Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5I2jNbByU21Y5rfN9M2xZEW8vDM.cer
File: 5I2jNbByU21Y5rfN9M2xZEW8vDM.cer (raw, json)
Hash identifier: /UeZ3TowqupG8wrIdaCigrem1qSY6YyEI3UX+bDAx90=
Subject key identifier: E4:8D:A3:35:B0:72:53:6D:58:E6:B7:CD:F4:CD:B1:64:45:BC:BC:33
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC348DD288A6E92DF077ACEDD20975407
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:41 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 197107
IP: 178.20.192.0/21
IP: 185.58.88.0/22
IP: 195.225.64.0/22
IP: 2a02:56e0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:dd:28:8a:6e:92:df:07:7a:ce:dd:20:97:54:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e48da335b072536d58e6b7cdf4cdb16445bcbc33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4e:75:f0:62:06:c9:5f:0a:35:01:2c:d5:01:
b8:55:d2:72:3e:4a:cc:d0:3e:c4:93:d6:16:91:b6:
55:66:30:08:e2:90:d7:94:bd:0c:0e:28:23:f6:8d:
0b:b5:8e:6e:bd:4a:b3:bb:2d:da:d8:01:1c:c7:95:
4c:09:9e:00:50:2d:85:7e:c3:48:5d:85:53:25:a6:
4f:b8:d3:ef:d2:ca:15:72:5a:46:59:d0:40:c8:5f:
1a:d6:de:b7:56:5b:f6:84:ca:4f:5b:d6:41:d1:ce:
18:7d:57:ba:84:d1:53:70:fe:ea:b2:34:81:2b:9c:
27:d3:df:a2:ae:49:f6:a6:9d:51:d2:6a:c3:a2:a3:
f9:d0:55:9c:36:6a:f0:e9:bb:46:fd:d0:68:5f:f7:
dd:5a:dc:06:bc:14:e3:bb:e9:3d:85:71:54:5f:6f:
ae:00:81:98:43:b9:d6:2b:fa:86:9f:b5:25:92:63:
1b:9f:14:b6:3a:ac:23:fb:5b:f5:c8:f8:f9:0b:93:
fd:ea:94:91:07:61:a9:9d:98:c8:21:1e:ca:03:99:
7d:24:9b:2f:8b:3a:eb:3c:bf:db:4a:27:74:e3:72:
01:09:d1:9b:93:ff:6e:cf:f8:88:e5:ec:68:73:14:
00:43:ad:1e:6e:3c:c4:9b:ac:54:a8:1f:5a:3d:1f:
6a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:8D:A3:35:B0:72:53:6D:58:E6:B7:CD:F4:CD:B1:64:45:BC:BC:33
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.20.192.0/21
185.58.88.0/22
195.225.64.0/22
IPv6:
2a02:56e0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197107
Signature Algorithm: sha256WithRSAEncryption
9d:71:49:de:17:11:d9:73:a0:1a:cb:45:04:53:37:a7:bc:d6:
1f:29:aa:7c:d1:09:5f:5e:b7:a2:ad:49:17:50:8f:c6:3a:55:
3f:fb:d9:a7:b2:d6:b5:47:c8:5f:1f:32:d7:d0:e5:88:05:9f:
dc:80:3c:23:b7:91:3c:34:64:e1:5e:da:6c:40:36:45:a8:89:
9d:c1:3f:0b:e1:23:ac:81:02:80:6c:bf:1f:51:33:48:e9:46:
f0:40:95:f3:eb:36:04:1b:95:92:a1:a5:a3:23:c3:42:89:fb:
49:3d:aa:d1:dd:e6:30:ba:7f:2a:9f:84:5a:09:3a:dd:80:a6:
a9:df:d8:6f:b4:e6:95:eb:dc:bd:9b:c0:f5:4d:44:e5:2d:00:
e7:93:06:77:97:71:aa:03:98:ec:4a:07:d7:83:f3:83:67:c6:
8e:b7:6e:83:b7:20:5a:96:85:a1:1b:53:82:17:67:94:ff:97:
07:cc:91:ce:fd:19:a6:42:3d:81:c5:13:7f:80:cf:62:de:20:
b1:c1:61:d4:38:96:7c:b7:fe:f6:ec:7e:48:85:6c:7e:a6:75:
d6:ab:9e:4d:ee:14:7e:e9:07:47:e9:46:25:bb:78:fb:fa:59:
72:31:f3:1a:3f:b8:65:ca:21:cf:41:fb:8b:2a:e8:35:f6:8d:
36:83:57:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:39:26 2024 by rpki-client on console-fra.rpki-client.org