Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eOe6jAiFO-VUxZTe0VammD66EFU.cer
File: eOe6jAiFO-VUxZTe0VammD66EFU.cer (raw, json)
Hash identifier: 46oRNmWSawyhsNaX2+eXg0LxPbz+WGyB56bBnaoG6Iw=
Subject key identifier: 78:E7:BA:8C:08:85:3B:E5:54:C5:94:DE:D1:56:A6:98:3E:BA:10:55
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86F2DA90E01FE1C3F72CA71469B8387
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:29:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 48479
IP: 46.18.200.0/21
IP: 151.252.104.0/21
IP: 185.52.28.0/22
IP: 185.52.76.0/22
IP: 2a01:b9a0::/32
IP: 2a03:aa80::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Dec 2024 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:2d:a9:0e:01:fe:1c:3f:72:ca:71:46:9b:83:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78e7ba8c08853be554c594ded156a6983eba1055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c5:29:96:26:a4:62:b7:d0:fa:77:85:36:f4:
5d:0b:80:59:57:cf:8c:18:32:e1:c8:b6:2e:4b:fd:
fd:ee:4c:5a:62:ba:6e:e3:68:a6:53:d6:5d:9a:70:
f9:0b:d7:e6:ca:c2:d3:23:d3:9b:9a:4b:30:64:a7:
e2:c5:e8:fd:f0:c2:a4:22:a1:ef:0c:85:bf:fd:fa:
31:86:e7:e7:ce:71:d6:1a:75:e2:d8:49:c0:64:ae:
0a:8b:58:ce:7c:aa:05:f2:71:5c:52:34:dd:bb:95:
9e:6e:ff:c9:9a:2b:d4:11:34:f9:1b:6b:69:11:1c:
54:d9:00:db:ed:0d:f9:83:a6:9c:63:cf:d2:d1:5b:
75:02:32:2f:55:09:66:0e:ed:8c:3e:aa:c6:f5:bd:
af:2c:56:b3:dd:01:1d:d7:aa:19:57:11:b6:2c:66:
12:81:77:9b:a3:f3:b0:65:68:85:01:c5:ad:ec:06:
8b:30:b6:53:f7:72:1b:c4:18:26:41:2b:09:40:ea:
5f:74:d5:6b:4f:31:8b:97:11:1e:58:cd:06:9c:d0:
c8:eb:2c:c9:6a:ee:74:2d:2e:e0:fd:ee:5c:5d:02:
1e:f9:78:dc:4d:9b:45:e8:8d:8d:da:21:24:8b:d7:
3a:a5:e0:71:f6:a7:4f:8f:69:01:91:ae:02:24:89:
9f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E7:BA:8C:08:85:3B:E5:54:C5:94:DE:D1:56:A6:98:3E:BA:10:55
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.200.0/21
151.252.104.0/21
185.52.28.0/22
185.52.76.0/22
IPv6:
2a01:b9a0::/32
2a03:aa80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48479
Signature Algorithm: sha256WithRSAEncryption
87:84:c0:c6:8c:79:d9:6f:6f:43:11:24:37:40:5f:78:1e:4d:
a9:e0:5c:fa:90:32:e9:64:a1:a9:bd:6f:d0:79:4a:bb:82:a1:
59:11:b6:20:08:d8:79:cb:c9:59:b7:2a:63:3d:58:4b:08:30:
5c:d8:e9:19:4d:2f:68:5c:ab:4f:cf:c0:6e:45:da:e8:e5:85:
fb:72:1f:ae:27:f8:4f:d5:8f:d8:3f:fb:20:1f:c8:b7:ad:d6:
df:2e:e7:25:d5:77:cc:cd:5c:2a:49:83:af:c0:74:aa:5e:db:
93:0a:47:55:0f:b4:97:2b:39:e7:53:58:49:3e:85:10:94:6e:
4c:cf:4a:23:7a:ba:6f:ab:c0:73:8c:b2:56:78:e2:6e:83:02:
9d:30:b4:61:ca:8a:01:48:f1:e9:df:53:04:fe:87:fe:23:2c:
d3:81:97:a8:0e:11:20:04:89:c2:fb:bd:14:44:34:71:bc:a4:
45:74:00:f4:b9:90:0b:fd:ec:4a:7d:b9:a5:30:3a:75:9f:0e:
64:a7:5d:1a:0b:bd:e0:49:81:92:63:6a:65:a5:7a:ca:0b:1c:
fe:29:a6:cd:fc:cf:ee:14:36:23:3d:fb:30:b5:22:f7:29:e8:
05:54:09:a6:18:98:40:d9:ce:ed:28:28:0c:ad:bb:ae:dd:84:
55:ed:63:88
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgISAYzIby2pDgH+HD9yynFGm4OHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDQyOTM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OGU3YmE4YzA4ODUzYmU1NTRjNTk0ZGVkMTU2YTY5ODNlYmExMDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosUpliakYrfQ+neFNvRdC4BZV8+M
GDLhyLYuS/397kxaYrpu42imU9ZdmnD5C9fmysLTI9ObmkswZKfixej98MKkIqHv
DIW//foxhufnznHWGnXi2EnAZK4Ki1jOfKoF8nFcUjTdu5Webv/JmivUETT5G2tp
ERxU2QDb7Q35g6acY8/S0Vt1AjIvVQlmDu2MPqrG9b2vLFaz3QEd16oZVxG2LGYS
gXebo/OwZWiFAcWt7AaLMLZT93IbxBgmQSsJQOpfdNVrTzGLlxEeWM0GnNDI6yzJ
au50LS7g/e5cXQIe+XjcTZtF6I2N2iEki9c6peBx9qdPj2kBka4CJImf6wIDAQAB
o4ICyDCCAsQwHQYDVR0OBBYEFHjnuowIhTvlVMWU3tFWppg+uhBVMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMwLzMyNTQ4
MS01Y2U2LTQ1NmUtOTRhMi01ZWFmOWUxMGQ4NWMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAvMzI1NDgx
LTVjZTYtNDU2ZS05NGEyLTVlYWY5ZTEwZDg1Yy8xL2VPZTZqQWlGTy1WVXhaVGUw
VmFtbUQ2NkVGVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEcGCCsGAQUF
BwEHAQH/BDgwNjAeBAIAATAYAwQDLhLIAwQDl/xoAwQCuTQcAwQCuTRMMBQEAgAC
MA4DBQAqAbmgAwUAKgOqgDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAvV8wDQYJ
KoZIhvcNAQELBQADggEBAIeEwMaMedlvb0MRJDdAX3geTangXPqQMulkoam9b9B5
SruCoVkRtiAI2HnLyVm3KmM9WEsIMFzY6RlNL2hcq0/PwG5F2ujlhftyH64n+E/V
j9g/+yAfyLet1t8u5yXVd8zNXCpJg6/AdKpe25MKR1UPtJcrOedTWEk+hRCUbkzP
SiN6um+rwHOMslZ44m6DAp0wtGHKigFI8enfUwT+h/4jLNOBl6gOESAEicL7vRRE
NHG8pEV0APS5kAv97Ep9uaUwOnWfDmSnXRoLveBJgZJjamWlesoLHP4pps38z+4U
NiM9+zC1Ivcp6AVUCaYYmEDZzu0oKAytu67dhFXtY4g=
-----END CERTIFICATE-----
Generated at Wed Dec 4 09:12:23 2024 by rpki-client on console-ams.rpki-client.org