Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sejPc4YgDf2psGfbnHfTBmDXTNo.cer
File: sejPc4YgDf2psGfbnHfTBmDXTNo.cer (raw, json)
Hash identifier: dgaUvCnGYoMThVJBOP63bxtLkGnqJMH6FFY1LaERGL4=
Subject key identifier: B1:E8:CF:73:86:20:0D:FD:A9:B0:67:DB:9C:77:D3:06:60:D7:4C:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2A4F66DA880848B35AD5FB616AFE95
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:33:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 12384
IP: 77.235.224.0/19
IP: 185.173.196.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:4f:66:da:88:08:48:b3:5a:d5:fb:61:6a:fe:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:33:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1e8cf7386200dfda9b067db9c77d30660d74cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:41:73:81:4b:1e:27:fc:ec:27:5c:86:0c:bc:
7c:a4:71:bf:b5:09:bd:57:97:42:83:27:f6:1c:d8:
f7:95:20:6d:c7:72:5d:9f:59:84:5e:39:dd:76:65:
1a:2e:65:38:50:30:69:2a:e9:a8:da:4b:35:13:df:
d3:b2:3d:62:4f:bb:b9:bf:33:66:2c:c9:68:f2:97:
94:9f:46:89:21:26:3b:56:f1:b8:61:a8:86:93:13:
47:1e:22:cc:6c:b8:9f:b4:67:da:ad:28:77:d2:2a:
3d:8e:3c:29:ff:18:c0:52:21:87:98:07:16:6f:85:
1a:b7:99:a2:a8:19:6f:bc:1c:74:8d:c1:e0:c6:7f:
f3:d3:ac:be:03:01:f0:3d:34:47:33:a9:6c:43:98:
a9:49:54:71:a7:34:da:22:44:32:ce:d7:8f:1e:e6:
2d:4f:b0:68:29:a8:79:d6:73:d4:a3:18:d4:0e:c5:
bf:35:76:0c:7e:13:88:aa:97:38:52:1d:4b:37:2a:
ab:fc:70:95:d8:ee:d5:9c:3c:9e:3e:2f:f0:f2:79:
c9:d1:f6:2f:e4:d6:53:99:06:ea:3a:70:73:a5:c4:
26:3c:34:91:a1:ac:88:35:55:34:17:78:37:0f:f6:
45:97:88:71:6a:2e:55:32:7e:97:60:67:22:a9:2b:
7a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E8:CF:73:86:20:0D:FD:A9:B0:67:DB:9C:77:D3:06:60:D7:4C:DA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.235.224.0/19
185.173.196.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12384
Signature Algorithm: sha256WithRSAEncryption
42:cc:da:fc:17:c0:cf:66:e7:b7:ce:2c:20:7e:42:0c:97:5d:
31:d4:8c:3d:af:b7:7f:c7:c6:52:e0:7e:95:db:7e:99:2d:b9:
87:8c:9e:03:d1:a2:5f:25:c5:aa:b1:42:73:c0:a9:a6:08:f3:
b8:de:a5:48:41:5a:d6:f6:62:f5:38:ee:03:bd:f2:d0:2a:8b:
43:aa:5d:92:0c:1e:9d:26:20:8d:37:12:76:92:e0:16:93:95:
ff:af:c4:0f:de:93:00:67:a2:aa:76:00:35:b2:e6:cb:32:28:
b7:08:8f:c7:c8:bc:81:9e:4a:fa:19:aa:89:d2:27:61:a2:ae:
6d:73:e6:f5:e2:be:0a:7c:79:30:ec:d0:0a:66:f9:1e:9c:d0:
2b:8a:d9:9d:69:9f:b5:60:5c:c6:59:75:3c:30:1e:f7:e1:03:
a0:24:6b:80:79:0a:5d:51:5c:c6:de:d1:c8:12:0f:75:25:95:
88:6d:e4:fa:60:cb:78:dc:87:55:cb:31:25:86:0e:15:ac:80:
66:44:9f:16:3a:5f:ef:e8:1b:fd:65:8b:e0:1b:83:3c:01:e3:
e8:20:fc:1b:8e:d2:19:b4:1b:be:60:53:75:84:9d:22:1a:62:
6d:ac:ff:49:b6:6d:13:7a:fd:7d:a9:38:82:56:f6:70:ce:53:
58:41:4b:9e
-----BEGIN CERTIFICATE-----
MIIFmTCCBIGgAwIBAgISAYzKKk9m2ogISLNa1fthav6VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTIzMzM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMWU4Y2Y3Mzg2MjAwZGZkYTliMDY3ZGI5Yzc3ZDMwNjYwZDc0Y2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUFzgUseJ/zsJ1yGDLx8pHG/tQm9
V5dCgyf2HNj3lSBtx3Jdn1mEXjnddmUaLmU4UDBpKumo2ks1E9/Tsj1iT7u5vzNm
LMlo8peUn0aJISY7VvG4YaiGkxNHHiLMbLiftGfarSh30io9jjwp/xjAUiGHmAcW
b4Uat5miqBlvvBx0jcHgxn/z06y+AwHwPTRHM6lsQ5ipSVRxpzTaIkQyztePHuYt
T7BoKah51nPUoxjUDsW/NXYMfhOIqpc4Uh1LNyqr/HCV2O7VnDyePi/w8nnJ0fYv
5NZTmQbqOnBzpcQmPDSRoayINVU0F3g3D/ZFl4hxai5VMn6XYGciqSt6IQIDAQAB
o4ICpTCCAqEwHQYDVR0OBBYEFLHoz3OGIA39qbBn25x30wZg10zaMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVhL2Y0OTlj
ZC1mYWQ2LTRmYjAtOWJlNy00YTc5MDRmZmM4ZTEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWEvZjQ5OWNk
LWZhZDYtNGZiMC05YmU3LTRhNzkwNGZmYzhlMS8xL3NlalBjNFlnRGYycHNHZmJu
SGZUQm1EWFROby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQFTevgAwQCua3EMBkGCCsGAQUFBwEIAQH/BAow
CKAGMAQCAjBgMA0GCSqGSIb3DQEBCwUAA4IBAQBCzNr8F8DPZue3ziwgfkIMl10x
1Iw9r7d/x8ZS4H6V236ZLbmHjJ4D0aJfJcWqsUJzwKmmCPO43qVIQVrW9mL1OO4D
vfLQKotDql2SDB6dJiCNNxJ2kuAWk5X/r8QP3pMAZ6KqdgA1subLMii3CI/HyLyB
nkr6GaqJ0idhoq5tc+b14r4KfHkw7NAKZvkenNAritmdaZ+1YFzGWXU8MB734QOg
JGuAeQpdUVzG3tHIEg91JZWIbeT6YMt43IdVyzElhg4VrIBmRJ8WOl/v6Bv9ZYvg
G4M8AePoIPwbjtIZtBu+YFN1hJ0iGmJtrP9Jtm0Tev19qTiCVvZwzlNYQUue
-----END CERTIFICATE-----
Generated at Sat Nov 23 11:04:31 2024 by rpki-client on console-ams.rpki-client.org