Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb1TcuHhnQW-2jU71qFb3TkpH6Q.cer
File: eb1TcuHhnQW-2jU71qFb3TkpH6Q.cer (raw, json)
Hash identifier: c0oWxBPpG0sQP7GEHR0JsYsi8H3nCxUvxO/Xxio0NbQ=
Subject key identifier: 79:BD:53:72:E1:E1:9D:05:BE:DA:35:3B:D6:A1:5B:DD:39:29:1F:A4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D9A595E9ABB5067EF1AE453A1E4D7C184
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 11 Feb 2024 22:46:04 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 216293
IP: 2a13:d9c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9a:59:5e:9a:bb:50:67:ef:1a:e4:53:a1:e4:d7:c1:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 11 22:46:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79bd5372e1e19d05beda353bd6a15bdd39291fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1e:e9:d8:3b:0d:69:f5:22:2e:08:ea:a9:fb:
6a:03:52:ea:57:51:ea:3a:e0:ca:95:bd:29:ab:a7:
dc:a5:18:6d:d3:a4:19:e8:22:50:e7:c1:b1:dc:47:
96:ef:bb:18:25:29:25:18:d4:d1:a2:4f:fd:67:b5:
e1:2f:b0:ca:8a:bb:22:98:02:ea:af:41:d6:96:77:
e1:02:f0:b5:6c:a8:b0:07:77:d5:3c:7a:e3:f9:7b:
3d:08:10:89:e1:e4:9a:35:19:71:70:0b:09:27:76:
dc:ff:26:d7:9f:d9:ac:70:dd:82:df:91:82:b7:f7:
dd:ba:dc:2b:f9:e1:8f:7d:7c:3e:d5:99:b0:15:ec:
13:39:9e:18:d4:f6:36:ed:7a:fc:b1:98:f6:c5:fe:
01:4a:ce:b9:f3:3e:aa:5b:a9:73:ef:b2:4d:c0:d4:
2c:59:83:03:f3:56:79:28:c8:bd:51:29:74:b6:d1:
f0:57:f3:66:56:7f:11:cd:05:2c:53:18:56:43:8b:
ef:fd:ba:85:0a:98:9b:5b:03:39:d8:28:1b:e7:7f:
b6:1d:97:75:f8:f5:57:c7:ad:c6:db:9f:25:f0:07:
c8:b9:1f:f9:cd:e0:61:18:06:74:67:1d:0c:db:4d:
75:a2:bf:67:ff:1f:76:71:16:88:b3:91:59:64:63:
e8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:BD:53:72:E1:E1:9D:05:BE:DA:35:3B:D6:A1:5B:DD:39:29:1F:A4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:d9c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216293
Signature Algorithm: sha256WithRSAEncryption
7a:eb:a8:a9:b3:af:4f:d5:5b:8f:4a:9b:c3:cd:5f:07:0b:1f:
ff:55:6f:27:2d:d8:0b:4d:96:ac:fa:5a:63:3a:f9:af:e1:a6:
d6:03:2f:e8:88:d0:75:66:21:16:cc:49:3a:4f:23:99:af:a3:
f2:21:b2:b6:82:7f:cd:f8:cb:71:bb:18:03:91:7f:47:34:42:
d8:e9:0a:cf:4d:bc:ab:81:46:7d:49:32:ad:90:e6:e6:ba:68:
20:0b:a6:cc:f8:8e:be:55:6b:e1:63:56:5e:9a:92:4a:fa:bf:
5f:6a:aa:f6:db:22:6a:4a:dc:1a:52:02:d2:b2:72:cc:dd:cf:
d7:62:d3:e5:36:a4:ec:ad:86:71:05:3a:ae:a6:ec:d7:67:8b:
ba:47:6c:d9:02:64:d9:a3:88:ee:7d:6c:a1:e4:56:41:f5:b4:
59:d9:64:5b:42:51:9b:9e:ed:03:26:87:89:9c:e2:b8:02:12:
90:87:ab:ed:37:95:53:89:c6:c6:8e:d7:a1:75:af:72:7e:c8:
1f:24:c2:71:8f:d4:df:59:71:6c:a8:00:be:a8:f3:3a:1f:58:
0c:63:ed:c8:bd:6b:aa:4d:b1:fe:b4:81:33:5e:88:8a:31:89:
ba:27:88:f1:25:95:cf:6b:95:8b:13:f4:c2:ed:1e:29:dc:ab:
ce:fa:d3:05
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgISAY2aWV6au1Bn7xrkU6Hk18GEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMjExMjI0NjA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWJkNTM3MmUxZTE5ZDA1YmVkYTM1M2JkNmExNWJkZDM5MjkxZmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0B7p2DsNafUiLgjqqftqA1LqV1Hq
OuDKlb0pq6fcpRht06QZ6CJQ58Gx3EeW77sYJSklGNTRok/9Z7XhL7DKirsimALq
r0HWlnfhAvC1bKiwB3fVPHrj+Xs9CBCJ4eSaNRlxcAsJJ3bc/ybXn9mscN2C35GC
t/fdutwr+eGPfXw+1ZmwFewTOZ4Y1PY27Xr8sZj2xf4BSs658z6qW6lz77JNwNQs
WYMD81Z5KMi9USl0ttHwV/NmVn8RzQUsUxhWQ4vv/bqFCpibWwM52Cgb53+2HZd1
+PVXx63G258l8AfIuR/5zeBhGAZ0Zx0M2011or9n/x92cRaIs5FZZGPoVQIDAQAB
o4ICoTCCAp0wHQYDVR0OBBYEFHm9U3Lh4Z0Fvto1O9ahW905KR+kMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJiL2ZiZTM1
MC02OWRhLTQ5NWQtOTZlMi1hYmZhODNmY2ZmNjcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIvZmJlMzUw
LTY5ZGEtNDk1ZC05NmUyLWFiZmE4M2ZjZmY2Ny8xL2ViMVRjdUhoblFXLTJqVTcx
cUZiM1RrcEg2US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUDKhPZwDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMDTOUwDQYJKoZIhvcNAQELBQADggEBAHrrqKmzr0/VW49Km8PNXwcLH/9Vbyct
2AtNlqz6WmM6+a/hptYDL+iI0HVmIRbMSTpPI5mvo/IhsraCf834y3G7GAORf0c0
QtjpCs9NvKuBRn1JMq2Q5ua6aCALpsz4jr5Va+FjVl6akkr6v19qqvbbImpK3BpS
AtKycszdz9di0+U2pOythnEFOq6m7Ndni7pHbNkCZNmjiO59bKHkVkH1tFnZZFtC
UZue7QMmh4mc4rgCEpCHq+03lVOJxsaO16F1r3J+yB8kwnGP1N9ZcWyoAL6o8zof
WAxj7ci9a6pNsf60gTNeiIoxiboniPEllc9rlYsT9MLtHincq8760wU=
-----END CERTIFICATE-----
Generated at Fri May 3 08:04:37 2024 by rpki-client on console-fra.rpki-client.org