Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EJh-dKTaRf5Z5q73zyeF6gEN4Vs.cer
File: EJh-dKTaRf5Z5q73zyeF6gEN4Vs.cer (raw, json)
Hash identifier: ZgaHCJrCNj3KCNwtA1wqz59J3G9nJ1/y+4h+Hvj4qGY=
Subject key identifier: 10:98:7E:74:A4:DA:45:FE:59:E6:AE:F7:CF:27:85:EA:01:0D:E1:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64AB2F945B6A7EF9C3590B370F96D09
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/599366-b524-456b-bfaa-10f597928806/1/EJh-dKTaRf5Z5q73zyeF6gEN4Vs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/599366-b524-456b-bfaa-10f597928806/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:30:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 50438
IP: 193.58.255.0/24
IP: 2001:67c:18a8::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 14:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:b2:f9:45:b6:a7:ef:9c:35:90:b3:70:f9:6d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=10987e74a4da45fe59e6aef7cf2785ea010de15b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:46:a2:fd:b1:12:3e:d5:9a:37:f7:8b:ca:c1:
f2:2e:ce:a8:38:cb:65:d2:78:8b:8d:fb:ef:aa:b0:
84:7e:28:f5:a3:f1:4d:8b:63:4b:29:5c:7e:33:fb:
3d:7d:de:e6:98:ed:d3:d9:de:86:b5:a0:2a:c4:bb:
cb:5a:b8:5a:55:90:e1:13:bf:53:02:86:22:c3:9c:
9c:63:89:0f:c3:df:3f:9b:ba:97:f4:74:6a:de:94:
8d:9b:03:33:bc:a4:02:7a:ea:60:03:e2:d8:16:3a:
fc:20:2a:60:29:5b:1e:8d:ba:43:39:a1:0b:5e:74:
34:38:aa:9e:3f:7f:51:65:f1:99:f6:e6:51:c4:7d:
d8:5b:ad:fa:e8:e8:4e:3c:22:78:cc:1a:33:68:29:
46:5f:51:3b:af:de:c0:6d:bd:9b:b4:a7:cb:c6:32:
e1:ad:0e:64:09:18:4e:48:c8:1e:41:f7:2c:03:20:
d7:73:86:aa:cc:3f:81:4a:6c:de:0b:31:f0:34:46:
af:5f:fa:da:7c:61:53:de:79:45:ee:9a:31:3b:58:
53:04:80:53:95:27:41:37:6e:e9:a0:91:60:6a:35:
e7:a2:4d:80:f0:a5:18:79:1a:ac:8f:06:57:f4:c6:
16:9b:a6:92:fa:00:4f:9d:13:e3:61:f3:ca:2a:c2:
77:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:98:7E:74:A4:DA:45:FE:59:E6:AE:F7:CF:27:85:EA:01:0D:E1:5B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/599366-b524-456b-bfaa-10f597928806/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/599366-b524-456b-bfaa-10f597928806/1/EJh-dKTaRf5Z5q73zyeF6gEN4Vs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.255.0/24
IPv6:
2001:67c:18a8::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50438
Signature Algorithm: sha256WithRSAEncryption
