDYTtZnqluDRnC5v41A.cer
File: 79JQ80H_zDYTtZnqluDRnC5v41A.cer (raw, json)
Hash identifier: FEnLC7zaTcsFN7ACDOeTX0ODvGgGWXTjwddugX/p9io=
Subject key identifier: EF:D2:50:F3:41:FF:CC:36:13:B5:99:EA:96:E0:D1:9C:2E:6F:E3:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DAC2EE5F337A3421EE3A5C529CBD3E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/11df3c-c42a-49cc-956b-2a72176d0abf/1/79JQ80H_zDYTtZnqluDRnC5v41A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/11df3c-c42a-49cc-956b-2a72176d0abf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 13054
IP: 213.164.64.0/19
IP: 2a03:3500::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:c2:ee:5f:33:7a:34:21:ee:3a:5c:52:9c:bd:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=efd250f341ffcc3613b599ea96e0d19c2e6fe350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:98:83:87:bf:83:7e:67:f4:4e:6d:10:79:09:
b6:20:e8:d9:a5:ed:96:3b:50:c5:ee:60:34:ce:d1:
b9:62:1e:bf:70:04:ae:07:3d:e8:ed:42:b3:b1:28:
2f:28:63:5c:fc:69:f7:b2:2e:d2:7c:c0:c2:75:af:
bb:64:30:d3:7d:de:49:15:09:0e:d7:55:9b:10:f6:
b1:ad:3c:9f:28:d3:ba:e0:e9:5d:bc:5c:88:19:81:
04:e3:f0:2b:42:9d:5e:ad:21:30:ca:69:96:ef:45:
08:51:c9:30:77:d9:09:48:f9:14:fb:74:55:7d:a1:
13:2b:70:53:42:37:ab:35:ca:3b:15:67:48:42:79:
cf:43:95:69:89:1b:70:6b:e5:2a:fa:e5:19:f3:74:
f6:7f:fb:bb:33:27:ab:55:02:31:5c:7c:5e:0f:03:
c3:52:40:21:d8:e3:70:4f:96:f6:58:88:ef:dd:ad:
bc:ea:9b:86:45:38:46:61:ac:72:45:41:8e:aa:e9:
0d:dd:c0:bf:ad:5b:47:ad:2a:be:01:c5:52:de:b0:
83:e7:d6:e1:1a:1b:7c:56:57:23:3c:6d:01:2c:af:
12:8c:83:85:47:c9:99:c0:f1:e7:fd:80:57:dd:1b:
fd:7f:5f:e6:a1:9c:05:f6:f6:8a:30:d3:c1:b6:92:
13:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D2:50:F3:41:FF:CC:36:13:B5:99:EA:96:E0:D1:9C:2E:6F:E3:50
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11df3c-c42a-49cc-956b-2a72176d0abf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11df3c-c42a-49cc-956b-2a72176d0abf/1/79JQ80H_zDYTtZnqluDRnC5v41A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.164.64.0/19
IPv6:
2a03:3500::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13054
Signature Algorithm: sha256WithRSAEncryption
9f:73:9d:44:17:cc:fe:c9:fb:7a:9a:07:74:f2:28:61:8d:86:
4d:58:3a:e7:cd:d0:c3:13:bb:54:d3:b7:30:04:fe:e4:07:8b:
a3:f0:2e:e4:fe:7b:7a:6d:af:c8:dc:90:27:4c:c4:3f:b7:5d:
d9:2c:07:d0:cd:d7:4b:54:f9:8f:65:c0:16:67:99:bc:8c:ab:
c4:61:39:d2:bd:17:bf:87:d3:49:de:68:8b:8b:03:15:4a:57:
29:d8:e3:e1:91:a1:8a:4d:27:92:c2:14:72:db:8d:6d:69:59:
62:7e:b9:65:1e:6b:a3:cb:21:7a:bb:a8:74:03:75:0c:e6:3d:
57:28:8c:b3:1e:7f:9d:cb:37:57:bc:0f:99:4f:57:57:34:8f:
76:d0:81:f4:d4:f6:4b:88:0f:f5:37:1a:1e:11:3c:f8:5f:f9:
8f:57:02:72:ed:ed:e4:e2:c1:da:ee:73:ca:3a:35:6e:33:06:
c0:27:8d:ef:11:d7:d6:1f:28:75:59:a6:f6:e2:15:8d:7d:52:
89:41:01:97:cf:56:d3:d8:e3:2f:67:e6:f1:c7:84:dc:f8:bb:
8c:36:d3:f1:88:ea:53:31:31:19:e3:2b:47:ff:1e:5c:79:e7:
b8:23:d0:f6:0d:71:8c:8c:67:15:2b:97:4b:56:71:50:1a:f3:
f3:ce:b5:4a
-----BEGIN CERTIFICATE-----
MIIFojCCBIqgAwIBAgISAYzC2sLuXzN6NCHuOlxSnL0+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDIyOTI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZmQyNTBmMzQxZmZjYzM2MTNiNTk5ZWE5NmUwZDE5YzJlNmZlMzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpiDh7+Dfmf0Tm0QeQm2IOjZpe2W
O1DF7mA0ztG5Yh6/cASuBz3o7UKzsSgvKGNc/Gn3si7SfMDCda+7ZDDTfd5JFQkO
11WbEPaxrTyfKNO64OldvFyIGYEE4/ArQp1erSEwymmW70UIUckwd9kJSPkU+3RV
faETK3BTQjerNco7FWdIQnnPQ5VpiRtwa+Uq+uUZ83T2f/u7MyerVQIxXHxeDwPD
UkAh2ONwT5b2WIjv3a286puGRThGYaxyRUGOqukN3cC/rVtHrSq+AcVS3rCD59bh
Ght8VlcjPG0BLK8SjIOFR8mZwPHn/YBX3Rv9f1/moZwF9vaKMNPBtpITIwIDAQAB
o4ICrjCCAqowHQYDVR0OBBYEFO/SUPNB/8w2E7WZ6pbg0Zwub+NQMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M0LzExZGYz
Yy1jNDJhLTQ5Y2MtOTU2Yi0yYTcyMTc2ZDBhYmYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvMTFkZjNj
LWM0MmEtNDljYy05NTZiLTJhNzIxNzZkMGFiZi8xLzc5SlE4MEhfekRZVHRabnFs
dURSbkM1djQxQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQF1aRAMA0EAgACMAcDBQAqAzUAMBkGCCsGAQUF
BwEIAQH/BAowCKAGMAQCAjL+MA0GCSqGSIb3DQEBCwUAA4IBAQCfc51EF8z+yft6
mgd08ihhjYZNWDrnzdDDE7tU07cwBP7kB4uj8C7k/nt6ba/I3JAnTMQ/t13ZLAfQ
zddLVPmPZcAWZ5m8jKvEYTnSvRe/h9NJ3miLiwMVSlcp2OPhkaGKTSeSwhRy241t
aVlifrllHmujyyF6u6h0A3UM5j1XKIyzHn+dyzdXvA+ZT1dXNI920IH01PZLiA/1
NxoeETz4X/mPVwJy7e3k4sHa7nPKOjVuMwbAJ43vEdfWHyh1Wab24hWNfVKJQQGX
z1bT2OMvZ+bxx4Tc+LuMNtPxiOpTMTEZ4ytH/x5ceee4I9D2DXGMjGcVK5dLVnFQ
GvPzzrVK
-----END CERTIFICATE-----
Generated at Thu Apr 25 23:10:32 2024 by rpki-client on console-fra.rpki-client.org