Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5LqY_D6-gGx4Llifr1KVwyWSEqg.cer
File: 5LqY_D6-gGx4Llifr1KVwyWSEqg.cer (raw, json)
Hash identifier: +dIQNQUVFFxpXlXJNBnCJPER7+kt+SxobhOfgNAibkg=
Subject key identifier: E4:BA:98:FC:3E:BE:80:6C:78:2E:58:9F:AF:52:95:C3:25:92:12:A8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018FBAFF55E9F5CEB22F4791C8398B69DDEC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 27 May 2024 17:00:46 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215131
IP: 2001:67c:e5c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ba:ff:55:e9:f5:ce:b2:2f:47:91:c8:39:8b:69:dd:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 27 17:00:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e4ba98fc3ebe806c782e589faf5295c3259212a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8a:af:3f:37:aa:6b:f9:bc:3c:40:1f:af:31:
f2:5d:e7:20:b6:2b:8a:cb:df:6c:cf:0c:05:60:9f:
c9:eb:fb:6e:e6:8b:ac:7f:18:51:6b:81:c0:5e:c5:
ce:43:1d:a6:f7:2b:25:f1:93:14:cb:72:63:e3:26:
68:d5:23:a8:db:27:c5:14:f2:ad:67:8f:3f:f1:be:
47:db:1f:33:f7:8c:e1:91:1b:f4:43:87:d4:c9:57:
f6:c8:99:c5:b5:2a:1e:ad:65:3f:d4:aa:ec:a5:db:
f4:ba:3c:d3:57:61:95:d3:43:e1:fd:4a:31:b7:9b:
46:96:b4:64:0e:8c:f3:c8:4a:df:3c:65:1c:81:e3:
4c:fb:65:fc:7c:1a:49:7f:1d:ec:86:34:2c:b4:cf:
be:45:91:2c:f1:24:04:41:76:b6:d3:e8:55:71:71:
bd:6c:ab:f0:bd:47:32:e0:30:9d:7b:8e:46:43:83:
e5:ae:cd:dd:11:dd:c0:7a:16:e5:3a:97:b3:96:bb:
43:7a:09:60:80:93:8c:bb:25:17:ab:ab:eb:28:3c:
5b:a3:08:83:0a:01:af:87:af:aa:1a:b4:7f:4f:3c:
d6:36:60:f9:18:7e:be:8a:75:6c:b5:01:57:99:46:
cd:5c:07:47:5b:2c:ca:ee:50:a4:eb:ef:21:ff:3d:
d1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:BA:98:FC:3E:BE:80:6C:78:2E:58:9F:AF:52:95:C3:25:92:12:A8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:e5c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215131
Signature Algorithm: sha256WithRSAEncryption
a3:b5:ed:16:2c:3d:87:15:e8:7f:31:b2:de:62:53:aa:84:f8:
a8:2c:a5:ef:ea:5f:60:fa:0b:90:bf:d2:b3:76:43:17:97:89:
f2:7c:18:30:a8:28:31:7c:c9:c7:a2:6a:d2:87:54:25:11:5b:
27:e1:5a:89:f2:83:b9:9a:0f:4a:e7:22:a4:a7:20:e2:77:c3:
aa:96:99:48:92:72:15:a6:b1:1c:8d:7f:d6:c4:d7:d3:65:61:
b2:6f:4f:f3:90:ef:68:03:ea:4d:67:02:9a:84:3a:a3:6a:2c:
06:ba:8d:2b:ef:8f:56:f4:e6:d7:81:30:f6:6b:de:2c:8c:e7:
aa:9e:e9:d6:f3:c9:e2:70:6a:6c:4e:e5:ae:6a:8a:eb:68:06:
37:5b:03:01:86:34:78:d9:7c:84:e7:d5:01:2d:ec:52:80:9f:
73:f9:e7:23:33:76:5f:70:c2:99:5c:58:c6:8e:e1:6b:94:5b:
28:00:dd:0a:c1:2e:a4:a8:37:a1:32:8d:02:03:20:cb:94:ab:
ee:48:b2:8a:1c:f0:96:49:d2:3e:ad:12:f2:1b:9a:22:e1:a2:
c4:0a:0f:c7:fe:52:3b:94:76:54:02:3e:a4:18:24:1f:81:fc:
9b:9e:7b:fd:c0:3b:e9:51:62:67:97:18:75:33:e5:2c:28:e3:
4d:83:a9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 20:54:20 2024 by rpki-client on console-fra.rpki-client.org