Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5Xcx6oV7kDqkCo5f2NiERlBbUjM.cer
File: 5Xcx6oV7kDqkCo5f2NiERlBbUjM.cer (raw, json)
Hash identifier: 8nKKV71c+U6p13U5AtnzUkUlS6rbJVmr+ADE+jlchqU=
Subject key identifier: E5:77:31:EA:85:7B:90:3A:A4:0A:8E:5F:D8:D8:84:46:50:5B:52:33
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B8155EFA086DCF66CA48B12A5BAE7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:31:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 1890
IP: 193.67.0.0/16
IP: 193.78.0.0/15
IP: 194.178.0.0/16
IP: 194.229.0.0/16
IP: 194.247.96.0/19
IP: 195.108.0.0/15
IP: 195.193.0.0/16
IP: 212.136.0.0/16
IP: 212.153.0.0/16
IP: 212.206.0.0/16
IP: 213.53.0.0/16
IP: 2a02:2aa8::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 14:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:81:55:ef:a0:86:dc:f6:6c:a4:8b:12:a5:ba:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:31:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e57731ea857b903aa40a8e5fd8d88446505b5233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5f:c9:d7:ea:dd:a0:e0:b6:d1:57:71:20:66:
51:34:97:8c:64:82:62:9f:6d:bf:f3:95:0d:10:bc:
57:5e:da:98:99:7b:80:73:5e:3b:7c:d5:50:76:79:
ab:96:8b:17:97:38:a3:9f:a5:81:63:2c:10:72:6b:
e2:cd:74:e7:79:b7:1e:0c:19:a7:98:57:8a:21:45:
1f:b8:7c:1c:59:1c:13:ff:0d:24:5b:e5:00:61:53:
d6:75:8e:2d:48:4e:7c:96:19:20:ad:f4:0a:34:19:
72:c9:97:81:e8:4f:e0:af:4c:19:ae:d0:fe:ea:5e:
64:ce:8b:24:a1:bf:31:31:77:2e:fe:8c:92:e5:19:
bc:a5:e6:e7:b3:7e:bd:cb:8c:2c:11:68:d8:c9:bd:
b7:55:f9:e1:13:f1:0a:62:5f:d1:7d:79:4e:63:40:
c6:32:92:36:74:9f:46:3e:b7:26:52:72:b8:01:f9:
9b:34:ad:e4:43:05:38:44:8d:59:dd:eb:a3:4e:de:
ca:bb:d1:d2:c0:b3:bd:0e:fc:22:0d:da:db:76:0b:
5b:56:11:bd:c6:6a:5d:7f:0a:4e:ca:1e:10:f4:b3:
bd:ed:f7:24:1d:54:b8:7e:10:4e:e4:62:e3:ab:77:
97:f8:0b:0a:ad:bc:ad:1d:2c:67:89:bb:70:47:e2:
7c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:77:31:EA:85:7B:90:3A:A4:0A:8E:5F:D8:D8:84:46:50:5B:52:33
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.67.0.0/16
193.78.0.0/15
194.178.0.0/16
194.229.0.0/16
194.247.96.0/19
195.108.0.0/15
195.193.0.0/16
212.136.0.0/16
212.153.0.0/16
212.206.0.0/16
213.53.0.0/16
IPv6:
2a02:2aa8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
1890
Signature Algorithm: sha256WithRSAEncryption
6c:9b:cf:96:4a:e4:64:68:c6:de:4b:07:33:40:db:37:6d:3a:
