Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer
File: ES0MTxbciSISn_YFDiNVYjF1ZeU.cer (raw, json)
Hash identifier: eIJbMzHB/xiHoB8Km4DGJ4ccN4X4MAsLD83oiOrumoo=
Subject key identifier: 11:2D:0C:4F:16:DC:89:22:12:9F:F6:05:0E:23:55:62:31:75:65:E5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86F1E3477C5573454435040D5127141
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:29:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 51724
IP: 91.221.36.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:1e:34:77:c5:57:34:54:43:50:40:d5:12:71:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=112d0c4f16dc8922129ff6050e235562317565e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b1:cd:99:47:64:8c:df:d9:0a:8f:b1:e5:e2:
dd:cc:80:47:a9:3f:27:b1:1d:19:d9:4e:cc:ca:b1:
1a:fb:f2:6b:26:ea:a1:85:67:18:0c:73:f0:7e:6c:
ef:91:d4:59:03:11:58:c3:2b:0a:68:a4:7e:c5:3f:
45:a9:08:30:5d:e2:27:86:d6:18:c0:18:b2:ef:99:
a5:1c:c7:80:57:4b:20:45:fa:31:18:68:fb:37:ea:
22:6b:ae:46:b4:09:32:a0:ac:53:dc:25:32:3d:44:
d4:72:27:d0:51:75:b2:77:85:ce:87:ea:b1:06:f9:
37:af:6c:f3:e8:b2:04:9b:86:36:8a:2f:a9:86:8f:
c7:4c:d9:d1:3b:09:71:d0:fc:51:d5:bd:80:04:5b:
d7:fb:1d:9a:5f:52:09:c9:19:30:33:6b:79:51:78:
35:fb:08:4b:e0:b9:ba:1b:13:ae:2f:75:15:1a:91:
29:dd:05:d7:f1:5c:17:42:0f:64:da:89:b1:1e:e8:
ff:70:81:19:e4:6a:0f:e9:4f:fc:81:66:cb:66:6d:
de:ee:24:74:b3:88:50:d6:65:ce:cb:01:69:b2:71:
ac:31:77:a8:42:09:95:b3:f5:1d:19:d5:76:76:a6:
d8:e8:05:f0:37:38:56:33:43:2a:c2:f7:6a:e2:3d:
50:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2D:0C:4F:16:DC:89:22:12:9F:F6:05:0E:23:55:62:31:75:65:E5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.36.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51724
Signature Algorithm: sha256WithRSAEncryption
2a:9c:5b:ce:8a:af:ee:bf:cd:fc:20:1a:c7:13:81:dd:5b:7e:
53:82:58:73:39:41:32:49:6e:54:d2:2f:7d:00:b4:97:c6:aa:
e7:0e:2b:84:01:5a:8a:8d:1b:f3:ab:67:b0:b7:01:40:14:ff:
26:dc:b8:c5:16:2f:4f:fd:9e:47:a9:4e:7a:e5:90:15:8f:df:
16:4d:6e:9a:dd:60:83:01:66:7b:a2:bc:24:53:b1:f5:d4:92:
36:9e:16:53:39:3b:38:e4:05:d0:cc:98:8f:7d:4d:02:64:55:
cd:be:2c:72:41:ea:38:a9:3c:40:a7:86:58:28:e1:ad:df:94:
16:6b:cd:d1:49:e5:a1:48:5e:fa:fd:5f:7b:1b:d3:fa:2a:10:
39:89:aa:93:5d:34:8f:d9:52:07:55:1d:54:86:f7:38:ef:d9:
52:32:71:29:32:d1:b8:1e:33:d7:28:e9:94:5c:b2:12:46:6b:
cc:09:76:62:34:75:a0:47:02:82:50:48:01:b1:e8:3f:ec:e9:
a0:45:09:78:f4:fd:54:d2:eb:a9:a2:4f:ad:74:c4:cd:84:33:
15:b2:20:1a:2b:3e:2a:f3:02:9e:82:89:e3:ef:91:a9:26:b8:
ab:0f:cd:e2:13:1e:4f:61:ba:51:49:b5:3c:8e:27:59:e4:c3:
81:0e:43:a0
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYzIbx40d8VXNFRDUEDVEnFBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDQyOTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTJkMGM0ZjE2ZGM4OTIyMTI5ZmY2MDUwZTIzNTU2MjMxNzU2NWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprHNmUdkjN/ZCo+x5eLdzIBHqT8n
sR0Z2U7MyrEa+/JrJuqhhWcYDHPwfmzvkdRZAxFYwysKaKR+xT9FqQgwXeInhtYY
wBiy75mlHMeAV0sgRfoxGGj7N+oia65GtAkyoKxT3CUyPUTUcifQUXWyd4XOh+qx
Bvk3r2zz6LIEm4Y2ii+pho/HTNnROwlx0PxR1b2ABFvX+x2aX1IJyRkwM2t5UXg1
+whL4Lm6GxOuL3UVGpEp3QXX8VwXQg9k2omxHuj/cIEZ5GoP6U/8gWbLZm3e7iR0
s4hQ1mXOywFpsnGsMXeoQgmVs/UdGdV2dqbY6AXwNzhWM0Mqwvdq4j1QwwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFBEtDE8W3IkiEp/2BQ4jVWIxdWXlMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M1LzQ1ODMw
Yy00YTg2LTQwMmMtYTFlZS00MDA5ZDg3OWI5N2UvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUvNDU4MzBj
LTRhODYtNDAyYy1hMWVlLTQwMDlkODc5Yjk3ZS8xL0VTME1UeGJjaVNJU25fWUZE
aU5WWWpGMVplVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQBW90kMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwDKDDANBgkqhkiG9w0BAQsFAAOCAQEAKpxbzoqv7r/N/CAaxxOB3Vt+U4JYczlB
MkluVNIvfQC0l8aq5w4rhAFaio0b86tnsLcBQBT/Jty4xRYvT/2eR6lOeuWQFY/f
Fk1umt1ggwFme6K8JFOx9dSSNp4WUzk7OOQF0MyYj31NAmRVzb4sckHqOKk8QKeG
WCjhrd+UFmvN0UnloUhe+v1fexvT+ioQOYmqk100j9lSB1UdVIb3OO/ZUjJxKTLR
uB4z1yjplFyyEkZrzAl2YjR1oEcCglBIAbHoP+zpoEUJePT9VNLrqaJPrXTEzYQz
FbIgGis+KvMCnoKJ4++RqSa4qw/N4hMeT2G6UUm1PI4nWeTDgQ5DoA==
-----END CERTIFICATE-----
Generated at Thu Apr 25 23:20:40 2024 by rpki-client on console-fra.rpki-client.org