Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ewl4xBLath77LbVBGwaWDAnhenc.cer
File: ewl4xBLath77LbVBGwaWDAnhenc.cer (raw, json)
Hash identifier: p0gkDhnWA/QmE3ZY7hucCiNePzg3cpGKyEHcl98kDlw=
Subject key identifier: 7B:09:78:C4:12:DA:B6:1E:FB:2D:B5:41:1B:06:96:0C:09:E1:7A:77
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01907D868A39CC9337CF006FFDB3D8F793D6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/ebbeba-1b50-41e2-a8d3-ed466735ab27/1/ewl4xBLath77LbVBGwaWDAnhenc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/ebbeba-1b50-41e2-a8d3-ed466735ab27/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 04 Jul 2024 11:34:47 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 48710
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7d:86:8a:39:cc:93:37:cf:00:6f:fd:b3:d8:f7:93:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 4 11:34:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b0978c412dab61efb2db5411b06960c09e17a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:84:3b:ea:59:86:09:79:92:5a:15:8a:0d:e8:
fd:03:9f:44:d0:98:f6:b6:3f:8a:f1:44:6c:c5:2c:
e4:4c:5f:bd:ec:39:85:3e:fb:f2:f3:9a:b2:ec:c4:
d1:81:05:b8:35:f0:58:29:ce:8d:c3:6e:b4:cd:3c:
d2:44:f2:c6:7e:fa:54:d3:74:e6:e8:0b:53:76:a0:
64:f2:61:6b:ad:7a:2d:04:5f:c9:7d:c7:05:91:f3:
9d:6d:86:b5:1b:8c:67:aa:db:53:49:95:76:a3:4e:
17:f7:d0:61:53:a6:21:09:b5:60:b6:bd:80:5d:a3:
9d:7f:68:aa:e7:bc:eb:59:4f:54:92:02:f3:1f:17:
c9:68:c5:a2:0d:3b:be:38:39:5f:ef:6c:a9:5f:0c:
f9:27:69:87:b4:21:2d:f6:b1:a0:42:31:28:a1:2f:
5c:7d:b2:6a:86:d5:f9:74:8e:1c:c0:15:1f:dc:ee:
d9:5f:96:6e:fb:21:d0:86:5f:d7:09:ee:3f:ea:c7:
5d:2b:84:7a:29:bd:33:6b:36:7a:97:20:34:cb:3d:
3a:2d:97:b4:c8:43:87:ad:55:6b:2a:98:0a:26:6a:
af:76:d1:d5:73:fc:61:ec:df:ef:8b:ca:ed:4b:11:
1a:62:e0:a2:34:3a:67:e1:78:8b:99:d8:24:b7:5c:
67:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:09:78:C4:12:DA:B6:1E:FB:2D:B5:41:1B:06:96:0C:09:E1:7A:77
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ebbeba-1b50-41e2-a8d3-ed466735ab27/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ebbeba-1b50-41e2-a8d3-ed466735ab27/1/ewl4xBLath77LbVBGwaWDAnhenc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48710
Signature Algorithm: sha256WithRSAEncryption
a9:be:78:b0:91:65:02:c7:99:94:a6:23:06:95:50:7f:f3:c3:
23:21:18:ef:03:23:b3:b5:2b:1d:ff:4b:5b:1e:0c:5f:b3:4c:
36:cd:23:2a:c7:21:a9:84:ad:1a:58:a0:03:b8:89:43:c2:8f:
57:c7:06:ab:20:37:72:b0:ca:9c:8e:87:32:4b:36:9b:7f:24:
fb:0c:2a:5b:16:ae:c1:66:61:53:aa:96:78:44:e1:dc:85:08:
ed:4e:5a:03:68:20:b7:4e:0a:f8:9a:66:43:36:c9:d2:c7:b0:
51:d0:60:68:9d:08:39:14:cf:1f:67:65:83:ca:c5:75:fe:8d:
25:e6:a5:70:73:46:1a:a6:1b:03:10:fe:16:f2:85:e5:38:5d:
47:8b:e3:c9:a9:74:d7:18:c9:90:89:c5:21:13:e8:d1:60:92:
1c:ef:d3:29:16:40:cd:51:3f:b3:31:22:9d:86:5e:14:da:a3:
49:1b:f2:cb:2a:28:ec:70:07:52:91:95:7c:46:bf:ef:14:73:
0b:fe:72:7a:97:08:33:d4:09:fe:76:99:38:1b:f6:14:92:a6:
a5:74:bd:63:0e:62:b5:cd:f6:dd:f8:99:a7:17:1f:ed:97:78:
e6:83:57:a0:fa:d9:89:7f:50:01:93:7c:5c:a3:83:fa:0c:6b:
a5:12:39:dd
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZB9hoo5zJM3zwBv/bPY95PWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNzA0MTEzNDQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjA5NzhjNDEyZGFiNjFlZmIyZGI1NDExYjA2OTYwYzA5ZTE3YTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYQ76lmGCXmSWhWKDej9A59E0Jj2
tj+K8URsxSzkTF+97DmFPvvy85qy7MTRgQW4NfBYKc6Nw260zTzSRPLGfvpU03Tm
6AtTdqBk8mFrrXotBF/JfccFkfOdbYa1G4xnqttTSZV2o04X99BhU6YhCbVgtr2A
XaOdf2iq57zrWU9UkgLzHxfJaMWiDTu+ODlf72ypXwz5J2mHtCEt9rGgQjEooS9c
fbJqhtX5dI4cwBUf3O7ZX5Zu+yHQhl/XCe4/6sddK4R6Kb0zazZ6lyA0yz06LZe0
yEOHrVVrKpgKJmqvdtHVc/xh7N/vi8rtSxEaYuCiNDpn4XiLmdgkt1xncQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFHsJeMQS2rYe+y21QRsGlgwJ4Xp3MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMyL2ViYmVi
YS0xYjUwLTQxZTItYThkMy1lZDQ2NjczNWFiMjcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzIvZWJiZWJh
LTFiNTAtNDFlMi1hOGQzLWVkNDY2NzM1YWIyNy8xL2V3bDR4QkxhdGg3N0xiVkJH
d2FXREFuaGVuYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwC+RjANBgkqhkiG9w0BAQsFAAOCAQEAqb54sJFlAseZ
lKYjBpVQf/PDIyEY7wMjs7UrHf9LWx4MX7NMNs0jKschqYStGligA7iJQ8KPV8cG
qyA3crDKnI6HMks2m38k+wwqWxauwWZhU6qWeETh3IUI7U5aA2ggt04K+JpmQzbJ
0sewUdBgaJ0IORTPH2dlg8rFdf6NJealcHNGGqYbAxD+FvKF5ThdR4vjyal01xjJ
kInFIRPo0WCSHO/TKRZAzVE/szEinYZeFNqjSRvyyyoo7HAHUpGVfEa/7xRzC/5y
epcIM9QJ/naZOBv2FJKmpXS9Yw5itc323fiZpxcf7Zd45oNXoPrZiX9QAZN8XKOD
+gxrpRI53Q==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:17:59 2024 by rpki-client on console-fra.rpki-client.org