Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ceWC839BZJjBi2YkjevM8iQavHY.cer
File: ceWC839BZJjBi2YkjevM8iQavHY.cer (raw, json)
Hash identifier: o5zabuLB4t/St2gQVWGIEYuY0zuC/nL5d2axCMkoS+4=
Subject key identifier: 71:E5:82:F3:7F:41:64:98:C1:8B:66:24:8D:EB:CC:F2:24:1A:BC:76
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D78C78C03797EA4D56A62BE24457B47D5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 05 Feb 2024 10:19:19 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.0.216.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:78:c7:8c:03:79:7e:a4:d5:6a:62:be:24:45:7b:47:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 5 10:19:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=71e582f37f416498c18b66248debccf2241abc76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a2:99:17:8e:4c:50:b9:62:fd:3e:07:62:b9:
df:f6:66:1d:7c:27:e8:42:b6:d5:df:33:c4:c9:07:
81:ba:4f:02:b3:fd:18:11:bf:85:c5:60:6b:e1:a8:
a9:71:d0:16:63:a7:f8:70:e4:0c:8f:e5:88:f5:53:
7b:8f:04:9a:15:c4:35:6d:20:2d:cf:2e:b0:41:d8:
ca:0b:52:69:34:e7:f7:cd:25:c2:4f:36:dd:1a:a6:
c4:e2:65:9b:7e:94:a5:e9:20:1f:77:ed:7a:79:ad:
93:ba:e3:82:84:7d:f3:0b:c7:63:5e:a1:61:d5:c7:
ed:2a:cd:b2:32:db:57:c3:85:43:f2:f8:50:a6:81:
87:72:12:f9:1f:db:72:de:2c:91:44:d5:96:bb:5e:
11:80:89:a4:64:01:86:1b:75:81:71:ee:68:5a:51:
e1:a6:36:ae:00:97:9e:7e:4e:73:4c:45:3c:eb:4a:
69:a1:22:39:10:e1:60:86:1f:e6:5a:b7:93:d7:00:
5d:93:43:f8:a6:03:0e:8a:7f:17:e3:a8:bd:79:d2:
39:87:8a:02:f8:30:58:94:38:ff:41:9f:41:95:38:
52:3c:95:95:6f:af:35:2f:6a:80:01:dc:c9:b1:5b:
38:31:51:2b:73:c2:60:3e:fd:0d:26:ad:09:9a:59:
29:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E5:82:F3:7F:41:64:98:C1:8B:66:24:8D:EB:CC:F2:24:1A:BC:76
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.216.0/24
Signature Algorithm: sha256WithRSAEncryption
92:3b:c6:1f:bb:30:21:95:03:24:2b:4a:29:d6:7c:fa:09:c6:
29:d3:3a:78:ae:50:33:8d:d5:d2:a6:60:63:c9:0b:dc:78:39:
bd:07:84:e0:88:7f:4d:6a:5d:36:fe:2c:81:90:05:6e:7f:e8:
95:e2:85:8f:57:32:aa:10:a5:16:29:97:04:71:49:09:5f:fe:
9c:a5:0c:3d:ba:c6:fd:0c:d0:8a:68:65:b8:43:be:37:07:15:
ac:cc:05:7c:43:2c:91:f1:7c:94:a4:31:87:84:ca:f0:53:3e:
4b:ce:b6:1f:1a:4e:05:88:75:74:70:23:44:4c:74:a5:6a:41:
fc:cb:5f:62:4e:05:ca:3a:99:3e:00:66:ab:9d:0f:f0:c3:80:
48:5d:c0:d6:cf:d7:71:dd:6e:cc:8b:0b:92:17:12:09:30:5d:
46:28:e0:ed:27:23:98:04:08:90:43:99:93:5d:a6:0e:e8:e2:
db:68:42:25:4c:fc:24:8a:37:2a:db:45:8d:d0:7f:f2:64:36:
2f:6f:ae:27:46:5a:64:27:59:a5:fa:d8:69:62:9e:a0:67:64:
ee:3b:f8:65:95:9e:af:37:66:4c:4f:15:35:c3:c7:63:a6:b5:
3e:0d:e6:76:fb:2b:87:cb:44:ff:18:9b:c2:3e:9e:86:2c:04:
0d:f5:ff:30
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAY14x4wDeX6k1WpiviRFe0fVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMjA1MTAxOTE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MWU1ODJmMzdmNDE2NDk4YzE4YjY2MjQ4ZGViY2NmMjI0MWFiYzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7aKZF45MULli/T4HYrnf9mYdfCfo
QrbV3zPEyQeBuk8Cs/0YEb+FxWBr4aipcdAWY6f4cOQMj+WI9VN7jwSaFcQ1bSAt
zy6wQdjKC1JpNOf3zSXCTzbdGqbE4mWbfpSl6SAfd+16ea2TuuOChH3zC8djXqFh
1cftKs2yMttXw4VD8vhQpoGHchL5H9ty3iyRRNWWu14RgImkZAGGG3WBce5oWlHh
pjauAJeefk5zTEU860ppoSI5EOFghh/mWreT1wBdk0P4pgMOin8X46i9edI5h4oC
+DBYlDj/QZ9BlThSPJWVb681L2qAAdzJsVs4MVErc8JgPv0NJq0JmlkpvwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFHHlgvN/QWSYwYtmJI3rzPIkGrx2MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VlL2ZkOWVh
MC04MzU3LTQ1OGItYjU5Ni05ZjM0ZjY3MTYyNTkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWUvZmQ5ZWEw
LTgzNTctNDU4Yi1iNTk2LTlmMzRmNjcxNjI1OS8xL2NlV0M4MzlCWkpqQmkyWWtq
ZXZNOGlRYXZIWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwgDYMA0GCSqGSIb3DQEBCwUAA4IBAQCSO8Yf
uzAhlQMkK0op1nz6CcYp0zp4rlAzjdXSpmBjyQvceDm9B4TgiH9Nal02/iyBkAVu
f+iV4oWPVzKqEKUWKZcEcUkJX/6cpQw9usb9DNCKaGW4Q743BxWszAV8QyyR8XyU
pDGHhMrwUz5LzrYfGk4FiHV0cCNETHSlakH8y19iTgXKOpk+AGarnQ/ww4BIXcDW
z9dx3W7MiwuSFxIJMF1GKODtJyOYBAiQQ5mTXaYO6OLbaEIlTPwkijcq20WN0H/y
ZDYvb64nRlpkJ1ml+thpYp6gZ2TuO/hllZ6vN2ZMTxU1w8djprU+DeZ2+yuHy0T/
GJvCPp6GLAQN9f8w
-----END CERTIFICATE-----
Generated at Fri May 3 07:15:04 2024 by rpki-client on console-ams.rpki-client.org