Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
File: ezhehhZ9XMwi_YWJJWCudgtfKJg.cer (raw, json)
Hash identifier: zdaqPRnlffYwcivk95llB5q7apw0w/dV2pIreLUVtKI=
Subject key identifier: 7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3488A81898F2FB45937820B522E0C77
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:20 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.226.136.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:8a:81:89:8f:2f:b4:59:37:82:0b:52:2e:0c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b385e86167d5ccc22fd85892560ae760b5f2898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:96:20:5f:3d:e3:26:12:92:65:b9:e8:af:c6:
f6:fa:96:a4:ac:5d:ef:d1:6a:50:79:e0:84:38:a8:
86:56:23:49:31:23:3a:a6:e0:28:6b:9c:d0:18:92:
92:a9:28:69:b8:88:e8:fb:74:e6:64:ca:10:a6:97:
52:6a:34:48:37:1f:66:fa:2b:7d:fc:21:2c:e8:29:
97:76:06:41:ba:bc:22:6b:ca:16:b8:74:65:90:03:
40:bd:e9:91:0b:71:0c:6e:83:1c:10:ae:0b:18:a8:
87:8c:01:8b:9e:b4:a1:48:00:62:48:13:a0:63:ca:
95:96:f1:9b:a8:7b:4e:8b:fc:72:b5:06:e7:6d:1b:
00:68:1e:3c:d8:79:ac:37:dc:82:f6:bc:18:94:e5:
65:02:1c:b8:87:30:d0:04:64:78:d6:95:8a:e9:12:
c2:df:08:3f:e5:13:eb:e1:5f:6c:36:07:14:23:e9:
06:a1:b2:81:3a:60:3d:6e:ac:b7:c8:ed:e9:39:6c:
ca:2b:e9:ae:27:ac:82:29:60:91:8b:3a:f6:cb:0b:
38:b7:22:38:5c:28:54:40:22:bd:e3:3e:e1:8c:b7:
1e:b5:c4:d9:c3:e7:e2:41:a0:0a:72:d2:ee:2c:6f:
bb:6b:72:d3:24:3c:e9:15:1b:07:1d:56:c3:03:09:
8f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.136.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:4e:59:8b:fb:52:7f:49:c8:3a:0b:03:c0:a9:cc:59:4d:8b:
f3:71:d9:95:c0:a9:9a:fd:9d:02:10:e6:e1:1e:df:91:98:d9:
cd:1b:28:66:7b:49:1b:38:1c:9c:72:29:94:09:4e:1f:3e:32:
11:bb:70:3d:ad:0d:b0:46:f3:51:f1:86:d7:41:a6:5c:01:89:
87:e5:05:bc:ac:69:78:24:84:56:0d:85:97:1f:f9:9d:25:0d:
a5:22:72:1c:df:a5:51:6e:5d:c3:ff:18:9f:37:e6:f1:45:60:
aa:b7:83:e1:9d:59:77:d4:54:91:fa:19:b1:73:9d:da:e9:d7:
a5:98:c4:e6:a8:e6:c4:f2:ef:f2:b6:c9:5c:d9:ef:fd:a8:22:
24:2e:c3:d9:bc:36:ca:91:14:d8:fb:f1:91:ff:32:dc:53:87:
b3:d2:19:1b:1e:5a:69:ed:23:9a:d1:34:ab:f8:eb:ca:e8:c3:
f2:c4:e1:77:5b:21:6b:8a:cb:96:1a:79:1a:f7:0d:19:82:9b:
39:fa:c1:16:29:5c:a1:f1:04:f9:ba:fc:7a:e7:d8:4c:c6:64:
19:2f:bf:53:91:d8:0a:00:81:ed:62:cc:79:89:43:1e:86:ce:
42:3d:81:0f:67:e9:32:1f:52:10:5d:f4:cd:74:b6:5c:b1:03:
27:4a:b1:8a
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzDSIqBiY8vtFk3ggtSLgx3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDQyOTIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjM4NWU4NjE2N2Q1Y2NjMjJmZDg1ODkyNTYwYWU3NjBiNWYyODk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZYgXz3jJhKSZbnor8b2+pakrF3v
0WpQeeCEOKiGViNJMSM6puAoa5zQGJKSqShpuIjo+3TmZMoQppdSajRINx9m+it9
/CEs6CmXdgZBurwia8oWuHRlkANAvemRC3EMboMcEK4LGKiHjAGLnrShSABiSBOg
Y8qVlvGbqHtOi/xytQbnbRsAaB482HmsN9yC9rwYlOVlAhy4hzDQBGR41pWK6RLC
3wg/5RPr4V9sNgcUI+kGobKBOmA9bqy3yO3pOWzKK+muJ6yCKWCRizr2yws4tyI4
XChUQCK94z7hjLcetcTZw+fiQaAKctLuLG+7a3LTJDzpFRsHHVbDAwmP8wIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFHs4XoYWfVzMIv2FiSVgrnYLXyiYMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA4L2I0NTlm
MS02NDk5LTRlMTQtYWNmYi1lYTc4OGFkMzI5NmEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgvYjQ1OWYx
LTY0OTktNGUxNC1hY2ZiLWVhNzg4YWQzMjk2YS8xL2V6aGVoaFo5WE13aV9ZV0pK
V0N1ZGd0ZktKZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCueKIMA0GCSqGSIb3DQEBCwUAA4IBAQALTlmL
+1J/Scg6CwPAqcxZTYvzcdmVwKma/Z0CEObhHt+RmNnNGyhme0kbOByccimUCU4f
PjIRu3A9rQ2wRvNR8YbXQaZcAYmH5QW8rGl4JIRWDYWXH/mdJQ2lInIc36VRbl3D
/xifN+bxRWCqt4PhnVl31FSR+hmxc53a6delmMTmqObE8u/ytslc2e/9qCIkLsPZ
vDbKkRTY+/GR/zLcU4ez0hkbHlpp7SOa0TSr+OvK6MPyxOF3WyFrisuWGnka9w0Z
gps5+sEWKVyh8QT5uvx659hMxmQZL79TkdgKAIHtYsx5iUMehs5CPYEPZ+kyH1IQ
XfTNdLZcsQMnSrGK
-----END CERTIFICATE-----
Generated at Fri May 3 10:46:28 2024 by rpki-client on console-fra.rpki-client.org