Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xeGbJUl_YB90e-awtclcAgX6qcU.cer
File: xeGbJUl_YB90e-awtclcAgX6qcU.cer (raw, json)
Hash identifier: 8+wuB8ThLnq/Q/D9Pk0I53r8xfJbYa+1ItRtU1R33TY=
Subject key identifier: C5:E1:9B:25:49:7F:60:1F:74:7B:E6:B0:B5:C9:5C:02:05:FA:A9:C5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E37F7C64FB09BB3ED7A8EEC93C077F6DB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/456de2-99ed-47ae-aa5e-0b1dc736d9dd/1/xeGbJUl_YB90e-awtclcAgX6qcU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/456de2-99ed-47ae-aa5e-0b1dc736d9dd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 13 Mar 2024 13:19:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.48.95.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:37:f7:c6:4f:b0:9b:b3:ed:7a:8e:ec:93:c0:77:f6:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 13 13:19:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c5e19b25497f601f747be6b0b5c95c0205faa9c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2d:9f:7c:6d:ff:44:f1:1c:dc:ae:06:67:9a:
bd:9c:2c:28:4d:18:60:7c:07:fd:f3:bd:71:d7:d1:
46:7e:18:ea:df:85:2e:95:23:fa:d0:f8:62:48:04:
b3:0a:e1:8c:92:43:66:ee:a7:50:30:0b:0b:79:dd:
b7:b1:7a:92:8c:70:88:d9:87:24:59:05:9f:18:a0:
3d:75:b8:e4:61:bb:06:8e:75:d2:9e:91:28:ef:dc:
76:40:87:77:b2:7a:b8:c8:73:68:4e:03:ef:2a:de:
cd:a6:f0:0c:79:1f:0a:17:fd:1a:74:d7:7d:8a:7b:
3a:f9:c1:a1:45:f8:17:a0:af:af:98:bd:ac:5e:38:
8e:93:09:0e:ec:60:04:89:1f:cd:05:c2:8a:31:ca:
20:66:9b:d6:1f:13:83:af:fa:04:03:04:cf:10:79:
f8:98:61:76:db:2e:1c:05:72:e1:3f:f1:dd:16:36:
b9:81:71:2f:d8:cc:5b:c9:17:3e:73:76:45:41:be:
c6:a7:6b:5c:17:f7:b7:b0:77:30:ce:2a:57:e4:5d:
a5:6c:f0:e2:8b:77:e3:fa:b6:97:55:e5:49:a3:b7:
55:26:82:3b:68:61:07:c6:a7:97:0e:2f:40:89:4c:
84:ad:12:a1:89:a3:49:6c:6c:1c:7a:89:1b:23:21:
d4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E1:9B:25:49:7F:60:1F:74:7B:E6:B0:B5:C9:5C:02:05:FA:A9:C5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/456de2-99ed-47ae-aa5e-0b1dc736d9dd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/456de2-99ed-47ae-aa5e-0b1dc736d9dd/1/xeGbJUl_YB90e-awtclcAgX6qcU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.95.0/24
Signature Algorithm: sha256WithRSAEncryption
62:a4:ab:7c:51:29:73:d8:a5:5c:91:45:b4:53:4b:26:c8:08:
dd:bb:74:5d:e7:bf:a7:12:81:1e:71:d0:d5:3b:bf:46:73:38:
a5:04:da:ec:30:88:a6:76:c5:27:43:85:35:3c:de:36:87:b3:
c0:b2:ff:97:8e:27:dd:0f:de:67:f3:d6:81:58:66:bf:2d:ca:
53:15:d4:f2:71:55:4e:c8:f3:f2:76:64:cc:e9:55:a8:12:3d:
7a:3b:d6:de:c9:98:5f:14:76:0f:16:16:33:47:52:4b:03:4c:
17:ab:62:79:f6:42:70:d7:05:f9:9e:51:fe:1a:a4:fa:38:22:
21:e8:47:40:7e:7f:7b:87:5d:da:a7:a0:1f:78:46:c9:30:e5:
f1:fb:49:9a:43:c1:1a:dc:3a:5b:94:b5:53:21:ee:7e:52:b8:
22:1e:b1:58:dc:b8:83:39:72:fa:47:7f:fa:33:9e:8e:90:88:
79:7f:ff:4d:7c:db:8c:40:f3:70:33:6c:07:3a:a7:d9:3e:ca:
2d:81:e3:a5:21:7c:f6:4f:79:9b:59:2c:20:63:c0:f8:af:55:
53:8c:35:49:5c:38:10:8d:27:b8:29:aa:13:37:56:6b:77:fd:
10:89:84:33:3d:dc:63:d7:64:b1:e8:a2:e7:4f:4f:0f:65:fd:
10:5c:b4:02
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAY4398ZPsJuz7XqO7JPAd/bbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMzEzMTMxOTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNWUxOWIyNTQ5N2Y2MDFmNzQ3YmU2YjBiNWM5NWMwMjA1ZmFhOWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsS2ffG3/RPEc3K4GZ5q9nCwoTRhg
fAf9871x19FGfhjq34UulSP60PhiSASzCuGMkkNm7qdQMAsLed23sXqSjHCI2Yck
WQWfGKA9dbjkYbsGjnXSnpEo79x2QId3snq4yHNoTgPvKt7NpvAMeR8KF/0adNd9
ins6+cGhRfgXoK+vmL2sXjiOkwkO7GAEiR/NBcKKMcogZpvWHxODr/oEAwTPEHn4
mGF22y4cBXLhP/HdFja5gXEv2MxbyRc+c3ZFQb7Gp2tcF/e3sHcwzipX5F2lbPDi
i3fj+raXVeVJo7dVJoI7aGEHxqeXDi9AiUyErRKhiaNJbGwceokbIyHUQQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFMXhmyVJf2AfdHvmsLXJXAIF+qnFMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU4LzQ1NmRl
Mi05OWVkLTQ3YWUtYWE1ZS0wYjFkYzczNmQ5ZGQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgvNDU2ZGUy
LTk5ZWQtNDdhZS1hYTVlLTBiMWRjNzM2ZDlkZC8xL3hlR2JKVWxfWUI5MGUtYXd0
Y2xjQWdYNnFjVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwjBfMA0GCSqGSIb3DQEBCwUAA4IBAQBipKt8
USlz2KVckUW0U0smyAjdu3Rd57+nEoEecdDVO79GczilBNrsMIimdsUnQ4U1PN42
h7PAsv+XjifdD95n89aBWGa/LcpTFdTycVVOyPPydmTM6VWoEj16O9beyZhfFHYP
FhYzR1JLA0wXq2J59kJw1wX5nlH+GqT6OCIh6EdAfn97h13ap6AfeEbJMOXx+0ma
Q8Ea3DpblLVTIe5+UrgiHrFY3LiDOXL6R3/6M56OkIh5f/9NfNuMQPNwM2wHOqfZ
PsotgeOlIXz2T3mbWSwgY8D4r1VTjDVJXDgQjSe4KaoTN1Zrd/0QiYQzPdxj12Sx
6KLnT08PZf0QXLQC
-----END CERTIFICATE-----
Generated at Fri May 3 03:51:12 2024 by rpki-client on console-fra.rpki-client.org