5e:cf:63:c6:b6:83:64:4b:7d:19:b1:64:8b:34:a3:30:e6:51:
10:76:71:3d:5d:cb:5d:76:86:78:bc:a7:77:de:2e:6c:b5:04:
e4:23:68:57:24:54:27:52:d1:94:27:23:58:6c:46:70:dd:5f:
da:03:7a:09:ed:f2:f6:e7:ff:2d:a2:84:86:80:2e:32:1c:b1:
d7:23:25:7e:b0:8e:b0:6d:71:93:c9:f2:93:30:6d:12:d7:5d:
a0:1f:9b:7d:3f:09:45:40:e2:24:e6:1e:d7:25:79:c7:66:9c:
78:23:66:3f:70:0b:b5:5f:f4:3a:40:f7:96:d2:d6:8b:ce:a8:
2d:ea:87:13:97:5a:5d:41:86:51:b0:a4:9f:12:32:a9:08:6b:
af:4c:e0:fe:af:2a:cd:89:bc:6f:3a:c0:06:ac:09:39:33:1c:
0e:91:3d:8f:0a:75:fd:15:91:2c:bd:34:30:d0:ae:88:88:4b:
60:b0:f7:74:68:0f:00:33:c4:80:c6:c6:6c:3c:ee:af:a2:58:
c2:ea:85:d1:14:fa:9d:fa:b4:bc:8a:fb:1b:ff:76:82:5d:73:
7c:0c:58:09:c3:ad:f2:d9:ec:20:d3:d1:fe:2f:20:28:cc:95:
a4:fb:64:ab
-----BEGIN CERTIFICATE-----
MIIF1DCCBLygAwIBAgISAYzGS4FV76CG3PZspIsSpbrnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTgzMTI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTc3MzFlYTg1N2I5MDNhYTQwYThlNWZkOGQ4ODQ0NjUwNWI1MjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArV/J1+rdoOC20VdxIGZRNJeMZIJi
n22/85UNELxXXtqYmXuAc147fNVQdnmrlosXlzijn6WBYywQcmvizXTnebceDBmn
mFeKIUUfuHwcWRwT/w0kW+UAYVPWdY4tSE58lhkgrfQKNBlyyZeB6E/gr0wZrtD+
6l5kzoskob8xMXcu/oyS5Rm8pebns369y4wsEWjYyb23VfnhE/EKYl/RfXlOY0DG
MpI2dJ9GPrcmUnK4AfmbNK3kQwU4RI1Z3eujTt7Ku9HSwLO9DvwiDdrbdgtbVhG9
xmpdfwpOyh4Q9LO97fckHVS4fhBO5GLjq3eX+AsKrbytHSxnibtwR+J8OQIDAQAB
o4IC4DCCAtwwHQYDVR0OBBYEFOV3MeqFe5A6pAqOX9jYhEZQW1IzMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NhL2FmYmI2
Mi0wMDk4LTQyYjMtODFhZS1mMGJiMmUxNWY2ZDAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2EvYWZiYjYy
LTAwOTgtNDJiMy04MWFlLWYwYmIyZTE1ZjZkMC8xLzVYY3g2b1Y3a0Rxa0NvNWYy
TmlFUmxCYlVqTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGAGCCsGAQUF
BwEHAQH/BFEwTzA+BAIAATA4AwMAwUMDAwHBTgMDAMKyAwMAwuUDBAXC92ADAwHD
bAMDAMPBAwMA1IgDAwDUmQMDANTOAwMA1TUwDQQCAAIwBwMFACoCKqgwGQYIKwYB
BQUHAQgBAf8ECjAIoAYwBAICB2IwDQYJKoZIhvcNAQELBQADggEBAGybz5ZK5GRo
xt5LBzNA2zdtOl7PY8a2g2RLfRmxZIs0ozDmURB2cT1dy112hni8p3feLmy1BOQj
aFckVCdS0ZQnI1hsRnDdX9oDegnt8vbn/y2ihIaALjIcsdcjJX6wjrBtcZPJ8pMw
bRLXXaAfm30/CUVA4iTmHtclecdmnHgjZj9wC7Vf9DpA95bS1ovOqC3qhxOXWl1B
hlGwpJ8SMqkIa69M4P6vKs2JvG86wAasCTkzHA6RPY8Kdf0VkSy9NDDQroiIS2Cw
93RoDwAzxIDGxmw87q+iWMLqhdEU+p36tLyK+xv/doJdc3wMWAnDrfLZ7CDT0f4v
ICjMlaT7ZKs=
-----END CERTIFICATE-----
Generated at Wed May 22 23:53:36 2024 by rpki-client on console-ams.rpki-client.org