Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
File: ekeMWqImonjosZBvNxxgz8fYfo4.cer (raw, json)
Hash identifier: FRiESkrAj/MLccX96nfWi2Es6Z6UCWrk+qlPxAZkmbM=
Subject key identifier: 7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018EA7E2F451B8C900C405FB1827C30FF14F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 04 Apr 2024 06:54:12 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 89.106.144.0/21
IP: 94.143.104.0/21
IP: 185.236.124.0/22
IP: 212.1.216.0/21
IP: 2a03:480::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a7:e2:f4:51:b8:c9:00:c4:05:fb:18:27:c3:0f:f1:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 4 06:54:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:21:8c:2a:8d:93:6a:0b:82:18:ba:e5:a1:aa:
7f:66:a2:2d:60:ed:0a:45:bc:a8:a4:3a:d0:44:dc:
e5:f9:de:12:19:01:70:09:4f:15:d6:c2:32:d2:bf:
4d:42:8e:74:19:b7:d6:7c:cc:4a:ba:85:76:81:d5:
a8:1a:48:94:b5:c0:11:26:bb:d5:7d:d3:aa:03:f2:
0f:58:9d:84:10:8a:3d:ae:d0:05:51:48:24:e4:0a:
f6:0c:35:10:97:1f:ce:b9:fa:57:cf:55:5e:e6:97:
04:ca:47:35:95:db:77:37:93:9d:97:15:6f:f5:bf:
74:b4:0f:79:5d:f0:f7:b5:54:e6:2b:82:8a:53:02:
84:05:0e:34:66:17:cc:f2:7c:88:cf:50:85:90:23:
e5:e7:22:b8:c6:fd:c3:c6:bf:b2:c6:da:52:83:1d:
ad:bd:c8:70:64:5f:d7:6d:8c:41:a4:39:22:52:86:
5d:bd:99:d5:3c:ff:96:0c:00:61:db:7a:dd:5d:41:
12:66:df:d7:1a:17:be:06:fa:f9:ab:64:82:17:38:
00:b0:46:b1:fa:2a:13:56:5f:03:7c:ba:48:59:7d:
ff:87:b0:31:57:70:54:92:89:c2:0e:88:27:46:7f:
55:ed:bd:53:ee:94:5b:89:59:0a:d1:5c:db:e5:87:
8e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.144.0/21
94.143.104.0/21
185.236.124.0/22
212.1.216.0/21
IPv6:
2a03:480::/32
Signature Algorithm: sha256WithRSAEncryption
12:a2:1a:2a:7b:aa:9b:94:87:f2:80:47:03:68:ed:fe:8d:62:
0d:84:ca:ff:35:9f:23:65:d7:56:08:8f:a4:f4:75:6e:c5:1b:
a0:ba:20:29:78:4b:38:c2:1c:f2:d8:ac:65:ff:50:85:e9:af:
66:a9:df:89:c4:c8:61:d5:d1:9c:ef:2c:4e:62:ce:6a:4b:39:
8f:fa:1c:96:01:18:8a:a3:4b:e8:d4:2c:bd:03:09:72:22:ac:
10:a0:f2:20:2a:96:68:b0:5d:1f:61:25:a3:c2:54:08:d0:5a:
61:3d:c3:c8:1d:80:26:a1:f6:e8:24:30:f9:a1:6c:bc:5a:00:
4d:cd:33:6d:65:b5:5d:34:13:ce:52:0f:75:8e:1c:77:02:dd:
96:b7:22:3d:65:61:a1:3f:74:fc:6a:00:8c:c4:f1:32:6c:39:
d3:02:fd:fd:aa:0d:6d:d6:90:43:4d:a1:80:b4:4e:d0:9a:fd:
73:f1:38:78:56:b4:cc:ff:3b:b0:3d:e2:e2:4b:3f:72:8c:64:
fe:6e:cf:58:4a:68:cf:e4:9c:3f:58:95:e5:bf:e8:68:ac:27:
48:0b:f4:e5:49:63:8d:90:66:de:67:8b:a4:f3:81:ce:0f:31:
d8:17:3d:8e:91:b1:d9:8f:f1:0b:82:13:6c:ae:67:03:6d:d1:
42:c7:7a:da
-----BEGIN CERTIFICATE-----
MIIFmTCCBIGgAwIBAgISAY6n4vRRuMkAxAX7GCfDD/FPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNDA0MDY1NDEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTQ3OGM1YWEyMjZhMjc4ZThiMTkwNmYzNzFjNjBjZmM3ZDg3ZThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziGMKo2TaguCGLrloap/ZqItYO0K
RbyopDrQRNzl+d4SGQFwCU8V1sIy0r9NQo50GbfWfMxKuoV2gdWoGkiUtcARJrvV
fdOqA/IPWJ2EEIo9rtAFUUgk5Ar2DDUQlx/OufpXz1Ve5pcEykc1ldt3N5OdlxVv
9b90tA95XfD3tVTmK4KKUwKEBQ40ZhfM8nyIz1CFkCPl5yK4xv3Dxr+yxtpSgx2t
vchwZF/XbYxBpDkiUoZdvZnVPP+WDABh23rdXUESZt/XGhe+Bvr5q2SCFzgAsEax
+ioTVl8DfLpIWX3/h7AxV3BUkonCDognRn9V7b1T7pRbiVkK0Vzb5YeOCQIDAQAB
o4ICpTCCAqEwHQYDVR0OBBYEFHpHjFqiJqJ46LGQbzccYM/H2H6OMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA4LzUxYTUy
MC1lMDhkLTQzYjMtYTZiMC1kNzZlYzljYzBkMjgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgvNTFhNTIw
LWUwOGQtNDNiMy1hNmIwLWQ3NmVjOWNjMGQyOC8xL2VrZU1XcUltb25qb3NaQnZO
eHhnejhmWWZvNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF
BwEHAQH/BDEwLzAeBAIAATAYAwQDWWqQAwQDXo9oAwQCuex8AwQD1AHYMA0EAgAC
MAcDBQAqAwSAMA0GCSqGSIb3DQEBCwUAA4IBAQASohoqe6qblIfygEcDaO3+jWIN
hMr/NZ8jZddWCI+k9HVuxRuguiApeEs4whzy2Kxl/1CF6a9mqd+JxMhh1dGc7yxO
Ys5qSzmP+hyWARiKo0vo1Cy9AwlyIqwQoPIgKpZosF0fYSWjwlQI0FphPcPIHYAm
ofboJDD5oWy8WgBNzTNtZbVdNBPOUg91jhx3At2WtyI9ZWGhP3T8agCMxPEybDnT
Av39qg1t1pBDTaGAtE7Qmv1z8Th4VrTM/zuwPeLiSz9yjGT+bs9YSmjP5Jw/WJXl
v+horCdIC/TlSWONkGbeZ4uk84HODzHYFz2OkbHZj/ELghNsrmcDbdFCx3ra
-----END CERTIFICATE-----
Generated at Fri May 3 14:05:37 2024 by rpki-client on console-ams.rpki-client.org