Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ejYteDKEZZ3ATu2vi4pv5ukwvSc.cer
File: ejYteDKEZZ3ATu2vi4pv5ukwvSc.cer (raw, json)
Hash identifier: Hncu3+kc1aWg3SaqrGTW6PA3/wOMroS1EW1GtZh/GIw=
Subject key identifier: 7A:36:2D:78:32:84:65:9D:C0:4E:ED:AF:8B:8A:6F:E6:E9:30:BD:27
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B7B77D1ED0423367F03D694193FB70
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:29:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 203067
IP: 46.175.48.0/21
IP: 185.145.48.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:b7:7d:1e:d0:42:33:67:f0:3d:69:41:93:fb:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a362d783284659dc04eedaf8b8a6fe6e930bd27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:68:46:50:04:c3:00:9d:a0:ed:45:ed:77:b0:
f2:3c:df:cc:e6:d7:dc:a4:22:66:f8:d7:36:37:ae:
d8:58:ac:cb:10:0b:ab:cb:d3:be:75:59:69:86:ce:
3a:3d:e3:e0:df:8a:de:44:48:37:ce:db:aa:34:23:
49:c8:e6:a0:5a:3c:29:ff:16:50:50:26:99:ff:c8:
c4:fb:ac:d6:12:12:54:46:19:5e:aa:09:3b:a1:bf:
86:43:09:4e:69:b2:af:72:96:9a:59:4f:3f:6d:19:
cc:dd:e4:eb:3e:a7:80:50:3a:c7:18:1d:aa:1a:eb:
be:c7:60:36:6d:b0:9f:b9:c5:b8:70:dc:12:4e:57:
d2:b2:48:b2:d0:d7:12:9e:bc:57:0d:58:98:bf:82:
37:b2:44:19:10:81:ff:63:f4:bd:e7:90:6c:66:b2:
6e:5d:51:e1:c2:c1:64:06:a2:d7:1c:ee:71:1a:7b:
83:7c:29:2e:43:8f:f3:d7:68:bd:f1:11:b6:ad:ab:
c8:7c:80:0e:87:ce:e8:94:51:2a:f7:f4:5c:ee:72:
7a:cb:0c:44:8e:29:c0:1e:ad:f6:10:9b:f8:c9:92:
10:36:98:84:d2:24:23:b7:08:9c:1c:c1:e5:81:47:
1d:cc:19:ce:f6:07:5b:8a:a9:c6:98:42:85:c7:44:
9b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:36:2D:78:32:84:65:9D:C0:4E:ED:AF:8B:8A:6F:E6:E9:30:BD:27
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.48.0/21
185.145.48.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203067
Signature Algorithm: sha256WithRSAEncryption
45:78:6c:f9:12:59:8e:be:c4:a6:ec:0b:15:fb:11:e4:57:0b:
10:3a:05:e6:75:d1:90:23:eb:83:81:50:e2:1a:dd:8c:8d:aa:
0f:3f:f8:0c:2f:82:40:3f:60:98:6d:3b:05:ff:bf:62:ae:72:
d5:b8:06:ce:60:16:0b:27:44:5b:15:13:77:ef:eb:26:63:af:
ed:bd:66:a6:08:e0:29:ed:3b:da:9a:4f:26:98:dc:21:92:c4:
22:9b:29:36:e4:57:5e:da:0c:f7:a2:3f:20:3b:5c:44:71:5d:
ef:57:82:d2:e4:aa:53:0f:e8:9f:c9:47:5c:77:a8:4c:0c:75:
53:4b:44:a5:25:22:0c:6f:36:b5:96:a1:7e:91:13:9e:60:cc:
b2:c7:a7:84:1b:ee:1f:0b:c0:48:2d:de:61:dc:f7:9f:6d:ef:
11:24:d3:24:9d:24:98:59:68:3e:6f:1c:29:0d:b9:cc:3e:e6:
dc:2c:df:53:32:ed:3d:6e:f0:2a:9a:13:5e:78:b7:16:87:d7:
f2:14:0b:14:21:e6:18:51:93:91:3a:80:f5:bd:3d:f6:04:73:
5d:c1:aa:29:09:5d:c7:da:42:72:5a:2e:f5:e6:41:9a:83:e9:
78:95:bf:9a:5d:5c:8a:2e:b6:d3:eb:78:b7:f4:56:a5:81:71:
1c:7d:4e:9f
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAYzGt7d9HtBCM2fwPWlBk/twMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMjAyOTM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTM2MmQ3ODMyODQ2NTlkYzA0ZWVkYWY4YjhhNmZlNmU5MzBiZDI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmhGUATDAJ2g7UXtd7DyPN/M5tfc
pCJm+Nc2N67YWKzLEAury9O+dVlphs46PePg34reREg3ztuqNCNJyOagWjwp/xZQ
UCaZ/8jE+6zWEhJURhleqgk7ob+GQwlOabKvcpaaWU8/bRnM3eTrPqeAUDrHGB2q
Guu+x2A2bbCfucW4cNwSTlfSskiy0NcSnrxXDViYv4I3skQZEIH/Y/S955BsZrJu
XVHhwsFkBqLXHO5xGnuDfCkuQ4/z12i98RG2ravIfIAOh87olFEq9/Rc7nJ6ywxE
jinAHq32EJv4yZIQNpiE0iQjtwicHMHlgUcdzBnO9gdbiqnGmEKFx0SbTwIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFHo2LXgyhGWdwE7tr4uKb+bpML0nMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI2L2JlNjhi
OS05YjYyLTRiM2UtYTZhNC04NjUwMzFmYTBiZjcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYvYmU2OGI5
LTliNjItNGIzZS1hNmE0LTg2NTAzMWZhMGJmNy8xL2VqWXRlREtFWlozQVR1MnZp
NHB2NXVrd3ZTYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQDLq8wAwQCuZEwMBoGCCsGAQUFBwEIAQH/BAsw
CaAHMAUCAwMZOzANBgkqhkiG9w0BAQsFAAOCAQEARXhs+RJZjr7EpuwLFfsR5FcL
EDoF5nXRkCPrg4FQ4hrdjI2qDz/4DC+CQD9gmG07Bf+/Yq5y1bgGzmAWCydEWxUT
d+/rJmOv7b1mpgjgKe072ppPJpjcIZLEIpspNuRXXtoM96I/IDtcRHFd71eC0uSq
Uw/on8lHXHeoTAx1U0tEpSUiDG82tZahfpETnmDMssenhBvuHwvASC3eYdz3n23v
ESTTJJ0kmFloPm8cKQ25zD7m3CzfUzLtPW7wKpoTXni3FofX8hQLFCHmGFGTkTqA
9b099gRzXcGqKQldx9pCclou9eZBmoPpeJW/ml1cii620+t4t/RWpYFxHH1Onw==
-----END CERTIFICATE-----
Generated at Fri May 3 14:05:36 2024 by rpki-client on console-ams.rpki-client.org