Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer
File: 1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer (raw, json)
Hash identifier: LQjZV8aoNoUcUCTkF93LaiIpShmJVAs4XB+8yry7Z2s=
Subject key identifier: FB:95:E6:59:4D:C3:70:53:CE:98:BD:58:89:06:35:91:B3:5E:2D:80
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7265A7218C7363B0C99D531BE10021F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:30:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 202421
IP: 185.204.176.0/22
IP: 2a0a:fac0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:5a:72:18:c7:36:3b:0c:99:d5:31:be:10:02:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb95e6594dc37053ce98bd5889063591b35e2d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4b:5e:49:d3:cb:4d:d8:9b:17:6e:93:67:1c:
f5:f2:05:d5:40:02:56:fb:72:92:68:d8:a7:e6:fd:
3c:83:15:e7:4d:6c:a7:5d:5b:2b:54:f5:21:01:de:
c9:aa:e8:42:c3:3a:2e:70:14:28:ec:5a:76:34:ba:
89:2b:2d:e6:c6:10:ea:ca:32:ba:b9:6d:1d:2a:ef:
c5:38:e4:d6:8c:50:54:55:9c:84:47:81:08:ba:5d:
a9:e0:13:55:22:ff:dc:35:e4:6d:47:1e:9d:2a:62:
46:27:4e:55:d3:ed:1f:3b:6e:9a:d2:d3:63:c2:96:
05:94:5b:82:5a:a3:89:d9:9c:f1:54:5b:e8:04:b1:
ab:db:cf:a5:34:33:6d:71:09:c0:e0:e1:8c:04:00:
0d:f1:76:bf:cb:6a:55:1d:00:82:14:09:75:a7:92:
67:14:7f:7a:01:5a:9f:16:68:e1:a8:ab:9c:a0:bf:
49:9d:74:ab:ac:dd:3d:c5:b8:b1:1f:4d:36:af:2c:
ca:ed:e1:22:2c:cc:62:e9:9c:fa:38:8c:a6:24:2a:
2b:e6:fe:14:36:92:be:8d:4c:a7:65:88:4c:71:2e:
15:b5:6e:76:45:d2:60:69:2e:b0:35:f2:6e:93:08:
ce:1a:28:98:4e:ec:1b:5e:7f:33:e7:24:58:5d:77:
39:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:95:E6:59:4D:C3:70:53:CE:98:BD:58:89:06:35:91:B3:5E:2D:80
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.176.0/22
IPv6:
2a0a:fac0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202421
Signature Algorithm: sha256WithRSAEncryption
95:25:96:90:ae:66:02:49:c4:0c:fe:4c:a1:28:97:be:4d:db:
24:60:35:72:45:38:7f:c7:1e:b3:79:61:62:fb:c8:16:23:08:
70:f8:d9:4d:2a:fb:11:9c:a0:4f:b8:ff:9f:c3:64:b9:81:6a:
11:c3:85:36:64:6d:1d:c4:0a:03:d8:5a:6c:6b:e1:b4:7f:ca:
3e:43:8d:35:99:dc:90:3e:05:06:46:86:37:38:c1:31:ca:e8:
2e:6a:24:c8:d5:57:db:d0:b5:50:76:86:00:1d:d7:95:ff:b2:
c4:5c:df:38:6c:18:bd:6c:80:f7:6f:a7:e2:27:d6:a2:04:c7:
c9:54:fe:08:23:3a:29:b8:1e:1f:af:76:4c:e1:bc:27:f2:bd:
ad:b7:b8:3d:ae:c8:ef:d1:64:df:97:42:94:9b:36:05:ba:87:
d4:a7:58:af:64:27:f4:83:07:a0:20:bb:8c:38:75:05:74:95:
35:31:81:3f:0c:43:d2:94:9f:47:fd:8b:e2:59:0f:37:a2:0d:
3f:30:37:c8:16:a5:a9:5f:97:89:20:eb:c1:c7:ba:45:79:0b:
e6:35:ae:99:b7:f3:f3:3f:d5:98:86:11:77:6b:5b:46:89:94:
74:98:34:fb:ba:00:94:43:40:93:4c:40:92:63:2c:77:d7:4a:
ec:9c:46:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:52:15 2024 by rpki-client on console-fra.rpki-client.org