Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/se4yDfBGSHfVF0XjFCMbVcg7aEU.cer
File: se4yDfBGSHfVF0XjFCMbVcg7aEU.cer (raw, json)
Hash identifier: 98huPB+KLnIqOSnKjDY+NkMM1/mabAjM3AWHPkH+xgk=
Subject key identifier: B1:EE:32:0D:F0:46:48:77:D5:17:45:E3:14:23:1B:55:C8:3B:68:45
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BC284EAF3F633D06502900E8234229
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:20 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 129.102.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:28:4e:af:3f:63:3d:06:50:29:00:e8:23:42:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1ee320df0464877d51745e314231b55c83b6845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:36:3e:e8:82:bc:64:06:f9:af:a4:0d:ab:bd:
90:78:69:20:6b:53:dd:c5:e1:5b:21:e4:5d:6a:0c:
c6:b1:cc:bd:45:7e:ad:42:5c:1a:33:99:bd:58:cd:
65:0d:de:de:dc:49:b0:80:85:c7:20:10:88:54:57:
bd:b1:93:71:ae:e3:78:58:95:a7:55:1b:c5:f0:bc:
56:0f:ec:2a:af:32:9e:03:4b:52:d7:96:a6:f9:f6:
14:a4:fc:55:79:62:15:64:ce:0a:83:19:7d:11:38:
3d:a1:f3:43:44:ac:ae:f9:20:ac:c6:51:99:23:63:
90:e8:c4:8d:60:32:0b:fc:b6:34:4b:1a:d2:c2:a8:
2b:8b:2c:bf:f8:87:98:ac:af:c5:e7:1e:3d:2b:46:
ef:7d:4f:32:d9:98:b1:ac:f3:d6:e3:0d:a0:f5:1d:
ce:e1:8d:33:81:3d:74:63:82:f3:77:0f:95:4d:73:
1c:03:b6:04:be:a6:ce:56:e7:00:69:e3:8d:6a:7d:
33:d9:f3:78:f5:9e:35:97:a4:64:68:fe:35:d9:72:
fd:a3:e0:68:b2:23:91:28:97:3d:01:2b:48:eb:79:
ed:84:da:c3:06:b6:bc:1c:ae:6b:91:dd:e6:2c:82:
ef:0f:f1:4a:c5:4b:06:90:9a:19:83:cd:df:44:cd:
15:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:EE:32:0D:F0:46:48:77:D5:17:45:E3:14:23:1B:55:C8:3B:68:45
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.102.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0e:c7:49:b0:43:f4:9d:4c:3b:74:f1:f0:27:41:2b:1b:c6:f1:
d3:3f:2c:24:af:22:dd:35:f5:14:e2:f6:21:e9:3d:20:25:37:
bf:fc:9c:04:df:3e:b6:54:bf:45:57:3d:7b:80:40:6c:c8:f2:
b9:c0:1f:88:05:43:45:1e:01:6d:9e:1b:66:30:dd:d4:ec:9e:
90:95:3e:12:91:4b:3e:3a:4d:c0:dc:0b:53:f1:eb:a4:5b:ba:
e4:45:c9:4c:b1:e6:d9:56:47:41:2d:5c:00:97:c0:e0:d9:ee:
74:ea:03:81:8e:57:51:74:32:d9:b1:f1:c4:26:1d:48:4e:39:
a9:62:e3:9c:20:dd:fe:e1:8e:34:7d:41:c8:1e:d0:ae:bd:d2:
93:11:03:11:d8:9e:bd:cf:a9:36:cc:c3:c1:89:87:6d:38:f1:
c4:82:ed:c2:cc:f8:d1:6d:d7:64:a2:65:7e:c1:ff:65:f7:79:
ab:7d:05:3a:02:64:8f:93:79:60:d0:c4:ec:c8:73:c7:6d:31:
f6:fa:f0:19:4d:01:a5:c7:ae:a3:14:88:61:e7:70:12:d7:36:
bb:bb:a6:5d:6b:4e:14:72:1e:22:1a:93:b2:90:a2:3d:83:06:
8e:af:45:27:4d:69:12:40:91:64:ab:f4:fe:6a:b5:77:95:87:
bb:89:06:0a
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgISAYzJvChOrz9jPQZQKQDoI0IpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTAzMzIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMWVlMzIwZGYwNDY0ODc3ZDUxNzQ1ZTMxNDIzMWI1NWM4M2I2ODQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jY+6IK8ZAb5r6QNq72QeGkga1Pd
xeFbIeRdagzGscy9RX6tQlwaM5m9WM1lDd7e3EmwgIXHIBCIVFe9sZNxruN4WJWn
VRvF8LxWD+wqrzKeA0tS15am+fYUpPxVeWIVZM4Kgxl9ETg9ofNDRKyu+SCsxlGZ
I2OQ6MSNYDIL/LY0SxrSwqgriyy/+IeYrK/F5x49K0bvfU8y2ZixrPPW4w2g9R3O
4Y0zgT10Y4Lzdw+VTXMcA7YEvqbOVucAaeONan0z2fN49Z41l6RkaP412XL9o+Bo
siORKJc9AStI63nthNrDBra8HK5rkd3mLILvD/FKxUsGkJoZg83fRM0VWwIDAQAB
o4ICgzCCAn8wHQYDVR0OBBYEFLHuMg3wRkh31RdF4xQjG1XIO2hFMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I2LzAzYjQw
NC0yZjY0LTRjN2MtYWM2Yy0yNmViMGM2MjkwYmEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjYvMDNiNDA0
LTJmNjQtNGM3Yy1hYzZjLTI2ZWIwYzYyOTBiYS8xL3NlNHlEZkJHU0hmVkYwWGpG
Q01iVmNnN2FFVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF
BwEHAQH/BA8wDTALBAIAATAFAwMAgWYwDQYJKoZIhvcNAQELBQADggEBAA7HSbBD
9J1MO3Tx8CdBKxvG8dM/LCSvIt019RTi9iHpPSAlN7/8nATfPrZUv0VXPXuAQGzI
8rnAH4gFQ0UeAW2eG2Yw3dTsnpCVPhKRSz46TcDcC1Px66RbuuRFyUyx5tlWR0Et
XACXwODZ7nTqA4GOV1F0Mtmx8cQmHUhOOali45wg3f7hjjR9Qcge0K690pMRAxHY
nr3PqTbMw8GJh2048cSC7cLM+NFt12SiZX7B/2X3eat9BToCZI+TeWDQxOzIc8dt
Mfb68BlNAaXHrqMUiGHncBLXNru7pl1rThRyHiIak7KQoj2DBo6vRSdNaRJAkWSr
9P5qtXeVh7uJBgo=
-----END CERTIFICATE-----
Generated at Fri May 3 14:04:36 2024 by rpki-client on console-fra.rpki-client.org