Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ef7lYBzyOOHdeSGsnYgpbizM3og.cer
File: Ef7lYBzyOOHdeSGsnYgpbizM3og.cer (raw, json)
Hash identifier: ZpP9Ef/EK79cN1q7kFBJH8xrU8AeqrR3SsLQEwHd8MM=
Subject key identifier: 11:FE:E5:60:1C:F2:38:E1:DD:79:21:AC:9D:88:29:6E:2C:CC:DE:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019135FE2173487F761ADFCCC0BE2335C937
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 09 Aug 2024 07:15:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212912
AS: 214383
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:35:fe:21:73:48:7f:76:1a:df:cc:c0:be:23:35:c9:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 9 07:15:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11fee5601cf238e1dd7921ac9d88296e2cccde88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0e:c1:6e:9f:a8:16:0b:71:40:61:35:43:0a:
28:b7:76:9f:7c:d1:4f:5c:c3:9c:a7:e0:23:fa:67:
4a:c9:6f:46:0e:93:0c:32:c0:c7:d4:ac:49:e8:e9:
60:2d:ea:66:cf:0a:a6:57:bf:6e:d9:c5:50:a0:45:
72:4f:66:eb:b7:74:fd:62:26:61:d1:a3:a1:b3:e0:
07:89:9b:0e:a6:75:e8:5e:93:99:9a:3c:a3:f4:6b:
c9:91:a3:95:6d:1e:65:0d:0f:4b:e6:72:11:d6:e5:
11:9a:6e:72:62:00:5a:9f:c2:ba:f3:c4:a6:a1:28:
71:1b:4e:94:d5:0f:a7:8d:af:7d:6b:d3:1c:6a:eb:
91:b3:ee:9f:d2:d4:f9:cf:a6:2f:d5:1e:27:02:09:
d8:61:fa:25:d8:55:6c:b6:fa:a6:fb:0e:b7:4a:7a:
2e:25:d0:2d:88:75:bc:7e:8a:1c:45:6d:3f:52:a7:
7b:12:85:43:40:0d:8d:8a:ac:37:1b:be:78:26:48:
36:f8:1e:cd:5d:20:58:19:ba:8d:8e:fb:f4:3b:e5:
e9:3f:5b:18:71:fe:72:6d:21:48:5e:aa:df:24:c9:
43:09:55:45:37:df:2e:32:50:dd:29:3d:96:c6:af:
04:26:a0:05:8b:9a:00:2a:aa:77:95:f4:1d:c5:46:
9e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:FE:E5:60:1C:F2:38:E1:DD:79:21:AC:9D:88:29:6E:2C:CC:DE:88
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212912
214383
Signature Algorithm: sha256WithRSAEncryption
62:72:4f:d4:32:a0:fb:4f:6f:4a:e0:11:0d:71:f9:e4:91:1e:
c8:1d:80:0f:db:bf:ac:83:56:a3:e3:72:68:e3:78:90:b6:ef:
3c:ba:11:3e:52:0d:bf:33:35:1d:4b:e7:05:e6:7e:eb:4f:f7:
97:ad:c5:92:19:01:24:4c:73:84:d1:f8:26:0e:aa:29:cf:25:
58:24:fd:f4:4e:5a:56:bb:78:90:61:bf:be:de:05:15:f2:6b:
8f:cc:67:ec:d5:15:34:6f:c2:d4:65:3a:66:7b:f2:d4:d8:4f:
78:5c:5e:3d:d7:23:ad:16:a5:8f:e5:ef:d8:61:b8:2e:fd:89:
97:bf:8c:cb:01:d3:9a:67:ab:81:29:73:ac:28:11:a1:1f:59:
8e:61:31:d7:b0:41:f9:e9:e6:90:46:2c:a8:8e:82:c0:17:10:
b0:b8:07:35:9c:0b:c0:3e:c5:8c:a8:a8:14:04:6d:7d:6f:4d:
22:1e:03:fd:3a:b9:20:21:b0:67:a8:bb:03:35:92:96:bd:4d:
f2:8f:92:00:dc:c1:be:88:62:b2:ff:db:bf:13:b6:18:56:8e:
e0:71:57:f7:c3:2b:53:f8:46:64:7e:84:ae:9f:d3:36:3d:a1:
ef:5f:3c:32:ed:a2:4d:93:9e:b1:0e:4c:e7:77:9d:d5:0b:3d:
a1:d7:88:d4
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZE1/iFzSH92Gt/MwL4jNck3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwODA5MDcxNTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWZlZTU2MDFjZjIzOGUxZGQ3OTIxYWM5ZDg4Mjk2ZTJjY2NkZTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvA7Bbp+oFgtxQGE1Qwoot3affNFP
XMOcp+Aj+mdKyW9GDpMMMsDH1KxJ6OlgLepmzwqmV79u2cVQoEVyT2brt3T9YiZh
0aOhs+AHiZsOpnXoXpOZmjyj9GvJkaOVbR5lDQ9L5nIR1uURmm5yYgBan8K688Sm
oShxG06U1Q+nja99a9McauuRs+6f0tT5z6Yv1R4nAgnYYfol2FVstvqm+w63Snou
JdAtiHW8foocRW0/Uqd7EoVDQA2Niqw3G754Jkg2+B7NXSBYGbqNjvv0O+XpP1sY
cf5ybSFIXqrfJMlDCVVFN98uMlDdKT2Wxq8EJqAFi5oAKqp3lfQdxUaeuwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFBH+5WAc8jjh3XkhrJ2IKW4szN6IMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I5L2EwYWEx
OC0wNDI5LTRiYWItOGUzMS1jNDZlMDA3OGVkZjcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjkvYTBhYTE4
LTA0MjktNGJhYi04ZTMxLWM0NmUwMDc4ZWRmNy8xL0VmN2xZQnp5T09IZGVTR3Nu
WWdwYml6TTNvZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEIAQH/BBAwDqAMMAoCAwM/sAIDA0VvMA0GCSqGSIb3DQEBCwUAA4IBAQBick/U
MqD7T29K4BENcfnkkR7IHYAP27+sg1aj43Jo43iQtu88uhE+Ug2/MzUdS+cF5n7r
T/eXrcWSGQEkTHOE0fgmDqopzyVYJP30TlpWu3iQYb++3gUV8muPzGfs1RU0b8LU
ZTpme/LU2E94XF491yOtFqWP5e/YYbgu/YmXv4zLAdOaZ6uBKXOsKBGhH1mOYTHX
sEH56eaQRiyojoLAFxCwuAc1nAvAPsWMqKgUBG19b00iHgP9OrkgIbBnqLsDNZKW
vU3yj5IA3MG+iGKy/9u/E7YYVo7gcVf3wytT+EZkfoSun9M2PaHvXzwy7aJNk56x
Dkznd53VCz2h14jU
-----END CERTIFICATE-----
Generated at Sat Sep 7 20:59:46 2024 by rpki-client on console-fra.rpki-client.org