Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EIPENieVN9T3JtIxDO8UpC8bK4o.cer
File: EIPENieVN9T3JtIxDO8UpC8bK4o.cer (raw, json)
Hash identifier: STqQX3eG8dLWr7w8sNEILImxKUuLulMtp9SDaQjJmMI=
Subject key identifier: 10:83:C4:36:27:95:37:D4:F7:26:D2:31:0C:EF:14:A4:2F:1B:2B:8A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01924CD422C67B10DAC6D3C9118D4FD37184
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 02 Oct 2024 10:43:43 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 39375
IP: 89.161.0.0/17
IP: 185.212.40.0/22
IP: 2a05:3a00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:4c:d4:22:c6:7b:10:da:c6:d3:c9:11:8d:4f:d3:71:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 2 10:43:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1083c436279537d4f726d2310cef14a42f1b2b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2d:17:a4:23:6e:7e:a2:5d:90:04:c4:7f:ab:
28:df:bc:a1:52:e3:c1:e1:1a:e0:27:d4:fb:7a:af:
5a:29:6c:46:6d:e0:ea:33:6e:67:ec:ac:47:36:52:
5f:f8:7f:30:3c:24:65:1a:42:3c:77:c4:e9:c9:ff:
56:4f:d1:b8:a5:d2:79:3e:61:55:17:ab:1b:2f:7a:
8f:3f:3b:3c:c7:2e:e6:e5:d2:43:6d:18:98:25:c4:
c8:59:df:a1:d9:61:7a:59:1e:b2:7e:51:3d:3d:39:
dc:7b:e4:5b:f5:64:e2:4d:2d:ab:39:18:50:c0:08:
3c:94:c2:64:04:49:4b:c4:5d:80:26:b6:4f:c3:33:
0c:cf:a4:70:7f:e7:1a:f9:0c:0d:34:96:64:71:f2:
88:19:c3:d6:b0:0d:87:de:44:a2:c0:de:17:70:9f:
94:65:31:a8:97:22:87:75:3b:de:d1:41:7b:6d:06:
d3:39:b7:b8:f8:73:f2:a8:9b:6a:96:a1:6d:df:06:
89:38:31:32:a3:b7:15:50:42:ef:9d:f6:fb:c4:80:
3d:5c:ce:78:a5:ef:aa:df:c7:93:50:3d:e9:c9:3a:
d8:f9:73:44:9b:d2:f1:bd:60:2e:1d:61:32:9e:4b:
06:6b:c1:77:3e:35:31:fa:da:78:c8:42:c2:1c:8a:
c5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:83:C4:36:27:95:37:D4:F7:26:D2:31:0C:EF:14:A4:2F:1B:2B:8A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.161.0.0/17
185.212.40.0/22
IPv6:
2a05:3a00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39375
Signature Algorithm: sha256WithRSAEncryption
16:08:53:7c:90:b4:d1:3c:fb:e5:27:ee:51:aa:b3:ec:c5:48:
43:0b:13:8d:98:fc:20:c2:5b:4f:b1:f3:bc:51:82:a4:88:10:
9a:44:89:96:dd:75:32:e9:2e:e8:11:72:8a:cf:17:38:ea:a5:
81:70:9c:51:49:4f:65:2b:70:d1:29:c9:d8:e7:57:83:46:6c:
2c:88:4c:5f:98:3d:fa:41:9d:1a:fc:27:f9:64:e9:2c:f0:66:
b3:ba:63:a3:04:07:90:6b:2b:30:54:18:3c:cb:e3:27:6a:c9:
59:46:94:85:ac:99:15:6d:f8:b2:97:e3:55:d3:3e:a0:22:2a:
06:ba:e7:31:a5:c2:68:3b:ff:05:fd:c3:6d:d5:6f:57:c7:23:
6b:f4:85:93:e9:8c:e4:28:d0:e4:8b:88:20:09:88:48:29:34:
b4:f6:07:6b:88:a3:3c:d6:fa:01:92:97:61:c0:83:9d:da:b8:
eb:27:af:59:2e:d0:bf:15:a2:3c:ce:71:a7:e0:cf:a1:86:8d:
09:21:5b:df:68:1f:80:3f:8e:ab:91:f4:81:b1:81:62:f2:78:
13:c0:49:a8:67:84:34:a7:f3:13:62:5a:79:68:ac:77:9e:42:
ff:f6:ff:43:8d:c7:49:1c:32:fa:20:ac:e5:be:de:03:fe:47:
c0:13:6b:67
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAZJM1CLGexDaxtPJEY1P03GEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQxMDAyMTA0MzQzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDgzYzQzNjI3OTUzN2Q0ZjcyNmQyMzEwY2VmMTRhNDJmMWIyYjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlC0XpCNufqJdkATEf6so37yhUuPB
4RrgJ9T7eq9aKWxGbeDqM25n7KxHNlJf+H8wPCRlGkI8d8Tpyf9WT9G4pdJ5PmFV
F6sbL3qPPzs8xy7m5dJDbRiYJcTIWd+h2WF6WR6yflE9PTnce+Rb9WTiTS2rORhQ
wAg8lMJkBElLxF2AJrZPwzMMz6Rwf+ca+QwNNJZkcfKIGcPWsA2H3kSiwN4XcJ+U
ZTGolyKHdTve0UF7bQbTObe4+HPyqJtqlqFt3waJODEyo7cVUELvnfb7xIA9XM54
pe+q38eTUD3pyTrY+XNEm9LxvWAuHWEynksGa8F3PjUx+tp4yELCHIrFowIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFBCDxDYnlTfU9ybSMQzvFKQvGyuKMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI5LzA5MTQ3
My00ZDhiLTRiYzktYTkxMi04MTIyNDhiNjUzNzAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjkvMDkxNDcz
LTRkOGItNGJjOS1hOTEyLTgxMjI0OGI2NTM3MC8xL0VJUEVOaWVWTjlUM0p0SXhE
TzhVcEM4Yks0by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQHWaEAAwQCudQoMA0EAgACMAcDBQMqBToAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCZzzANBgkqhkiG9w0BAQsFAAOCAQEAFghT
fJC00Tz75SfuUaqz7MVIQwsTjZj8IMJbT7HzvFGCpIgQmkSJlt11Muku6BFyis8X
OOqlgXCcUUlPZStw0SnJ2OdXg0ZsLIhMX5g9+kGdGvwn+WTpLPBms7pjowQHkGsr
MFQYPMvjJ2rJWUaUhayZFW34spfjVdM+oCIqBrrnMaXCaDv/Bf3DbdVvV8cja/SF
k+mM5CjQ5IuIIAmISCk0tPYHa4ijPNb6AZKXYcCDndq46yevWS7QvxWiPM5xp+DP
oYaNCSFb32gfgD+Oq5H0gbGBYvJ4E8BJqGeENKfzE2JaeWisd55C//b/Q43HSRwy
+iCs5b7eA/5HwBNrZw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:47:05 2024 by rpki-client on console-ams.rpki-client.org