Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer
File: 7KM8lvAqnwvvJc04BqJGfKFlY3s.cer (raw, json)
Hash identifier: c6v7oIQTH0bIUjLYGz8NKTHVpqY0HExU7Oo2VoKfihs=
Subject key identifier: EC:A3:3C:96:F0:2A:9F:0B:EF:25:CD:38:06:A2:46:7C:A1:65:63:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94E5950BB30437CE76A61664BF0D13D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:33:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 199571
IP: 37.9.136.0/21
IP: 185.219.228.0/22
IP: 2a02:e640::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:59:50:bb:30:43:7c:e7:6a:61:66:4b:f0:d1:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:33:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eca33c96f02a9f0bef25cd3806a2467ca165637b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f4:24:cd:17:3b:42:e4:e7:85:d9:76:2b:71:
d9:11:73:48:2c:1f:01:40:57:79:95:73:e1:ca:0d:
5b:69:cc:55:da:aa:56:5a:af:69:0d:82:e3:f2:98:
d7:3f:91:69:40:41:d1:1e:11:7e:a4:f4:68:a8:a2:
2a:f9:39:15:74:d6:16:64:2c:be:75:3a:0b:d7:2b:
ec:b7:b0:d4:f9:0b:8b:47:6b:9a:1d:4d:4e:9b:47:
27:0d:d1:6b:34:31:98:f9:99:c7:bc:86:f2:1c:cf:
5d:db:37:6a:af:bd:12:b5:06:25:40:69:7b:b5:dd:
fd:8b:e6:72:60:d1:98:7e:7c:3b:7c:09:ce:8b:9d:
66:40:0b:72:0a:6d:9f:a6:83:47:75:c1:0e:a2:fe:
6f:f9:6c:34:79:b4:81:e0:1e:18:38:92:f1:b6:7d:
2b:24:bd:bb:b1:5f:28:6f:e9:99:25:85:53:bb:ba:
cf:27:0e:11:e1:d1:ba:8f:a3:1e:47:1e:a1:6c:03:
31:47:aa:47:89:58:0f:4e:a3:27:e3:56:da:38:8b:
9b:1d:ca:3a:35:8c:7c:00:26:2f:b4:53:c7:b2:69:
3b:11:46:10:e5:ed:bb:2d:3e:08:fd:b0:17:86:57:
5b:a6:c2:75:8f:f9:cd:1f:c8:0c:20:93:19:18:b9:
c2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A3:3C:96:F0:2A:9F:0B:EF:25:CD:38:06:A2:46:7C:A1:65:63:7B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.9.136.0/21
185.219.228.0/22
IPv6:
2a02:e640::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199571
Signature Algorithm: sha256WithRSAEncryption
72:86:30:52:c1:58:94:8b:ff:25:df:71:fc:2d:dc:e5:30:73:
10:6e:82:ec:d9:ed:98:6c:cb:3a:24:c5:e4:24:75:e4:41:30:
e0:13:27:86:f1:7c:5f:c4:06:7d:a5:18:03:43:da:86:e0:e0:
6a:11:f7:9f:ad:49:23:f0:e9:01:89:35:a9:9d:c3:f7:c8:59:
cb:25:d8:6c:8c:59:d5:e4:a1:6b:6a:60:c6:34:26:bc:43:f4:
5f:0f:ea:14:3c:9d:ec:ec:ce:31:39:1b:20:1d:49:93:9b:ce:
5a:9b:b8:05:31:82:76:a5:9c:7f:3d:41:a3:79:b2:ac:cc:89:
be:b3:28:03:43:9d:6d:3c:7f:af:2f:80:48:fc:20:20:eb:d0:
2c:db:19:f6:ad:5c:3e:4d:35:fc:0b:63:6b:e5:8d:36:e7:27:
b6:d4:8c:fe:1e:32:de:89:71:f7:c6:2b:ae:21:c9:6d:56:91:
4e:be:ee:a6:8c:92:f2:4d:cc:ce:6e:30:c9:69:ea:59:0b:ed:
ae:9d:10:e7:6a:29:92:09:52:ee:df:18:f8:37:05:9c:05:f4:
1b:4f:63:5d:5f:32:c7:a4:95:73:5a:5b:a6:7e:fc:88:11:b3:
31:e9:22:ce:35:75:cb:46:90:6b:12:81:40:53:3a:f6:9a:93:
40:f6:b4:56
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAYzJTllQuzBDfOdqYWZL8NE9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDgzMzI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlY2EzM2M5NmYwMmE5ZjBiZWYyNWNkMzgwNmEyNDY3Y2ExNjU2MzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPQkzRc7QuTnhdl2K3HZEXNILB8B
QFd5lXPhyg1bacxV2qpWWq9pDYLj8pjXP5FpQEHRHhF+pPRoqKIq+TkVdNYWZCy+
dToL1yvst7DU+QuLR2uaHU1Om0cnDdFrNDGY+ZnHvIbyHM9d2zdqr70StQYlQGl7
td39i+ZyYNGYfnw7fAnOi51mQAtyCm2fpoNHdcEOov5v+Ww0ebSB4B4YOJLxtn0r
JL27sV8ob+mZJYVTu7rPJw4R4dG6j6MeRx6hbAMxR6pHiVgPTqMn41baOIubHco6
NYx8ACYvtFPHsmk7EUYQ5e27LT4I/bAXhldbpsJ1j/nNH8gMIJMZGLnCywIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFOyjPJbwKp8L7yXNOAaiRnyhZWN7MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE2LzQ5YWU0
Mi0wZTlhLTRlMjQtYmExNS0yNWVmMjk5MGYxNjYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvNDlhZTQy
LTBlOWEtNGUyNC1iYTE1LTI1ZWYyOTkwZjE2Ni8xLzdLTThsdkFxbnd2dkpjMDRC
cUpHZktGbFkzcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQDJQmIAwQCudvkMA0EAgACMAcDBQMqAuZAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMLkzANBgkqhkiG9w0BAQsFAAOCAQEAcoYw
UsFYlIv/Jd9x/C3c5TBzEG6C7NntmGzLOiTF5CR15EEw4BMnhvF8X8QGfaUYA0Pa
huDgahH3n61JI/DpAYk1qZ3D98hZyyXYbIxZ1eSha2pgxjQmvEP0Xw/qFDyd7OzO
MTkbIB1Jk5vOWpu4BTGCdqWcfz1Bo3myrMyJvrMoA0OdbTx/ry+ASPwgIOvQLNsZ
9q1cPk01/Atja+WNNucnttSM/h4y3olx98YrriHJbVaRTr7upoyS8k3Mzm4wyWnq
WQvtrp0Q52opkglS7t8Y+DcFnAX0G09jXV8yx6SVc1pbpn78iBGzMekizjV1y0aQ
axKBQFM69pqTQPa0Vg==
-----END CERTIFICATE-----
Generated at Thu Apr 25 23:10:38 2024 by rpki-client on console-fra.rpki-client.org