Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sBPFYipfl576yc-xh2I-ShzfAGI.cer
File: sBPFYipfl576yc-xh2I-ShzfAGI.cer (raw, json)
Hash identifier: aSbcTeMx/pec0YBVwaykZgChDqs0yBe5xAiHOuPXaIw=
Subject key identifier: B0:13:C5:62:2A:5F:97:9E:FA:C9:CF:B1:87:62:3E:4A:1C:DF:00:62
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01921BF6EDE4AD89D07E432E6E8FF206CB2C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/11bc81-7563-4545-ac20-de3520cf14af/1/sBPFYipfl576yc-xh2I-ShzfAGI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/11bc81-7563-4545-ac20-de3520cf14af/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 22 Sep 2024 23:00:20 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 56482
IP: 195.5.127.0/24
IP: 2a11:5300::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:1b:f6:ed:e4:ad:89:d0:7e:43:2e:6e:8f:f2:06:cb:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 22 23:00:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b013c5622a5f979efac9cfb187623e4a1cdf0062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9a:f6:57:4f:32:66:37:2a:86:78:79:af:d2:
3e:b7:31:04:3e:c9:56:8b:bf:98:bd:35:44:ad:1b:
4e:06:39:88:8a:7e:a1:a4:2d:7d:22:e7:53:99:a7:
58:48:61:ba:f9:1f:4c:46:db:d8:9c:3a:45:ea:7e:
d0:03:d3:79:d9:fc:d3:84:a4:7b:54:8f:cb:89:a6:
8a:8e:dd:f0:22:d4:42:dd:49:82:c2:63:69:e5:23:
67:9b:61:cd:81:9a:a4:00:a3:23:a4:60:6b:c7:83:
2f:a2:80:8c:02:f9:e3:6b:b1:4f:91:45:da:30:e8:
4b:58:d1:9b:10:35:65:9a:7f:17:aa:5e:9a:20:d3:
e1:94:bd:27:34:6c:bd:ae:0a:17:12:91:99:aa:45:
ea:4f:d6:3a:ae:df:ef:fb:eb:68:d5:22:5f:62:c0:
e1:aa:86:27:dd:24:2c:8a:a8:b6:e0:66:72:9b:58:
f0:d0:bb:52:c3:49:dc:44:c7:c2:73:18:62:65:6f:
36:d4:aa:40:c1:d7:6c:58:c2:84:0f:22:b7:f7:01:
ba:2f:07:b2:2d:3c:38:57:da:cb:53:ca:76:ef:9e:
25:0a:60:44:d4:1b:f3:34:87:68:8e:99:a8:95:01:
5f:92:da:15:47:b0:18:a8:56:fc:09:d5:d2:c8:6b:
2d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:13:C5:62:2A:5F:97:9E:FA:C9:CF:B1:87:62:3E:4A:1C:DF:00:62
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/11bc81-7563-4545-ac20-de3520cf14af/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/11bc81-7563-4545-ac20-de3520cf14af/1/sBPFYipfl576yc-xh2I-ShzfAGI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.5.127.0/24
IPv6:
2a11:5300::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56482
Signature Algorithm: sha256WithRSAEncryption
65:ad:ca:dd:cd:1b:c6:33:7b:df:87:64:d3:33:88:92:b7:17:
3a:03:fc:ff:eb:9f:98:75:d1:9f:8a:06:5e:64:aa:b6:40:59:
de:b7:b6:6a:62:33:d1:7e:a3:73:01:ab:22:3e:37:a7:e6:36:
c9:4b:51:05:ad:3f:8d:3a:c3:20:73:ae:8b:5e:0a:0b:44:0b:
a7:19:45:63:a5:ca:fb:3d:09:46:a3:fc:e9:37:25:6b:4e:d2:
96:47:92:57:88:c3:0f:65:e5:38:4a:fd:50:8d:05:18:7a:31:
35:34:c6:9f:1c:52:a4:f5:ec:a5:14:35:f7:a8:1f:6f:2f:56:
4d:bc:8b:05:a3:d6:38:de:1c:3f:8f:42:a5:1c:ea:8e:58:13:
c9:7c:7a:b7:49:4b:50:82:83:49:39:83:bd:ce:d6:a6:24:28:
4f:77:64:dc:0b:95:9d:48:07:59:d5:83:6b:4d:ca:d4:28:4d:
8f:d7:d6:6b:9d:4d:dd:f8:46:1d:fb:47:d5:57:65:4f:7b:ac:
97:c7:6a:3c:08:4d:37:3f:7a:2a:5e:8e:b6:72:c6:b3:ef:23:
59:fa:cd:74:f3:46:9b:be:03:fe:98:ad:69:9c:47:88:fb:07:
c7:29:a9:f8:97:b2:2e:6b:98:06:67:88:0b:f2:f8:c5:df:13:
4b:1a:e0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:31:40 2024 by rpki-client on console-fra.rpki-client.org