Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7gWBdnr0V55E2pd7EILZSzx7kpg.cer
File: 7gWBdnr0V55E2pd7EILZSzx7kpg.cer (raw, json)
Hash identifier: yQyEDndhlzBB5ex1d6VSNKXlkQDytrfjLRX1DN7wXk4=
Subject key identifier: EE:05:81:76:7A:F4:57:9E:44:DA:97:7B:10:82:D9:4B:3C:7B:92:98
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC349188EEAC4EC909C69561B372F6B9E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cf/0b8f11-a011-4764-bcf3-6dbba2b1dca7/1/7gWBdnr0V55E2pd7EILZSzx7kpg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cf/0b8f11-a011-4764-bcf3-6dbba2b1dca7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:56 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.105.119.0/24
IP: 195.85.224.0/24
IP: 2001:678:39c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:18:8e:ea:c4:ec:90:9c:69:56:1b:37:2f:6b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee0581767af4579e44da977b1082d94b3c7b9298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:09:fd:5b:55:10:80:93:ee:7b:1c:51:5a:cd:
a0:c7:ba:89:e9:45:3a:4f:20:8f:33:df:c7:ea:ff:
df:00:9c:00:c8:26:6c:7a:9e:59:72:b0:88:db:87:
de:99:82:ad:39:d1:82:02:78:b7:76:5d:b0:7c:74:
3a:93:3e:2c:4c:57:24:65:60:23:95:42:70:b4:e3:
f3:c2:20:79:c4:4c:3a:5c:ef:d9:2a:33:81:b1:e8:
1b:c2:91:04:a7:e9:85:29:a9:21:3f:8c:13:e5:78:
b1:b4:24:33:7b:12:df:1c:ce:e0:b6:04:7c:27:1f:
cd:56:6a:bb:b9:ca:ca:17:37:b7:36:75:ed:6d:ff:
c3:7d:53:8e:c4:5c:20:1b:81:56:7b:72:3a:ee:5a:
d9:e1:37:fa:79:d4:17:76:85:4f:36:1f:4a:6a:6b:
77:1d:68:00:54:23:04:21:57:3a:08:e8:5f:28:ee:
8f:b8:a8:13:f0:70:89:d6:42:24:42:d3:be:12:f0:
1c:5c:e8:b2:14:b3:a9:0a:f3:0f:94:05:09:14:6a:
e3:2e:f4:18:03:85:43:db:c5:f9:6c:0a:43:85:ff:
f1:3d:e6:bb:97:a9:73:cf:6d:8a:18:48:45:04:11:
92:4e:0c:f8:ab:e0:93:f9:95:f4:0a:80:1d:5f:64:
5c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:05:81:76:7A:F4:57:9E:44:DA:97:7B:10:82:D9:4B:3C:7B:92:98
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0b8f11-a011-4764-bcf3-6dbba2b1dca7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0b8f11-a011-4764-bcf3-6dbba2b1dca7/1/7gWBdnr0V55E2pd7EILZSzx7kpg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.119.0/24
195.85.224.0/24
IPv6:
2001:678:39c::/48
Signature Algorithm: sha256WithRSAEncryption
84:17:8d:87:4f:e8:86:f4:15:91:84:74:59:3e:d1:ff:07:c4:
30:59:6b:53:cf:31:cb:10:1d:ab:50:b9:4d:51:f5:11:2e:da:
58:5d:f5:c9:e6:5d:72:77:92:12:7f:b8:dc:d6:80:1b:60:c3:
5b:99:ce:ad:53:27:d8:13:5d:16:a0:f0:fe:cc:7b:50:b5:d0:
ff:01:ef:bb:76:51:28:11:41:1f:0d:ea:4e:e1:ae:21:e5:b1:
aa:23:83:87:57:a9:b7:70:59:ba:29:ce:8c:aa:57:7d:ad:f5:
6a:41:88:82:9b:bf:89:8a:89:d9:72:0b:75:dd:e9:b7:38:b0:
94:29:88:51:81:78:53:df:67:25:12:61:0d:f4:7f:62:b3:6f:
93:28:1e:71:58:5a:9d:f1:4b:16:08:cb:6d:6c:17:bf:90:07:
c6:2d:e2:59:1d:5f:24:8a:85:6c:1c:dc:6c:8e:38:02:04:51:
de:3b:13:32:16:a2:98:a6:c2:04:f1:72:a4:ef:cf:12:38:40:
05:3b:4e:db:a1:b8:0d:6c:74:96:b6:bf:29:09:53:39:0e:26:
70:0a:83:b7:ed:6e:cf:b4:60:6f:b4:f4:12:c8:d7:18:99:5b:
ad:3a:1b:0e:ce:b8:24:e2:92:c4:9d:c3:9d:93:86:17:65:3e:
a6:04:7b:50
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgISAYzDSRiO6sTskJxpVhs3L2ueMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDQyOTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTA1ODE3NjdhZjQ1NzllNDRkYTk3N2IxMDgyZDk0YjNjN2I5Mjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQn9W1UQgJPuexxRWs2gx7qJ6UU6
TyCPM9/H6v/fAJwAyCZsep5ZcrCI24femYKtOdGCAni3dl2wfHQ6kz4sTFckZWAj
lUJwtOPzwiB5xEw6XO/ZKjOBsegbwpEEp+mFKakhP4wT5XixtCQzexLfHM7gtgR8
Jx/NVmq7ucrKFze3NnXtbf/DfVOOxFwgG4FWe3I67lrZ4Tf6edQXdoVPNh9Kamt3
HWgAVCMEIVc6COhfKO6PuKgT8HCJ1kIkQtO+EvAcXOiyFLOpCvMPlAUJFGrjLvQY
A4VD28X5bApDhf/xPea7l6lzz22KGEhFBBGSTgz4q+CT+ZX0CoAdX2RcXwIDAQAB
o4ICmzCCApcwHQYDVR0OBBYEFO4FgXZ69FeeRNqXexCC2Us8e5KYMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NmLzBiOGYx
MS1hMDExLTQ3NjQtYmNmMy02ZGJiYTJiMWRjYTcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2YvMGI4ZjEx
LWEwMTEtNDc2NC1iY2YzLTZkYmJhMmIxZGNhNy8xLzdnV0JkbnIwVjU1RTJwZDdF
SUxaU3p4N2twZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUF
BwEHAQH/BCcwJTASBAIAATAMAwQAwWl3AwQAw1XgMA8EAgACMAkDBwAgAQZ4A5ww
DQYJKoZIhvcNAQELBQADggEBAIQXjYdP6Ib0FZGEdFk+0f8HxDBZa1PPMcsQHatQ
uU1R9REu2lhd9cnmXXJ3khJ/uNzWgBtgw1uZzq1TJ9gTXRag8P7Me1C10P8B77t2
USgRQR8N6k7hriHlsaojg4dXqbdwWbopzoyqV32t9WpBiIKbv4mKidlyC3Xd6bc4
sJQpiFGBeFPfZyUSYQ30f2Kzb5MoHnFYWp3xSxYIy21sF7+QB8Yt4lkdXySKhWwc
3GyOOAIEUd47EzIWopimwgTxcqTvzxI4QAU7TtuhuA1sdJa2vykJUzkOJnAKg7ft
bs+0YG+09BLI1xiZW606Gw7OuCTiksSdw52ThhdlPqYEe1A=
-----END CERTIFICATE-----
Generated at Tue Nov 26 03:01:27 2024 by rpki-client on console-fra.rpki-client.org