Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5FudrqoDQlXqMxFPWLiMHD48fK8.cer
File: 5FudrqoDQlXqMxFPWLiMHD48fK8.cer (raw, json)
Hash identifier: XLJQWObWIxC+GqhxOrNERrKXkxoQU1joLjqEEWapgyk=
Subject key identifier: E4:5B:9D:AE:AA:03:42:55:EA:33:11:4F:58:B8:8C:1C:3E:3C:7C:AF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B778DB947B679B19B3BF77725AFC70
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/4d6b88-20c6-4c42-8799-4b917592357c/1/5FudrqoDQlXqMxFPWLiMHD48fK8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/4d6b88-20c6-4c42-8799-4b917592357c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:29:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 41632
IP: 195.138.215.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 14:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:78:db:94:7b:67:9b:19:b3:bf:77:72:5a:fc:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e45b9daeaa034255ea33114f58b88c1c3e3c7caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2c:e5:7d:d8:51:c9:50:63:6d:52:b9:3d:4c:
da:c9:54:80:30:4b:4a:90:f9:c8:0e:9d:97:00:e7:
8a:bd:b4:e7:34:19:f4:21:c8:5b:23:75:41:41:de:
79:9d:78:6b:53:1c:e0:a6:4e:f9:a6:9a:65:b0:c8:
dd:5e:ee:d3:9f:78:2f:9f:11:17:58:a8:dc:22:08:
61:ee:86:1b:d9:ba:ad:7f:99:c5:b5:39:3f:ab:df:
44:61:a3:1b:4c:cd:b4:f8:8f:88:16:7e:d7:de:cc:
14:87:18:a1:8d:a4:db:22:d9:36:45:a8:d4:79:03:
48:1d:b4:ec:8e:dc:a6:67:7f:b8:0e:2d:ec:58:d2:
5f:81:38:7c:bd:ca:ce:19:9c:7d:2c:6e:22:1a:03:
5d:f4:09:f8:af:a3:4e:25:23:6d:d9:20:1e:89:f6:
05:11:94:9a:ce:42:ff:2a:77:4c:2f:b8:62:94:c9:
92:81:2b:6f:f0:c2:ff:f3:60:de:f3:5b:98:a0:b5:
9e:dc:36:34:0f:00:75:4c:9f:3b:88:36:ec:3a:b1:
cd:03:b2:5d:14:f1:93:98:f5:1b:a7:1e:8b:a3:5f:
ce:bf:d2:38:42:d7:c4:05:89:7d:9e:c0:05:c3:98:
88:cd:23:1a:fe:8b:84:72:5a:0f:25:7e:62:6f:15:
de:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5B:9D:AE:AA:03:42:55:EA:33:11:4F:58:B8:8C:1C:3E:3C:7C:AF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/4d6b88-20c6-4c42-8799-4b917592357c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/4d6b88-20c6-4c42-8799-4b917592357c/1/5FudrqoDQlXqMxFPWLiMHD48fK8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.138.215.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41632
Signature Algorithm: sha256WithRSAEncryption
20:09:8f:24:bb:ba:11:55:98:63:d5:27:81:a0:d3:a5:97:ba:
be:5c:06:b4:b9:6b:19:3b:19:29:8b:69:52:e8:4b:2f:32:be:
0e:e1:97:c6:b5:9f:ba:56:bc:d9:58:55:92:15:97:d0:9f:44:
15:35:ca:2a:ac:7b:ed:1c:a4:a7:10:65:d3:f3:2c:06:03:7e:
07:e5:7e:2c:cb:63:b8:5a:f8:71:a9:bb:4a:7b:c5:b5:94:e0:
fb:f4:d6:6c:d8:5b:b3:af:e4:88:8f:2e:5c:49:10:df:2f:83:
d1:65:0c:3c:f2:b4:f8:24:52:75:cc:38:82:23:7d:dc:c0:ed:
2d:e8:f2:06:9f:42:f2:1a:ad:37:ec:21:a1:36:33:15:50:c9:
c6:06:c6:f5:81:c1:7f:45:b6:c5:91:7c:cf:4d:52:e6:4c:cc:
c7:b3:a3:50:59:4f:1f:ff:76:f8:98:ee:90:c1:5f:2f:a0:1e:
a7:dc:2e:ec:59:1f:6d:46:76:b5:74:d8:92:0f:9b:42:3c:2f:
f1:e6:f3:59:34:de:0a:4b:f5:77:34:32:cf:96:aa:eb:63:69:
de:fb:c7:af:22:92:69:45:3b:80:18:a0:a1:eb:9b:e8:0c:cd:
f2:0a:98:9e:c1:d6:03:36:d7:e8:22:3b:e3:8f:3c:01:ab:b8:
a1:2e:7f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 22:56:16 2024 by rpki-client on console-fra.rpki-client.org