Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/E3W0CTjYfNMycmqqSBqnGubphxc.cer
File: E3W0CTjYfNMycmqqSBqnGubphxc.cer (raw, json)
Hash identifier: bw7Ap40tSrkCVsQqnbv7cgH7O2yN/4cSkpduGP2jla8=
Subject key identifier: 13:75:B4:09:38:D8:7C:D3:32:72:6A:AA:48:1A:A7:1A:E6:E9:87:17
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC726BE5F6628BAC08FB27E5673C31F9A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/E3W0CTjYfNMycmqqSBqnGubphxc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:30:54 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.113.62.0/23
IP: 194.113.68.0/23
IP: 2a0f:3a40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:be:5f:66:28:ba:c0:8f:b2:7e:56:73:c3:1f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1375b40938d87cd332726aaa481aa71ae6e98717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2c:41:d5:01:9c:7b:ab:52:2c:70:95:9e:51:
21:f8:e6:74:7c:4c:11:be:0c:0b:7c:19:d3:f9:e3:
a6:66:01:37:6a:9a:30:1a:9d:9e:3b:31:42:9a:c3:
16:65:43:20:cc:a3:26:62:c5:ef:63:f3:f7:d3:12:
88:54:49:a8:ff:1a:03:34:75:02:21:ee:c4:26:bc:
03:15:6a:a5:de:29:57:d3:68:33:bb:01:a1:93:06:
5b:61:be:73:f7:64:7b:40:bf:98:62:79:86:c0:b2:
92:16:f7:9a:6c:86:7a:ec:5f:71:2f:0f:7c:84:1c:
19:4d:50:20:7e:67:25:3d:e5:0f:5d:c2:85:20:5e:
fa:fd:00:42:2a:f7:e0:ef:70:7d:84:44:f7:33:16:
0e:fa:14:15:01:0b:37:87:78:4d:99:65:78:a8:f1:
a4:d6:c9:02:b9:71:8b:11:51:33:05:71:2c:ad:9f:
4f:49:c7:17:2b:ea:90:74:17:c7:6d:e7:a9:e9:25:
fd:0c:9b:16:c5:dd:06:a5:27:4c:00:4e:62:92:c0:
7e:e6:bd:ec:63:7f:ff:b5:d9:ad:24:55:82:12:b1:
c1:66:41:29:4b:9f:a9:cd:60:84:b5:ec:19:28:a3:
8f:57:62:e0:2a:e9:68:27:15:77:aa:67:d1:75:9d:
83:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:75:B4:09:38:D8:7C:D3:32:72:6A:AA:48:1A:A7:1A:E6:E9:87:17
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/E3W0CTjYfNMycmqqSBqnGubphxc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.62.0/23
194.113.68.0/23
IPv6:
2a0f:3a40::/29
Signature Algorithm: sha256WithRSAEncryption
5f:01:88:30:2b:54:a6:19:c8:1f:db:6c:da:bf:46:ba:07:c9:
23:e2:13:cc:f8:59:84:34:e5:69:a5:be:f6:91:4e:ad:96:66:
56:68:0a:a7:b6:ae:27:15:31:9d:be:55:88:3b:32:66:49:74:
ce:79:63:ff:66:77:a9:4a:d9:ec:f0:39:bd:b0:c1:b4:8d:16:
ac:0c:5d:ac:7a:dd:bd:26:09:96:d1:a2:bf:39:04:7b:70:80:
fa:86:71:bc:b5:e1:72:31:85:94:7d:e4:40:b8:1c:f8:d5:27:
6c:3a:a9:5d:65:5b:04:f3:3f:ce:b3:32:e4:68:ba:8e:09:95:
66:0e:e0:ce:ef:ce:bb:bb:c2:c1:78:a7:a0:d3:2c:15:8e:01:
dc:b9:3d:d5:27:93:51:bb:4d:cb:af:c2:59:9f:61:c9:00:be:
be:38:4d:82:5a:e8:c2:49:c2:e6:16:91:49:e7:ab:b2:14:7f:
eb:76:c2:b8:2d:32:9a:7e:13:38:ed:bd:f4:7a:d0:de:3b:76:
88:61:7a:85:f2:45:60:95:a6:16:49:1a:94:45:b0:30:f5:ca:
20:b9:c2:8e:8d:30:44:0b:8e:c0:66:68:3e:a5:2c:69:d3:7f:
f0:cb:59:f3:f4:19:f3:e2:37:50:9f:4e:29:09:88:a0:8b:68:
c7:8b:6f:a5
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgISAYzHJr5fZii6wI+yflZzwx+aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMjIzMDU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzc1YjQwOTM4ZDg3Y2QzMzI3MjZhYWE0ODFhYTcxYWU2ZTk4NzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yxB1QGce6tSLHCVnlEh+OZ0fEwR
vgwLfBnT+eOmZgE3apowGp2eOzFCmsMWZUMgzKMmYsXvY/P30xKIVEmo/xoDNHUC
Ie7EJrwDFWql3ilX02gzuwGhkwZbYb5z92R7QL+YYnmGwLKSFveabIZ67F9xLw98
hBwZTVAgfmclPeUPXcKFIF76/QBCKvfg73B9hET3MxYO+hQVAQs3h3hNmWV4qPGk
1skCuXGLEVEzBXEsrZ9PSccXK+qQdBfHbeep6SX9DJsWxd0GpSdMAE5iksB+5r3s
Y3//tdmtJFWCErHBZkEpS5+pzWCEtewZKKOPV2LgKuloJxV3qmfRdZ2DtQIDAQAB
o4ICmTCCApUwHQYDVR0OBBYEFBN1tAk42HzTMnJqqkgapxrm6YcXMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUwL2Y5YWUx
YS04ZTUyLTQ4ZDMtYTU4ZC1hMjUwZGExM2Q2OGEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAvZjlhZTFh
LThlNTItNDhkMy1hNThkLWEyNTBkYTEzZDY4YS8xL0UzVzBDVGpZZk5NeWNtcXFT
QnFuR3VicGh4Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQBwnE+AwQBwnFEMA0EAgACMAcDBQMqDzpAMA0G
CSqGSIb3DQEBCwUAA4IBAQBfAYgwK1SmGcgf22zav0a6B8kj4hPM+FmENOVppb72
kU6tlmZWaAqntq4nFTGdvlWIOzJmSXTOeWP/ZnepStns8Dm9sMG0jRasDF2set29
JgmW0aK/OQR7cID6hnG8teFyMYWUfeRAuBz41SdsOqldZVsE8z/OszLkaLqOCZVm
DuDO7867u8LBeKeg0ywVjgHcuT3VJ5NRu03Lr8JZn2HJAL6+OE2CWujCScLmFpFJ
56uyFH/rdsK4LTKafhM47b30etDeO3aIYXqF8kVglaYWSRqURbAw9cogucKOjTBE
C47AZmg+pSxp03/wy1nz9Bnz4jdQn04pCYigi2jHi2+l
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:05:38 2024 by rpki-client on console-fra.rpki-client.org