Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SeRO7qJladDdvQ6GN_Es9QWk7ek.cer
File: SeRO7qJladDdvQ6GN_Es9QWk7ek.cer (raw, json)
Hash identifier: zEbziBIO17ZenA2FbRM9Lmyw8Bz+ZU5Xhndbia7+l9A=
Subject key identifier: 49:E4:4E:EE:A2:65:69:D0:DD:BD:0E:86:37:F1:2C:F5:05:A4:ED:E9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DBE27CAA3647A47FDFE0B2CB6692A9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 35676
IP: 178.213.64.0/21
IP: 185.16.252.0/22
IP: 193.105.186.0/24
IP: 194.5.88.0/23
IP: 195.234.36.0/24
IP: 2a03:6f80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:e2:7c:aa:36:47:a4:7f:df:e0:b2:cb:66:92:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49e44eeea26569d0ddbd0e8637f12cf505a4ede9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d1:c9:dc:40:88:fb:da:d9:0c:e8:a7:e6:a9:
7b:19:34:68:57:6a:04:6e:23:40:d7:4a:ce:14:91:
b5:b3:26:6c:9b:8e:78:92:93:6c:f6:fd:c8:fa:27:
fc:50:6d:9a:15:bc:74:62:6e:3a:2a:d3:74:91:bd:
fc:89:9c:06:2a:3d:41:ba:2c:5a:22:9b:eb:e0:e3:
1d:92:48:34:1e:d3:f8:69:c3:f0:f5:48:09:6f:6e:
08:b2:25:a8:71:0d:4d:36:1e:b2:b1:93:b8:98:e8:
12:2c:cd:da:a3:4e:bc:37:dc:c3:c1:96:bb:2e:60:
9e:d3:96:c6:20:ed:7d:b0:60:00:55:66:46:2d:43:
14:f5:8e:96:69:b7:85:26:50:fa:36:c7:d2:fe:6f:
40:fd:88:03:ac:25:8e:01:54:93:c7:57:7b:e7:a5:
59:44:b1:ad:40:be:bb:a4:cc:98:cf:3c:19:04:51:
51:e9:74:6c:cf:ad:f4:53:9d:b4:63:27:64:f5:c8:
f4:19:a1:b6:0b:d8:26:2a:f7:6c:0b:5e:6d:7d:00:
a1:d5:2b:e2:7a:99:9b:1d:0f:e6:02:db:76:69:43:
fb:80:2d:e3:9a:5a:1c:5e:34:80:37:d5:88:e5:66:
05:e0:7f:3d:4f:91:c2:12:a9:42:4d:36:49:ed:86:
b1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E4:4E:EE:A2:65:69:D0:DD:BD:0E:86:37:F1:2C:F5:05:A4:ED:E9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.213.64.0/21
185.16.252.0/22
193.105.186.0/24
194.5.88.0/23
195.234.36.0/24
IPv6:
2a03:6f80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35676
Signature Algorithm: sha256WithRSAEncryption
47:49:2f:25:f4:47:04:69:32:f4:55:f5:36:f5:3a:4e:b8:0d:
1c:e6:24:c9:43:cf:39:15:98:54:b4:20:2e:c4:76:83:f0:79:
62:23:72:c1:a6:bb:cc:a3:2f:4c:70:d7:84:a2:e1:fc:59:d0:
bd:5f:58:1d:be:69:4e:44:d7:11:af:c1:d4:02:f7:6f:32:a5:
ae:87:81:96:f2:5e:23:b9:d9:40:f9:11:10:a6:33:e8:c7:55:
fb:59:3b:7e:93:a7:e3:41:cb:a7:3a:5f:eb:36:d7:5f:66:9f:
ec:4e:3a:a8:7a:0c:3e:25:84:2e:b2:e9:e5:ee:7b:68:ca:15:
91:0f:02:01:b8:8e:a9:4f:8d:e3:38:bd:43:21:62:22:e9:c3:
5e:1f:26:00:bb:8d:95:4f:05:32:11:8f:81:ce:34:5b:c7:bd:
23:a6:19:51:8c:90:99:38:4a:31:a0:00:3d:da:e0:a2:83:c3:
f2:ef:bd:fe:fd:bb:bc:b1:20:be:24:a9:a4:56:15:b8:51:68:
44:0d:8e:1f:49:13:51:0b:25:a8:a8:9d:d1:c2:96:96:cf:5a:
5c:6e:b7:27:74:16:d1:29:a5:d3:89:ad:59:80:1a:3d:27:b9:
d4:8d:ec:25:b3:b4:16:5a:99:a9:d1:c0:cb:e3:d4:56:f2:07:
49:70:94:8f
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgISAYzF2+J8qjZHpH/f4LLLZpKpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTYyOTMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OWU0NGVlZWEyNjU2OWQwZGRiZDBlODYzN2YxMmNmNTA1YTRlZGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9HJ3ECI+9rZDOin5ql7GTRoV2oE
biNA10rOFJG1syZsm454kpNs9v3I+if8UG2aFbx0Ym46KtN0kb38iZwGKj1Buixa
Ipvr4OMdkkg0HtP4acPw9UgJb24IsiWocQ1NNh6ysZO4mOgSLM3ao068N9zDwZa7
LmCe05bGIO19sGAAVWZGLUMU9Y6WabeFJlD6NsfS/m9A/YgDrCWOAVSTx1d756VZ
RLGtQL67pMyYzzwZBFFR6XRsz630U520Yydk9cj0GaG2C9gmKvdsC15tfQCh1Svi
epmbHQ/mAtt2aUP7gC3jmlocXjSAN9WI5WYF4H89T5HCEqlCTTZJ7YaxNwIDAQAB
o4ICxzCCAsMwHQYDVR0OBBYEFEnkTu6iZWnQ3b0OhjfxLPUFpO3pMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZlL2MzZGMx
Yi1kMWVlLTRmZjItYTVhYS1mMGM0YmU4ZTI0MGEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmUvYzNkYzFi
LWQxZWUtNGZmMi1hNWFhLWYwYzRiZThlMjQwYS8xL1NlUk83cUpsYWREZHZRNkdO
X0VzOVFXazdlay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF
BwEHAQH/BDcwNTAkBAIAATAeAwQDstVAAwQCuRD8AwQAwWm6AwQBwgVYAwQAw+ok
MA0EAgACMAcDBQMqA2+AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCLXDANBgkq
hkiG9w0BAQsFAAOCAQEAR0kvJfRHBGky9FX1NvU6TrgNHOYkyUPPORWYVLQgLsR2
g/B5YiNywaa7zKMvTHDXhKLh/FnQvV9YHb5pTkTXEa/B1AL3bzKlroeBlvJeI7nZ
QPkREKYz6MdV+1k7fpOn40HLpzpf6zbXX2af7E46qHoMPiWELrLp5e57aMoVkQ8C
AbiOqU+N4zi9QyFiIunDXh8mALuNlU8FMhGPgc40W8e9I6YZUYyQmThKMaAAPdrg
ooPD8u+9/v27vLEgviSppFYVuFFoRA2OH0kTUQslqKid0cKWls9aXG63J3QW0Sml
04mtWYAaPSe51I3sJbO0FlqZqdHAy+PUVvIHSXCUjw==
-----END CERTIFICATE-----
Generated at Fri May 3 01:45:35 2024 by rpki-client on console-ams.rpki-client.org