Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
File: 5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer (raw, json)
Hash identifier: KVmtbseoGFTjrRdcIXcnurlYg4aVEM/tMkNrdKNaFGU=
Subject key identifier: E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC649A4FC1761E81343DCB0BCBE880842
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:29:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.56.215.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:a4:fc:17:61:e8:13:43:dc:b0:bc:be:88:08:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e7e5c4c99d6131049982af9ad9b86602b2929bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:56:60:0b:e7:b4:30:a7:4a:32:f7:a8:bb:2f:
fa:08:88:34:d2:2c:da:58:70:41:1b:23:97:a0:7a:
d7:32:21:7e:d0:16:df:d3:4e:87:ea:4c:06:5f:f3:
dd:e7:c7:92:ea:66:ad:f9:4b:25:7b:a0:f9:52:1f:
56:c3:af:23:df:b3:75:95:36:f8:df:1d:14:06:a7:
bd:c1:20:3b:dc:37:b9:83:3a:17:33:04:7a:df:fd:
02:a5:44:f1:dd:3e:78:da:19:2b:7c:1d:b7:8a:ae:
43:f0:be:b4:2d:13:77:9c:39:0b:db:64:ee:bf:bf:
48:6a:1e:d8:22:9f:58:4f:1e:e4:71:b1:67:79:d4:
ed:f8:93:ab:c2:5c:66:68:b9:2f:88:8d:c9:14:1d:
a2:2b:c2:58:0f:ae:a4:0e:53:5d:2f:30:97:dd:99:
c6:1e:48:1b:34:b4:0d:f8:3a:eb:a6:bd:26:5a:df:
5a:bd:c0:f8:4b:23:34:30:ed:eb:f0:d6:e9:02:bd:
64:72:da:53:d8:c1:56:8f:91:72:48:34:37:30:0d:
cd:fb:e2:82:90:23:84:d0:47:a8:4e:79:ec:80:8c:
71:02:d4:2b:b1:dc:42:59:c9:f0:8a:cc:25:db:c0:
bc:96:d9:de:94:d4:eb:54:ed:e2:96:3d:3f:b8:23:
b5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.215.0/24
Signature Algorithm: sha256WithRSAEncryption
46:6c:25:48:9f:76:59:4e:07:02:b4:63:fe:d6:d8:4c:de:b4:
eb:3d:8e:cc:a9:20:e2:fb:46:d8:4a:98:58:eb:00:7c:cf:50:
c5:c1:ab:e8:e5:f4:7e:4c:b2:44:06:5e:82:d7:a5:4f:9d:34:
a0:0d:63:70:27:76:5b:3c:a0:e8:10:48:22:45:a4:d9:8b:ab:
9e:8f:1a:6c:a7:91:0b:f1:57:d1:63:13:c1:4a:3b:f1:96:f3:
e5:5d:4c:a4:11:a7:05:37:95:44:20:d2:a2:f6:c4:16:fd:4d:
b6:95:5f:1b:2c:69:d7:69:72:1b:87:7a:aa:03:4a:ec:95:db:
85:2e:42:06:ea:9b:8f:db:26:29:f2:62:31:0b:87:d3:96:b6:
ff:88:cb:b3:4d:ac:9b:4a:f6:8b:44:78:81:c5:f6:fa:c6:09:
01:c1:02:2e:e6:33:05:6f:58:d2:64:a1:0d:7a:94:68:09:d8:
61:20:70:26:c9:18:fc:7d:79:20:c6:70:99:7e:35:90:55:22:
9e:64:1a:9c:b9:36:ce:73:1d:b8:d1:5e:07:a6:39:ea:88:bd:
b8:0b:0b:81:ad:c3:a6:04:16:9d:8c:6b:98:c0:ea:dc:60:24:
a1:47:f1:fa:ff:fc:b9:90:f1:3e:ce:55:bb:ff:02:ef:0a:bf:
d3:d5:d6:ea
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzGSaT8F2HoE0PcsLy+iAhCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTgyOTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlN2U1YzRjOTlkNjEzMTA0OTk4MmFmOWFkOWI4NjYwMmIyOTI5YmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFZgC+e0MKdKMveouy/6CIg00iza
WHBBGyOXoHrXMiF+0Bbf006H6kwGX/Pd58eS6mat+Usle6D5Uh9Ww68j37N1lTb4
3x0UBqe9wSA73De5gzoXMwR63/0CpUTx3T542hkrfB23iq5D8L60LRN3nDkL22Tu
v79Iah7YIp9YTx7kcbFnedTt+JOrwlxmaLkviI3JFB2iK8JYD66kDlNdLzCX3ZnG
HkgbNLQN+Drrpr0mWt9avcD4SyM0MO3r8NbpAr1kctpT2MFWj5FySDQ3MA3N++KC
kCOE0EeoTnnsgIxxAtQrsdxCWcnwiswl28C8ltnelNTrVO3ilj0/uCO14wIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFOflxMmdYTEEmYKvmtm4ZgKykpu4MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U3L2U3MDlk
ZS02YjJkLTRiZTQtODUwMy1hMWU0ODc3Y2VlNDgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcvZTcwOWRl
LTZiMmQtNGJlNC04NTAzLWExZTQ4NzdjZWU0OC8xLzUtWEV5WjFoTVFTWmdxLWEy
YmhtQXJLU203Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwjjXMA0GCSqGSIb3DQEBCwUAA4IBAQBGbCVI
n3ZZTgcCtGP+1thM3rTrPY7MqSDi+0bYSphY6wB8z1DFwavo5fR+TLJEBl6C16VP
nTSgDWNwJ3ZbPKDoEEgiRaTZi6uejxpsp5EL8VfRYxPBSjvxlvPlXUykEacFN5VE
INKi9sQW/U22lV8bLGnXaXIbh3qqA0rslduFLkIG6puP2yYp8mIxC4fTlrb/iMuz
TaybSvaLRHiBxfb6xgkBwQIu5jMFb1jSZKENepRoCdhhIHAmyRj8fXkgxnCZfjWQ
VSKeZBqcuTbOcx240V4HpjnqiL24CwuBrcOmBBadjGuYwOrcYCShR/H6//y5kPE+
zlW7/wLvCr/T1dbq
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:57:49 2024 by rpki-client on console-fra.rpki-client.org