Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5WGfuYaMjw-_Xj65znK0hfegBd8.cer
File: 5WGfuYaMjw-_Xj65znK0hfegBd8.cer (raw, json)
Hash identifier: U2C1iBQToR8hK/vYFa1/McaVz9XnNheZn0SOOcF0A0A=
Subject key identifier: E5:61:9F:B9:86:8C:8F:0F:BF:5E:3E:B9:CE:72:B4:85:F7:A0:05:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94DDE1A292B649C47614CE2B7BD26A2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/700cb3-4383-4cbf-bb25-88c173ed2e34/1/5WGfuYaMjw-_Xj65znK0hfegBd8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/700cb3-4383-4cbf-bb25-88c173ed2e34/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:32:52 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2a06:4d00::/29
IP: 2a0f:2340::/29
IP: 2a0f:3ec0::/29
IP: 2a0f:4040::/29
IP: 2a11:be00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:de:1a:29:2b:64:9c:47:61:4c:e2:b7:bd:26:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:32:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e5619fb9868c8f0fbf5e3eb9ce72b485f7a005df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:99:b0:e3:a8:7b:fa:df:fc:0d:45:83:0f:a9:
d0:3e:8b:8c:04:af:50:72:ef:5e:c6:b2:cb:79:9e:
52:e5:d7:0b:c3:9f:c6:f6:74:01:e5:66:0d:72:b9:
f7:a8:69:89:d5:b6:47:fe:56:9b:b1:96:5d:18:68:
6f:45:56:f7:83:bf:e3:3a:1d:00:3d:dd:40:b3:96:
65:b8:80:5e:04:ca:2b:a8:f6:b9:1b:00:44:e5:4f:
b5:aa:0f:62:64:91:c0:ce:31:dc:95:e2:29:e9:3b:
2f:44:8c:5c:da:c4:56:b2:32:86:ef:40:8a:6a:f8:
91:b3:71:2a:4a:5a:27:ae:04:64:64:6c:72:f7:2e:
3b:59:e2:96:98:bc:d0:94:d4:c7:01:00:9e:be:5e:
77:5c:b0:9a:0e:99:ca:cb:c4:ae:90:8d:09:b7:2b:
22:64:5d:89:e1:8b:31:37:cf:74:45:97:cc:12:86:
8b:eb:a1:9e:ce:c6:31:5a:83:78:6b:24:ff:07:ea:
47:c2:3e:f3:dd:dd:2b:f1:d3:1b:e7:cd:ca:b7:30:
cb:48:8e:3b:2b:82:b3:f9:2f:90:34:f4:12:5b:59:
29:6c:5a:e1:27:cd:98:35:1d:b2:ab:8c:97:56:ed:
e4:64:82:09:f1:91:22:8a:4d:fa:a7:db:e8:99:42:
11:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:61:9F:B9:86:8C:8F:0F:BF:5E:3E:B9:CE:72:B4:85:F7:A0:05:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/700cb3-4383-4cbf-bb25-88c173ed2e34/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/700cb3-4383-4cbf-bb25-88c173ed2e34/1/5WGfuYaMjw-_Xj65znK0hfegBd8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:4d00::/29
2a0f:2340::/29
2a0f:3ec0::/29
2a0f:4040::/29
2a11:be00::/29
Signature Algorithm: sha256WithRSAEncryption
41:e6:a1:0d:8e:dd:f7:c9:3b:47:8d:e1:ef:f3:f3:8c:7d:56:
68:b4:11:42:3b:b6:6e:f7:ab:71:b8:65:99:f1:e0:b2:11:fd:
1f:53:15:b7:0a:cd:d0:31:de:e9:19:b7:b4:12:a7:f6:bb:c2:
01:23:e6:ec:2a:25:01:3b:f4:89:ae:f5:71:db:01:23:4b:07:
d7:13:3d:e8:46:24:01:4f:9d:45:99:02:41:a2:9d:4c:dc:98:
75:fb:49:59:b3:fa:7f:db:77:a4:7a:ce:26:80:c4:2f:55:f3:
46:d1:69:c3:8d:71:19:a3:17:6f:67:b2:67:70:50:b2:5d:da:
91:8a:0b:2e:72:e1:a9:c5:6f:8a:b8:64:a6:24:2f:80:8b:a3:
1a:38:3c:ef:19:20:64:35:64:7e:55:ae:57:88:ce:d0:54:7e:
2c:b7:cf:9c:8b:63:36:df:4d:9c:00:c8:8f:7a:37:b7:24:fd:
6d:ad:d4:7f:e9:92:d4:f5:cb:0d:b7:e7:1d:5d:7e:b2:a5:3e:
da:eb:ee:3b:68:09:05:c7:c2:dc:ed:11:95:7c:52:2b:98:75:
7e:0f:dd:fe:3c:e7:71:4a:2b:de:1b:f5:79:a2:86:a0:dd:70:
91:d3:a5:94:70:a5:2e:3c:c2:ea:46:f1:a8:d6:d4:db:ae:05:
0a:75:4c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 16:48:35 2024 by rpki-client on console-fra.rpki-client.org