Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.cer
File: eUbFYBBkEBsbVM9cbvzUB_F5Ebk.cer (raw, json)
Hash identifier: qSfe/jgwgBRIC7oG0HqQklY2awoB6jpMeNQM7uRIcCY=
Subject key identifier: 79:46:C5:60:10:64:10:1B:1B:54:CF:5C:6E:FC:D4:07:F1:79:11:B9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC80307FC3D0E006D7AFA7A6211F96AC3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:31:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.102.128.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:03:07:fc:3d:0e:00:6d:7a:fa:7a:62:11:f9:6a:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:31:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7946c5601064101b1b54cf5c6efcd407f17911b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:89:12:67:f8:f1:2a:54:00:54:0d:53:d9:aa:
e6:1a:d0:61:95:59:65:c5:db:13:b0:0d:e5:2c:64:
36:f7:22:fc:e0:74:ae:82:ea:6e:78:0f:b7:f1:3f:
90:40:ff:51:8a:68:5d:aa:2c:84:00:54:c9:01:8e:
c9:8d:07:e0:91:46:82:cb:73:47:ec:d2:84:e6:7d:
cc:dd:ce:ec:61:79:14:d8:ca:47:da:2e:8c:9a:4c:
a5:ee:fa:58:e4:2d:a6:fd:65:7a:af:81:c4:fc:85:
e3:88:87:fa:be:b1:b2:4e:08:8d:76:29:e9:fc:98:
b9:33:4f:81:d9:1c:f6:27:93:b1:6c:7f:3b:14:78:
52:9f:67:77:e3:c9:8c:50:e9:08:85:bf:86:de:a4:
ea:f5:a0:2e:c3:79:6a:91:de:90:d4:92:66:4b:a7:
41:92:8d:e1:62:7f:02:16:6a:bb:a5:3c:88:94:a9:
76:7c:b1:3e:71:01:5b:41:76:83:d9:16:48:31:ba:
2b:02:84:cf:10:89:bd:16:e1:39:5c:0a:e5:aa:40:
65:fe:84:8a:d0:e6:54:9e:46:b6:86:b0:74:a1:0a:
07:f5:22:40:2b:5c:c2:5e:b4:50:e5:2b:e2:ae:f1:
2e:a3:60:7e:e7:7a:25:5f:6b:46:c7:ba:34:c1:7d:
fe:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:46:C5:60:10:64:10:1B:1B:54:CF:5C:6E:FC:D4:07:F1:79:11:B9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.128.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:f9:61:7b:e2:4e:e1:2a:af:a6:30:3d:8b:69:ec:a6:fc:69:
6e:2a:ae:cf:a0:43:c1:da:dd:c6:b2:96:af:57:d2:06:35:69:
5f:06:b0:52:c6:2c:8e:98:be:3b:d7:d1:c8:a1:46:c0:6e:4a:
6a:44:da:c4:c2:11:d9:eb:7c:41:79:22:a7:3f:54:7b:a5:d6:
87:c9:4b:49:e3:89:16:5f:de:91:08:ae:c0:72:10:99:3a:e2:
4a:24:45:9f:5c:88:2d:53:a5:8f:a1:c7:9a:98:58:64:44:f1:
7f:c7:5f:39:c2:39:f3:27:85:97:6e:18:57:f2:89:4c:6d:bd:
c3:92:f5:fc:5c:bd:2e:fc:5e:90:0f:ab:0c:16:ae:db:48:37:
61:47:19:32:b2:34:54:d3:eb:d1:c1:25:37:44:b1:62:f7:bb:
fe:bd:42:75:1d:80:a4:41:84:98:e7:8c:fa:8e:a1:41:c3:a0:
37:db:62:a3:51:24:9c:46:cb:57:01:91:9b:81:6f:61:06:ae:
ec:c2:d3:70:83:84:98:d3:97:fe:ac:e4:7b:a8:1e:d9:a5:6d:
ce:66:31:8c:e4:63:8a:74:b0:35:cd:93:fa:6b:62:19:8b:c8:
44:e7:af:46:cf:e3:4d:45:24:4c:ec:bc:c1:ff:b2:e6:cd:c6:
6a:45:d8:f7
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzIAwf8PQ4AbXr6emIR+WrDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDIzMTMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTQ2YzU2MDEwNjQxMDFiMWI1NGNmNWM2ZWZjZDQwN2YxNzkxMWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4kSZ/jxKlQAVA1T2armGtBhlVll
xdsTsA3lLGQ29yL84HSugupueA+38T+QQP9RimhdqiyEAFTJAY7JjQfgkUaCy3NH
7NKE5n3M3c7sYXkU2MpH2i6Mmkyl7vpY5C2m/WV6r4HE/IXjiIf6vrGyTgiNdinp
/Ji5M0+B2Rz2J5OxbH87FHhSn2d348mMUOkIhb+G3qTq9aAuw3lqkd6Q1JJmS6dB
ko3hYn8CFmq7pTyIlKl2fLE+cQFbQXaD2RZIMborAoTPEIm9FuE5XArlqkBl/oSK
0OZUnka2hrB0oQoH9SJAK1zCXrRQ5SvirvEuo2B+53olX2tGx7o0wX3+XQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFHlGxWAQZBAbG1TPXG781AfxeRG5MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q0LzczZmU3
OC1mMDBkLTQ1ZjgtYmZkMy1mMmEwZTljOGM3ZjAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQvNzNmZTc4
LWYwMGQtNDVmOC1iZmQzLWYyYTBlOWM4YzdmMC8xL2VVYkZZQkJrRUJzYlZNOWNi
dnpVQl9GNUViay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwmaAMA0GCSqGSIb3DQEBCwUAA4IBAQBt+WF7
4k7hKq+mMD2Laeym/GluKq7PoEPB2t3GspavV9IGNWlfBrBSxiyOmL4719HIoUbA
bkpqRNrEwhHZ63xBeSKnP1R7pdaHyUtJ44kWX96RCK7AchCZOuJKJEWfXIgtU6WP
oceamFhkRPF/x185wjnzJ4WXbhhX8olMbb3DkvX8XL0u/F6QD6sMFq7bSDdhRxky
sjRU0+vRwSU3RLFi97v+vUJ1HYCkQYSY54z6jqFBw6A322KjUSScRstXAZGbgW9h
Bq7swtNwg4SY05f+rOR7qB7ZpW3OZjGM5GOKdLA1zZP6a2IZi8hE569Gz+NNRSRM
7LzB/7LmzcZqRdj3
-----END CERTIFICATE-----
Generated at Fri May 3 03:28:28 2024 by rpki-client on console-fra.rpki-client.org