Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aescHUkwv7_iXqfwpF19C2Eef2I.cer
File: aescHUkwv7_iXqfwpF19C2Eef2I.cer (raw, json)
Hash identifier: Fro5pki82UjvBY4gvV8EV9T/rSiw4vrlZeuXbuAmblA=
Subject key identifier: 69:EB:1C:1D:49:30:BF:BF:E2:5E:A7:F0:A4:5D:7D:0B:61:1E:7F:62
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194B78DAD5400C5219D42988D0EBF571E38
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 30 Jan 2025 14:11:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 29647
IP: 193.105.193.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b7:8d:ad:54:00:c5:21:9d:42:98:8d:0e:bf:57:1e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 30 14:11:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69eb1c1d4930bfbfe25ea7f0a45d7d0b611e7f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fd:38:0b:53:09:fb:8a:fc:a6:72:03:ca:ce:
f2:92:93:ac:76:e7:75:8d:cd:6c:7b:90:bc:f9:b5:
4a:96:b0:ff:9f:f4:a5:3f:d8:16:b8:10:63:5a:e2:
d3:29:f4:41:ab:f8:5f:fb:60:a4:8a:0c:52:25:4f:
0d:9e:e3:7c:cd:6b:22:ee:25:de:dc:1b:98:9b:1a:
34:37:d5:b4:2c:52:fd:28:79:a8:ab:91:64:da:c7:
70:1d:94:26:97:22:f4:5d:23:4f:58:fd:27:bf:24:
c6:01:21:67:98:05:fd:31:ef:0c:2f:27:7e:b4:38:
3c:94:ff:6e:44:2d:db:d1:dd:0e:f3:d5:7a:ee:be:
cb:54:14:6c:71:0a:e0:84:c6:c9:9a:ac:0a:9f:ae:
98:bf:83:10:26:5f:ef:78:ad:fb:87:5d:a9:e6:b2:
70:af:7e:cf:e2:3c:8b:4d:a2:91:9e:f4:63:60:20:
1b:f9:10:2b:45:3b:ee:74:0f:a6:ee:1a:bc:8c:b0:
31:9e:39:3b:0c:97:fd:8c:ad:a2:9b:f1:f2:c3:11:
75:45:6d:e2:ea:22:53:ee:b8:04:dc:7a:2c:b5:70:
e7:4f:0a:88:66:cd:7d:37:68:18:8d:59:fd:ad:ca:
12:03:91:7a:8f:81:f1:bd:cb:ec:52:46:6e:a4:80:
65:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:EB:1C:1D:49:30:BF:BF:E2:5E:A7:F0:A4:5D:7D:0B:61:1E:7F:62
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.193.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29647
Signature Algorithm: sha256WithRSAEncryption
87:63:1a:6d:8a:d4:02:95:e8:41:10:cb:f7:95:f8:ba:01:22:
05:f5:a9:24:c0:4e:cc:92:a6:ad:94:46:3a:6a:52:aa:11:71:
57:6f:be:1f:67:8d:b4:9b:a6:a3:da:94:7d:cb:0e:fe:80:fd:
4a:e6:3e:6c:73:3d:3e:4d:ea:6d:91:81:40:0e:94:46:c6:54:
8d:e0:7a:17:49:1a:bf:50:7f:d5:67:8a:1a:08:da:65:23:2f:
cf:d7:e5:18:84:3a:46:e2:a2:41:30:1b:2a:35:52:78:dd:6f:
76:d7:81:17:5f:f0:5f:0e:1a:f2:40:cf:57:1d:e4:a2:81:b7:
ef:1a:30:b3:1b:e6:15:f6:b5:97:fd:4e:bd:a0:52:52:d8:28:
0e:4b:2c:f0:f3:35:d1:c8:fe:9c:1f:9e:e1:6c:32:70:da:a7:
db:59:3d:89:e9:20:c8:c6:77:9f:9b:5d:4d:57:09:1a:92:f8:
75:57:cc:d2:8e:45:7e:97:89:c9:03:ef:1a:ad:5d:1d:40:a7:
19:f4:59:d0:b8:b4:97:c1:e9:af:03:cc:17:9e:4c:db:59:9d:
86:9c:e7:a3:19:a4:4f:a7:81:81:54:94:fd:81:9b:19:d5:b0:
03:43:71:c4:f2:5e:71:08:ca:f4:a2:54:01:8f:1f:77:32:60:
7b:ff:82:c1
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgISAZS3ja1UAMUhnUKYjQ6/Vx44MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTMwMTQxMTQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OWViMWMxZDQ5MzBiZmJmZTI1ZWE3ZjBhNDVkN2QwYjYxMWU3ZjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtf04C1MJ+4r8pnIDys7ykpOsdud1
jc1se5C8+bVKlrD/n/SlP9gWuBBjWuLTKfRBq/hf+2CkigxSJU8NnuN8zWsi7iXe
3BuYmxo0N9W0LFL9KHmoq5Fk2sdwHZQmlyL0XSNPWP0nvyTGASFnmAX9Me8MLyd+
tDg8lP9uRC3b0d0O89V67r7LVBRscQrghMbJmqwKn66Yv4MQJl/veK37h12p5rJw
r37P4jyLTaKRnvRjYCAb+RArRTvudA+m7hq8jLAxnjk7DJf9jK2im/HywxF1RW3i
6iJT7rgE3HostXDnTwqIZs19N2gYjVn9rcoSA5F6j4HxvcvsUkZupIBlEQIDAQAB
o4ICnzCCApswHQYDVR0OBBYEFGnrHB1JML+/4l6n8KRdfQthHn9iMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZlLzRjMGRj
Zi02NDM5LTQxMWYtYTEwNC1lOTlhYjI2MDVhOTAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmUvNGMwZGNm
LTY0MzktNDExZi1hMTA0LWU5OWFiMjYwNWE5MC8xL2Flc2NIVWt3djdfaVhxZndw
RjE5QzJFZWYySS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwWnBMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC
AnPPMA0GCSqGSIb3DQEBCwUAA4IBAQCHYxptitQClehBEMv3lfi6ASIF9akkwE7M
kqatlEY6alKqEXFXb74fZ420m6aj2pR9yw7+gP1K5j5scz0+TeptkYFADpRGxlSN
4HoXSRq/UH/VZ4oaCNplIy/P1+UYhDpG4qJBMBsqNVJ43W9214EXX/BfDhryQM9X
HeSigbfvGjCzG+YV9rWX/U69oFJS2CgOSyzw8zXRyP6cH57hbDJw2qfbWT2J6SDI
xnefm11NVwkakvh1V8zSjkV+l4nJA+8arV0dQKcZ9FnQuLSXwemvA8wXnkzbWZ2G
nOejGaRPp4GBVJT9gZsZ1bADQ3HE8l5xCMr0olQBjx93MmB7/4LB
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:58:48 2025 by rpki-client