Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ESunl1d-pgpWGvmkWYxFBg47cIg.cer
File: ESunl1d-pgpWGvmkWYxFBg47cIg.cer (raw, json)
Hash identifier: jmEIKkevqw8479UozTkzTW63RDSv5SOmByaSVapRv/c=
Subject key identifier: 11:2B:A7:97:57:7E:A6:0A:56:1A:F9:A4:59:8C:45:06:0E:3B:70:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC80124C54BDE7BC9D65A181F4CC134F8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 34779
AS: 197045
IP: 46.248.64.0/19
IP: 84.255.192.0/18
IP: 89.212.0.0/16
IP: 89.233.112.0/20
IP: 91.246.224.0/19
IP: 93.103.0.0/16
IP: 119.12.128.0/20
IP: 185.49.116.0/22
IP: 185.179.48.0/22
IP: 188.159.224.0/19
IP: 188.230.128.0/17
IP: 193.138.32.0/19
IP: 194.28.108.0/22
IP: 2a01:260::/29
IP: 2a03:f800::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:24:c5:4b:de:7b:c9:d6:5a:18:1f:4c:c1:34:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=112ba797577ea60a561af9a4598c45060e3b7088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:57:5f:5a:17:ae:d5:c4:9e:cf:75:39:7a:0f:
04:3a:a6:a5:d4:12:d1:8b:9e:72:ec:73:51:66:db:
e0:09:2a:91:45:6e:d8:ab:2c:65:31:ad:56:3e:0c:
65:36:74:c7:ff:17:ab:65:10:38:90:40:42:72:90:
88:67:54:8e:77:aa:5a:1c:80:45:01:52:6a:d6:98:
5c:7f:5f:29:0d:9e:a3:76:6f:bb:bd:15:68:27:db:
cb:f0:66:f5:eb:cb:2a:fe:68:c3:f7:87:49:06:ce:
af:98:8d:63:25:4f:34:95:b8:ee:6c:65:e5:7b:4e:
b4:8f:cd:3f:53:38:87:62:09:3c:1f:44:b4:39:c8:
0d:25:88:58:42:ab:70:63:e2:15:f5:8f:4f:4a:16:
4b:1e:17:0f:8f:68:07:39:6a:72:a1:34:97:d6:d1:
4d:4f:6b:1e:c9:82:35:67:2e:22:b9:78:33:e8:af:
d6:91:95:63:85:67:cb:12:cb:27:88:49:88:36:0c:
cd:9f:5d:2c:3e:78:86:33:19:01:e5:b5:b7:91:0b:
a5:87:53:3f:d3:81:b4:ca:86:5f:cc:a6:44:31:85:
07:d7:59:51:35:01:94:64:63:8f:8d:38:f9:13:70:
bc:45:1a:7d:93:b8:b6:8e:be:7e:28:94:ee:f7:8a:
78:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2B:A7:97:57:7E:A6:0A:56:1A:F9:A4:59:8C:45:06:0E:3B:70:88
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.248.64.0/19
84.255.192.0/18
89.212.0.0/16
89.233.112.0/20
91.246.224.0/19
93.103.0.0/16
119.12.128.0/20
185.49.116.0/22
185.179.48.0/22
188.159.224.0/19
188.230.128.0/17
193.138.32.0/19
194.28.108.0/22
IPv6:
2a01:260::/29
2a03:f800::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34779
197045
Signature Algorithm: sha256WithRSAEncryption
4a:65:2c:46:b9:67:fb:c3:d6:e7:b4:4d:e3:a0:f9:1e:9f:87:
bd:41:ed:38:74:00:ed:cd:30:ba:21:8b:97:40:5b:9b:e3:d1:
78:91:62:2b:4a:40:fa:2b:d2:36:18:ea:0a:35:f6:2c:93:fb:
9c:ae:98:b6:cc:45:4e:99:f2:2f:17:ac:5a:67:b0:b9:60:ae:
4c:b9:64:64:34:5f:ef:66:ab:57:a0:75:47:8e:2f:d4:71:94:
8e:56:05:bf:88:13:9f:11:52:df:5a:2c:30:65:49:41:a5:c7:
66:88:f7:a6:66:93:0e:02:a0:17:b7:75:19:9e:f4:9e:ec:2d:
b3:e7:7c:0f:67:60:d9:a4:a7:95:c3:a7:db:e1:08:85:99:37:
ec:d3:e2:1d:bb:c3:68:25:0e:af:bb:72:13:ef:08:ff:a3:69:
e5:72:49:ce:04:07:bb:8d:f5:1c:bc:ce:62:df:5f:5d:6d:37:
c7:30:0e:1d:58:e1:5b:1e:2d:4c:ac:96:53:7b:83:d4:1b:8b:
a4:ea:8f:6b:f3:35:8e:48:68:ac:1c:dc:b1:50:d5:bc:b4:d8:
7e:87:f0:db:82:6e:50:0e:bd:63:0f:5a:4c:25:1d:e6:c0:22:
23:97:63:8a:a1:36:e7:d4:92:1b:c8:10:fa:59:b1:b7:ad:22:
87:b1:23:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:20:40 2024 by rpki-client on console-fra.rpki-client.org