Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5SBEb3n_wtfDqe80DOneJXI6cZo.cer
File: 5SBEb3n_wtfDqe80DOneJXI6cZo.cer (raw, json)
Hash identifier: doUvz4gaIHWai0Aj1BMQ8svT8oymPkruYotqGtpky7s=
Subject key identifier: E5:20:44:6F:79:FF:C2:D7:C3:A9:EF:34:0C:E9:DE:25:72:3A:71:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018FC3F4354F24939519D558314A4B60FE8D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 29 May 2024 10:45:12 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 33993
AS: 35539
AS: 60681
AS: 211563
IP: 31.134.192.0/21
IP: 46.160.192.0/18
IP: 93.95.160.0/21
IP: 93.123.128.0/17
IP: 95.131.208.0/21
IP: 185.4.56.0/22
IP: 185.27.80.0/22
IP: 217.194.240.0/20
IP: 2001:a58::/32
IP: 2a01:5fc0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c3:f4:35:4f:24:93:95:19:d5:58:31:4a:4b:60:fe:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 29 10:45:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e520446f79ffc2d7c3a9ef340ce9de25723a719a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:49:a2:40:8f:76:0d:ac:8b:11:67:c2:3e:40:
e2:b7:ba:34:91:16:72:0d:8f:7f:63:8a:b3:c3:c4:
78:f3:f5:db:c5:47:d4:6f:a5:1b:9e:41:52:56:c2:
ac:6f:6d:36:18:08:9e:6b:63:a4:50:05:e1:a7:37:
2f:92:e6:72:ee:b4:e1:ad:f7:f6:29:d1:df:0c:a8:
45:5e:1a:15:6c:99:15:60:20:2d:e0:c7:7b:96:9c:
39:5b:2e:e5:83:07:5f:6e:64:48:d3:a7:cb:86:a4:
5b:17:12:c1:3f:34:0e:d7:ac:fc:45:0c:44:1a:ad:
66:91:46:f4:a3:1d:da:26:df:6e:a4:32:dd:fe:98:
5a:25:36:03:a2:1d:34:51:04:be:bf:92:b4:e5:d6:
4b:a9:8a:b5:8a:37:f4:cf:22:eb:cf:29:a5:09:d2:
23:f7:9d:e2:3b:c3:c3:5e:7d:b0:f4:6b:3f:8f:88:
94:e5:1b:c5:72:a7:86:74:63:98:a5:78:43:a5:47:
03:ec:11:c7:a0:c5:60:e0:e3:57:ec:a8:9b:48:85:
8c:4a:5b:e4:35:76:e6:f9:f9:1b:6b:78:ea:72:70:
ed:fd:bc:b7:36:14:62:67:04:5d:93:f6:f9:8e:9c:
cd:3e:4f:11:eb:4b:f1:77:b0:4e:cf:05:da:2a:92:
a6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:20:44:6F:79:FF:C2:D7:C3:A9:EF:34:0C:E9:DE:25:72:3A:71:9A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.134.192.0/21
46.160.192.0/18
93.95.160.0/21
93.123.128.0/17
95.131.208.0/21
185.4.56.0/22
185.27.80.0/22
217.194.240.0/20
IPv6:
2001:a58::/32
2a01:5fc0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
33993
35539
60681
211563
Signature Algorithm: sha256WithRSAEncryption
74:76:5e:6a:37:88:56:c1:72:d5:65:91:c4:a2:92:ca:58:7e:
d5:ef:59:23:65:bc:45:96:39:78:af:4c:69:0e:64:2a:90:15:
b4:cf:50:d1:e3:6b:c1:6b:60:b7:e4:25:0c:90:7f:0b:c4:bb:
ef:a2:1c:b9:78:b8:5c:fb:c0:3d:17:6f:7a:2d:64:dd:a7:1d:
30:cf:4a:7e:46:3a:c8:c6:a2:47:bc:42:d4:ac:10:ac:39:b1:
4c:de:ef:5c:60:f9:e4:e1:1a:3d:08:47:f7:8a:92:d8:59:59:
3f:f5:b4:90:a5:59:4e:5f:97:cf:8f:7d:f2:1b:9d:5c:df:a2:
53:d7:e0:96:e6:ab:35:f1:5e:3f:0f:3a:98:29:cb:aa:83:f8:
ce:99:a3:33:11:b7:a8:5f:fa:81:a5:da:37:b7:2b:7e:6e:1f:
af:05:71:16:9c:9f:ba:cd:86:3c:96:39:b9:9a:e6:b8:19:37:
eb:dc:d6:e9:57:cf:1c:0f:6e:f0:54:e8:75:f7:2e:f0:00:b1:
93:ef:e8:34:38:0d:c8:96:a7:15:04:cf:ae:b5:62:5c:22:65:
85:c6:48:34:7b:0e:86:98:b8:37:01:b6:84:29:64:e8:d7:4b:
d0:7d:18:c0:af:1b:86:25:d1:fe:0a:89:90:91:9b:0d:ff:a5:
e6:31:9f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 02:58:02 2024 by rpki-client on console-fra.rpki-client.org