Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Es84yOexki9uvz_TQHNc2wQjFBg.cer
File: Es84yOexki9uvz_TQHNc2wQjFBg.cer (raw, json)
Hash identifier: gTN0gTto5N39eaDVx4dzCdbgCr+SSM/+Qt8Tb7lDDTY=
Subject key identifier: 12:CF:38:C8:E7:B1:92:2F:6E:BF:3F:D3:40:73:5C:DB:04:23:14:18
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4939148980531C524BA2939024348EE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:54 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 16350
IP: 185.6.160.0/22
IP: 217.119.224.0/20
IP: 2a02:1398::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:91:48:98:05:31:c5:24:ba:29:39:02:43:48:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12cf38c8e7b1922f6ebf3fd340735cdb04231418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e3:5f:d5:5b:1b:03:84:ee:9b:48:95:d1:52:
52:24:44:fa:97:70:9b:7f:40:92:19:1e:60:2a:3f:
8c:b9:3d:ed:62:11:8c:6c:7c:34:31:c6:d2:80:57:
4d:3c:43:ad:3a:d2:53:19:53:0d:ef:29:ab:e2:48:
71:3b:d7:88:5c:47:ea:b2:57:76:11:da:4b:ea:87:
1c:a5:90:a5:43:53:a9:15:91:c4:86:53:24:44:62:
76:16:a1:84:35:c5:d2:79:f0:4a:af:17:8c:f1:eb:
f4:62:7a:d3:f6:ff:ce:2c:08:25:43:0f:12:7b:84:
0b:8f:55:ed:d7:d0:9f:1c:0c:f3:ef:57:ae:52:0d:
c7:c2:e3:dc:3e:55:66:29:ad:35:90:7c:c6:8a:93:
27:db:12:e4:cf:dd:7d:a4:f5:72:42:1b:7c:be:70:
e3:db:fe:86:3d:c1:24:0e:1d:9b:80:69:43:a2:f5:
8d:c8:03:86:55:06:e6:6f:ba:7e:b6:6a:43:d9:2d:
11:be:bd:c6:14:48:5e:5b:58:94:5d:38:a6:07:e4:
79:c5:f2:4b:36:dc:aa:2c:4f:90:0e:0b:25:51:98:
86:54:7d:61:78:8d:31:30:fa:ea:5d:0d:34:35:dc:
24:92:8a:8a:3d:5f:05:47:59:79:01:74:57:03:fa:
88:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:CF:38:C8:E7:B1:92:2F:6E:BF:3F:D3:40:73:5C:DB:04:23:14:18
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.6.160.0/22
217.119.224.0/20
IPv6:
2a02:1398::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
16350
Signature Algorithm: sha256WithRSAEncryption
46:ba:0d:71:9c:90:c4:75:36:8d:c1:16:46:66:68:5f:7b:8a:
ca:bf:84:c5:01:e9:31:d4:bd:f0:aa:99:64:90:77:8f:c3:5d:
b5:9f:a6:86:e3:10:ae:c8:04:40:9a:41:d4:82:d7:58:bf:75:
c6:16:cb:5a:03:6d:46:75:7e:22:da:90:19:c1:34:70:12:55:
49:6f:0f:75:a3:e7:c9:82:c7:84:1b:a5:fb:4c:6e:8f:9e:49:
6d:71:28:04:9d:6f:54:ed:b8:b1:fc:03:a9:00:72:1a:20:d7:
93:59:e4:d9:33:06:e2:13:8c:69:00:7c:f5:76:fa:f8:25:4c:
af:82:b6:55:c3:41:e5:95:77:3e:04:1c:f6:f2:5d:35:46:0a:
c4:8e:f1:38:2e:95:8d:8a:15:60:b2:39:f0:3a:c3:50:e3:11:
47:65:9e:c4:ee:40:91:19:ac:76:d8:a2:4c:c9:66:4c:56:be:
d9:b8:31:1e:a8:47:61:46:70:89:71:02:b6:ee:cd:34:34:d0:
b2:d9:a3:c1:94:df:26:fb:6d:d7:bd:0c:e5:0a:73:aa:94:d7:
c9:3f:34:05:fe:f2:06:9c:34:a6:7e:09:aa:a9:62:9f:b3:05:
9a:f8:82:30:c5:f8:22:e9:c1:52:df:06:b2:b9:09:66:53:a9:
24:bf:f7:45
-----BEGIN CERTIFICATE-----
MIIFqDCCBJCgAwIBAgISAYzEk5FImAUxxSS6KTkCQ0juMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTAzMDU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMmNmMzhjOGU3YjE5MjJmNmViZjNmZDM0MDczNWNkYjA0MjMxNDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlONf1VsbA4Tum0iV0VJSJET6l3Cb
f0CSGR5gKj+MuT3tYhGMbHw0McbSgFdNPEOtOtJTGVMN7ymr4khxO9eIXEfqsld2
EdpL6occpZClQ1OpFZHEhlMkRGJ2FqGENcXSefBKrxeM8ev0YnrT9v/OLAglQw8S
e4QLj1Xt19CfHAzz71euUg3HwuPcPlVmKa01kHzGipMn2xLkz919pPVyQht8vnDj
2/6GPcEkDh2bgGlDovWNyAOGVQbmb7p+tmpD2S0Rvr3GFEheW1iUXTimB+R5xfJL
NtyqLE+QDgslUZiGVH1heI0xMPrqXQ00NdwkkoqKPV8FR1l5AXRXA/qIWwIDAQAB
o4ICtDCCArAwHQYDVR0OBBYEFBLPOMjnsZIvbr8/00BzXNsEIxQYMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MxLzdmZDZi
NC1hNzdkLTRkZWMtYTAzYy1iZTBiYWZiNzgyZWUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzEvN2ZkNmI0
LWE3N2QtNGRlYy1hMDNjLWJlMGJhZmI3ODJlZS8xL0VzODR5T2V4a2k5dXZ6X1RR
SE5jMndRakZCZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQCuQagAwQE2XfgMA0EAgACMAcDBQAqAhOYMBkG
CCsGAQUFBwEIAQH/BAowCKAGMAQCAj/eMA0GCSqGSIb3DQEBCwUAA4IBAQBGug1x
nJDEdTaNwRZGZmhfe4rKv4TFAekx1L3wqplkkHePw121n6aG4xCuyARAmkHUgtdY
v3XGFstaA21GdX4i2pAZwTRwElVJbw91o+fJgseEG6X7TG6PnkltcSgEnW9U7bix
/AOpAHIaINeTWeTZMwbiE4xpAHz1dvr4JUyvgrZVw0HllXc+BBz28l01RgrEjvE4
LpWNihVgsjnwOsNQ4xFHZZ7E7kCRGax22KJMyWZMVr7ZuDEeqEdhRnCJcQK27s00
NNCy2aPBlN8m+23XvQzlCnOqlNfJPzQF/vIGnDSmfgmqqWKfswWa+IIwxfgi6cFS
3wayuQlmU6kkv/dF
-----END CERTIFICATE-----
Generated at Thu Apr 25 23:20:55 2024 by rpki-client on console-fra.rpki-client.org