Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cNE-Khag7mY0IHqI_wqsTqvGaTw.cer
File: cNE-Khag7mY0IHqI_wqsTqvGaTw.cer (raw, json)
Hash identifier: 7zltszE0MJx3DZHHeuj4TeXm3gArjLnO7y5G6ARfvKA=
Subject key identifier: 70:D1:3E:2A:16:A0:EE:66:34:20:7A:88:FF:0A:AC:4E:AB:C6:69:3C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E1AD600A8A0848E5DDE4C5758D6FE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 62102
IP: 185.47.176.0/22
IP: 2a01:7ce0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:1a:d6:00:a8:a0:84:8e:5d:de:4c:57:58:d6:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=70d13e2a16a0ee6634207a88ff0aac4eabc6693c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3f:68:2c:03:05:bf:65:2a:06:40:8b:9c:04:
b7:a3:ac:22:1e:e8:97:04:85:13:fb:5d:de:5c:a4:
00:f4:28:a9:95:ce:86:03:e0:39:f8:c9:cf:73:27:
4c:8d:77:d3:1d:22:21:95:53:f1:c8:4c:54:7d:f0:
6a:df:64:99:b7:b7:5c:a5:aa:8e:20:16:e5:8f:3b:
1c:2a:94:50:2c:0d:4a:7d:9e:9a:35:b1:f9:22:06:
43:56:67:d0:ff:b6:4b:34:c0:d8:09:e3:bd:b8:2a:
4a:c7:86:d8:ce:89:2d:95:d9:21:3c:35:fa:c0:12:
7a:c7:e2:a1:0f:19:28:22:a9:90:1a:99:e4:23:f7:
49:c5:f9:ed:1b:fe:2d:b8:eb:44:ff:64:07:4c:1f:
16:0e:78:87:0e:bc:1c:a7:2a:1e:6f:ae:d7:b4:a1:
95:9d:68:63:eb:2c:bb:eb:63:59:2d:16:2d:b6:11:
6f:13:7b:1c:46:a0:64:05:9b:68:bd:54:ad:0f:d5:
3e:f4:54:1e:15:3d:54:fb:5f:d7:5a:95:37:51:ad:
cd:df:9b:e3:7a:08:b1:2e:54:76:2b:79:be:69:60:
3d:b1:1a:64:52:ab:59:7b:08:f4:a7:f1:d7:2a:bf:
4f:f2:fd:3a:fb:39:1a:73:a2:f8:eb:fe:de:cf:95:
ad:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D1:3E:2A:16:A0:EE:66:34:20:7A:88:FF:0A:AC:4E:AB:C6:69:3C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.47.176.0/22
IPv6:
2a01:7ce0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62102
Signature Algorithm: sha256WithRSAEncryption
8f:f1:2e:6e:3d:80:bb:dc:37:11:a5:9d:a8:c3:8a:c9:f5:85:
47:8e:74:c6:5a:ba:c3:d0:ee:81:49:74:15:0e:fc:02:44:aa:
4a:36:d1:82:77:98:a9:44:04:85:38:48:4f:c8:4f:3f:ad:9d:
0c:f8:11:5d:e4:d3:ed:e3:5a:12:14:34:da:6d:ff:91:af:59:
dd:bc:6a:b0:71:cc:5d:80:23:3c:3a:ee:0f:93:63:99:1d:ae:
b8:02:a5:22:bc:52:6d:87:6f:81:7e:2f:af:69:18:9f:a2:10:
b7:92:48:e6:a1:e1:05:9a:08:03:f3:b7:28:ae:ec:d3:ca:a2:
cb:93:e7:e4:f7:d1:08:af:4a:43:19:ad:97:22:30:02:62:1d:
a4:ec:e1:71:26:44:31:6f:cd:48:d5:ef:48:e8:21:d5:df:84:
55:e1:08:b1:a4:42:69:e7:83:ce:b4:70:8d:0d:f4:ba:77:97:
d6:bd:ea:1d:1f:54:bc:80:f6:91:a3:ff:6b:d7:0a:b7:20:1d:
2b:40:4b:5c:40:5b:7d:7e:4e:d3:62:d0:8a:b0:de:63:b6:37:
bf:d3:09:9c:14:e9:4d:c2:5d:79:bf:52:f5:05:bd:f0:0e:1f:
3a:f7:77:21:95:2b:4f:13:5e:7b:ca:8b:7e:79:0b:1d:93:9e:
c5:b6:1a:7c
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzFbhrWAKighI5d3kxXWNb+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTQyOTM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MGQxM2UyYTE2YTBlZTY2MzQyMDdhODhmZjBhYWM0ZWFiYzY2OTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxT9oLAMFv2UqBkCLnAS3o6wiHuiX
BIUT+13eXKQA9Ciplc6GA+A5+MnPcydMjXfTHSIhlVPxyExUffBq32SZt7dcpaqO
IBbljzscKpRQLA1KfZ6aNbH5IgZDVmfQ/7ZLNMDYCeO9uCpKx4bYzoktldkhPDX6
wBJ6x+KhDxkoIqmQGpnkI/dJxfntG/4tuOtE/2QHTB8WDniHDrwcpyoeb67XtKGV
nWhj6yy762NZLRYtthFvE3scRqBkBZtovVStD9U+9FQeFT1U+1/XWpU3Ua3N35vj
egixLlR2K3m+aWA9sRpkUqtZewj0p/HXKr9P8v06+zkac6L46/7ez5WtzwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFHDRPioWoO5mNCB6iP8KrE6rxmk8MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ3L2M3ODM0
OC1hYzJlLTQ0ZTQtODQ2Ny0yYmRkMjBiNDgyM2IvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcvYzc4MzQ4
LWFjMmUtNDRlNC04NDY3LTJiZGQyMGI0ODIzYi8xL2NORS1LaGFnN21ZMElIcUlf
d3FzVHF2R2FUdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuS+wMA0EAgACMAcDBQAqAXzgMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDyljANBgkqhkiG9w0BAQsFAAOCAQEAj/Eubj2Au9w3
EaWdqMOKyfWFR450xlq6w9DugUl0FQ78AkSqSjbRgneYqUQEhThIT8hPP62dDPgR
XeTT7eNaEhQ02m3/ka9Z3bxqsHHMXYAjPDruD5NjmR2uuAKlIrxSbYdvgX4vr2kY
n6IQt5JI5qHhBZoIA/O3KK7s08qiy5Pn5PfRCK9KQxmtlyIwAmIdpOzhcSZEMW/N
SNXvSOgh1d+EVeEIsaRCaeeDzrRwjQ30uneX1r3qHR9UvID2kaP/a9cKtyAdK0BL
XEBbfX5O02LQirDeY7Y3v9MJnBTpTcJdeb9S9QW98A4fOvd3IZUrTxNee8qLfnkL
HZOexbYafA==
-----END CERTIFICATE-----
Generated at Fri May 3 10:35:31 2024 by rpki-client on console-fra.rpki-client.org