Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5QxErpgedJLTuiHihHIIAYA5jWQ.cer
File: 5QxErpgedJLTuiHihHIIAYA5jWQ.cer (raw, json)
Hash identifier: D6QMiAKUCGnBQbTl+BIC0HSL4r+QtEj796V0TV7wk98=
Subject key identifier: E5:0C:44:AE:98:1E:74:92:D3:BA:21:E2:84:72:08:01:80:39:8D:64
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC42456BC52790A54799FBACB73E1A102
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 20932
AS: 39381
IP: 185.68.204.0/22
IP: 194.11.221.0/24
IP: 194.147.245.0/24
IP: 217.169.128.0/19
IP: 2001:67c:2fe0::/48
IP: 2001:41e0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Apr 2024 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:56:bc:52:79:0a:54:79:9f:ba:cb:73:e1:a1:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e50c44ae981e7492d3ba21e28472080180398d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:eb:e7:bc:97:52:7b:4b:30:f6:d6:b7:cf:a1:
60:7e:46:42:01:84:33:d9:47:2c:dc:84:ba:55:51:
c0:a4:56:cb:f2:95:9d:56:c0:de:54:55:be:88:1f:
81:76:94:92:c2:13:8b:d4:cd:52:15:82:88:64:8e:
8b:c7:4b:31:79:08:ac:4a:53:f1:d8:42:74:c6:b2:
bc:d1:24:8a:4a:87:bf:b1:8d:c8:7b:7b:54:12:bb:
d8:3a:8c:69:67:5d:a8:c7:fb:27:4b:b0:c1:e0:16:
27:46:1c:4a:ae:54:2a:0b:c9:60:a1:28:d1:95:16:
82:93:25:87:1d:c6:47:72:b6:b9:87:b5:96:65:b5:
7d:29:e7:8e:87:43:1a:bc:0c:41:44:f1:1b:31:57:
30:cd:b8:b8:fc:09:b1:68:42:34:56:78:db:93:2a:
cc:e9:14:e7:8e:d9:41:c5:75:c0:9a:ec:32:a9:ec:
5e:b1:57:68:2e:33:3a:a4:ce:50:71:f5:38:68:2a:
b6:0e:02:ab:5c:6a:d0:eb:3d:f2:0d:07:05:95:99:
7b:28:46:ec:bd:91:c9:1f:df:df:15:53:b8:db:8b:
20:0a:3b:ea:35:04:67:47:3e:04:e9:1e:7b:f1:e4:
bf:76:6d:87:dd:53:01:e0:b8:2d:d9:6a:c2:42:f0:
14:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:0C:44:AE:98:1E:74:92:D3:BA:21:E2:84:72:08:01:80:39:8D:64
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.204.0/22
194.11.221.0/24
194.147.245.0/24
217.169.128.0/19
IPv6:
2001:67c:2fe0::/48
2001:41e0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20932
39381
Signature Algorithm: sha256WithRSAEncryption
26:30:50:eb:e9:4c:c2:0d:a4:dc:dc:51:6a:fa:b7:ca:ba:7b:
f3:77:e9:cd:d8:c2:5e:78:76:26:81:4a:58:6d:f4:fe:0a:91:
f6:a6:f6:f7:55:ee:4d:92:09:a7:b2:2b:bb:08:0d:58:2e:41:
3d:dd:ff:75:ad:84:c5:6e:f1:86:7e:c7:89:43:c5:6f:cb:a0:
57:0b:7a:df:c2:b4:1b:c8:8c:28:64:7c:a6:2f:6d:84:e2:a6:
2e:3e:b1:32:cb:67:2a:92:c3:5a:77:2a:ac:d4:bd:7d:1a:c7:
9a:50:b4:22:42:d1:61:24:83:a8:da:28:51:33:78:8f:36:7e:
e2:37:9a:5f:1a:e1:68:38:1e:e4:40:c1:28:6f:fb:bb:8c:8b:
c9:8c:55:d7:83:f6:72:1b:b3:1a:21:3e:80:d4:bb:a1:9c:64:
2c:43:05:e0:94:4c:d0:de:e1:16:0d:56:d6:99:a9:7f:da:ee:
2c:cf:68:d2:aa:55:03:12:38:bc:21:2c:54:24:b3:6b:f0:3b:
23:8d:24:8d:43:a0:93:3c:1e:21:fd:5a:d8:7c:a0:8f:af:35:
ad:d8:91:b1:f9:19:06:2f:97:dc:99:90:a5:4a:79:8e:87:78:
c1:fd:2a:7c:46:9b:8b:b4:05:9d:a1:43:99:60:3a:c6:ff:46:
b5:83:25:3c
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgISAYzEJFa8UnkKVHmfustz4aECMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDgyOTI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTBjNDRhZTk4MWU3NDkyZDNiYTIxZTI4NDcyMDgwMTgwMzk4ZDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1evnvJdSe0sw9ta3z6FgfkZCAYQz
2Ucs3IS6VVHApFbL8pWdVsDeVFW+iB+BdpSSwhOL1M1SFYKIZI6Lx0sxeQisSlPx
2EJ0xrK80SSKSoe/sY3Ie3tUErvYOoxpZ12ox/snS7DB4BYnRhxKrlQqC8lgoSjR
lRaCkyWHHcZHcra5h7WWZbV9KeeOh0MavAxBRPEbMVcwzbi4/AmxaEI0VnjbkyrM
6RTnjtlBxXXAmuwyqexesVdoLjM6pM5QcfU4aCq2DgKrXGrQ6z3yDQcFlZl7KEbs
vZHJH9/fFVO424sgCjvqNQRnRz4E6R578eS/dm2H3VMB4Lgt2WrCQvAUfQIDAQAB
o4ICzjCCAsowHQYDVR0OBBYEFOUMRK6YHnSS07oh4oRyCAGAOY1kMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I3LzIyNjAx
OC0wZTA2LTQzNWUtYWJmZC1mNWZmZWUxNzIwYzEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjcvMjI2MDE4
LTBlMDYtNDM1ZS1hYmZkLWY1ZmZlZTE3MjBjMS8xLzVReEVycGdlZEpMVHVpSGlo
SElJQVlBNWpXUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEkGCCsGAQUF
BwEHAQH/BDowODAeBAIAATAYAwQCuUTMAwQAwgvdAwQAwpP1AwQF2amAMBYEAgAC
MBADBwAgAQZ8L+ADBQAgAUHgMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAlHEAgMA
mdUwDQYJKoZIhvcNAQELBQADggEBACYwUOvpTMINpNzcUWr6t8q6e/N36c3Ywl54
diaBSlht9P4Kkfam9vdV7k2SCaeyK7sIDVguQT3d/3WthMVu8YZ+x4lDxW/LoFcL
et/CtBvIjChkfKYvbYTipi4+sTLLZyqSw1p3KqzUvX0ax5pQtCJC0WEkg6jaKFEz
eI82fuI3ml8a4Wg4HuRAwShv+7uMi8mMVdeD9nIbsxohPoDUu6GcZCxDBeCUTNDe
4RYNVtaZqX/a7izPaNKqVQMSOLwhLFQks2vwOyONJI1DoJM8HiH9Wth8oI+vNa3Y
kbH5GQYvl9yZkKVKeY6HeMH9KnxGm4u0BZ2hQ5lgOsb/RrWDJTw=
-----END CERTIFICATE-----
Generated at Tue Apr 16 14:48:58 2024 by rpki-client on console-fra.rpki-client.org