b1:be:e9:63:ea:8b:9c:03:fd:97:25:20:11:17:07:12:b6:4a:
73:ea:50:6d:68:01:94:18:ed:61:b7:f5:f9:8a:6b:65:b4:da:
80:e3:a5:71:f2:d0:94:dc:4c:53:3e:28:89:72:3c:41:27:51:
bc:58:c5:12:d1:23:c2:a1:46:f3:4b:74:cf:16:a9:fa:c1:b4:
3f:ce:2e:76:1b:1a:39:cd:2a:f7:33:53:af:54:71:8d:74:ef:
36:87:6f:3f:4e:3d:42:bc:4e:cf:3a:1d:0c:f6:4f:9c:7c:5b:
88:1f:c0:e9:9a:9f:cc:4c:1b:c8:f5:8a:85:67:cc:e6:08:0a:
73:f7:8f:fe:b5:04:90:0b:e8:a2:3a:3d:0a:f7:16:ca:d7:cf:
9a:7e:f8:48:3f:5e:b5:40:8e:15:5e:ab:57:2e:4e:89:61:a7:
eb:01:67:6f:9b:10:70:8c:55:01:d0:21:3a:3e:b2:b2:2c:b6:
d3:fd:09:15:74:2d:db:15:a3:c9:bc:52:92:42:3f:a7:ca:94:
9e:09:97:fb:db:c0:e7:4f:86:44:b5:72:f6:a1:80:36:fd:5d:
92:dc:ab:4c:b4:0a:60:cd:53:04:75:b0:b2:bf:a7:f3:90:11:
b9:84:04:c4:35:3d:72:cb:e4:8c:34:10:f0:5a:85:b5:c2:47:
cf:45:e3:45
-----BEGIN CERTIFICATE-----
MIIFpTCCBI2gAwIBAgISAYzGSrL5Rban75w1kLNw+W0JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTgzMDMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDk4N2U3NGE0ZGE0NWZlNTllNmFlZjdjZjI3ODVlYTAxMGRlMTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUai/bESPtWaN/eLysHyLs6oOMtl
0niLjfvvqrCEfij1o/FNi2NLKVx+M/s9fd7mmO3T2d6GtaAqxLvLWrhaVZDhE79T
AoYiw5ycY4kPw98/m7qX9HRq3pSNmwMzvKQCeupgA+LYFjr8ICpgKVsejbpDOaEL
XnQ0OKqeP39RZfGZ9uZRxH3YW6366OhOPCJ4zBozaClGX1E7r97Abb2btKfLxjLh
rQ5kCRhOSMgeQfcsAyDXc4aqzD+BSmzeCzHwNEavX/rafGFT3nlF7poxO1hTBIBT
lSdBN27poJFgajXnok2A8KUYeRqsjwZX9MYWm6aS+gBPnRPjYfPKKsJ38QIDAQAB
o4ICsTCCAq0wHQYDVR0OBBYEFBCYfnSk2kX+Weau988nheoBDeFbMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NkLzU5OTM2
Ni1iNTI0LTQ1NmItYmZhYS0xMGY1OTc5Mjg4MDYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2QvNTk5MzY2
LWI1MjQtNDU2Yi1iZmFhLTEwZjU5NzkyODgwNi8xL0VKaC1kS1RhUmY1WjVxNzN6
eWVGNmdFTjRWcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF
BwEHAQH/BCEwHzAMBAIAATAGAwQAwTr/MA8EAgACMAkDBwAgAQZ8GKgwGgYIKwYB
BQUHAQgBAf8ECzAJoAcwBQIDAMUGMA0GCSqGSIb3DQEBCwUAA4IBAQCxvulj6ouc
A/2XJSARFwcStkpz6lBtaAGUGO1ht/X5imtltNqA46Vx8tCU3ExTPiiJcjxBJ1G8
WMUS0SPCoUbzS3TPFqn6wbQ/zi52Gxo5zSr3M1OvVHGNdO82h28/Tj1CvE7POh0M
9k+cfFuIH8Dpmp/MTBvI9YqFZ8zmCApz94/+tQSQC+iiOj0K9xbK18+afvhIP161
QI4VXqtXLk6JYafrAWdvmxBwjFUB0CE6PrKyLLbT/QkVdC3bFaPJvFKSQj+nypSe
CZf728DnT4ZEtXL2oYA2/V2S3KtMtApgzVMEdbCyv6fzkBG5hATENT1yy+SMNBDw
WoW1wkfPReNF
-----END CERTIFICATE-----
Generated at Wed May 1 21:27:19 2024 by rpki-client on console-ams.rpki-client.org