Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5YW66mL41gYmJIc4xF370iFzf0w.cer
File: 5YW66mL41gYmJIc4xF370iFzf0w.cer (raw, json)
Hash identifier: U1/6rwU7hmER0G8FmwpPWmbnOYIa7plWpvzEfvGJvvA=
Subject key identifier: E5:85:BA:EA:62:F8:D6:06:26:24:87:38:C4:5D:FB:D2:21:73:7F:4C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC348BA92909BD389610E748CB11BDD8E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 200460
IP: 185.97.32.0/22
IP: 2a00:66c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:ba:92:90:9b:d3:89:61:0e:74:8c:b1:1b:dd:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e585baea62f8d60626248738c45dfbd221737f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b6:a0:0a:74:f2:58:c9:37:8f:e1:71:82:e6:
38:85:32:cd:a7:7b:b8:40:2b:80:65:58:e2:e5:6d:
e2:e5:7b:ed:f3:ed:80:6f:bd:40:5a:04:f3:2b:05:
4e:03:8b:b1:4f:4b:34:99:ef:38:9c:d4:77:92:f8:
b5:62:2c:35:c7:ac:01:d3:6f:f5:21:08:06:d2:e1:
a4:f8:33:4f:43:ef:c1:b3:78:cd:64:ef:a7:14:bf:
a3:e2:64:a0:e7:28:3d:8f:fc:2c:df:4f:82:be:6f:
3c:1c:e0:30:cc:6d:50:73:95:78:cb:f0:41:25:09:
40:0d:01:da:0f:ea:01:24:14:ad:28:5f:51:3c:35:
de:7b:57:80:08:2b:30:9b:42:7a:54:c8:47:43:85:
bb:26:e2:9d:b6:82:2e:de:9d:64:93:80:7a:d5:c6:
fe:7e:2d:db:3c:c1:5b:ce:26:40:b8:eb:b0:49:b2:
c8:c2:b3:ca:bb:35:67:e3:c4:d8:c3:72:59:d4:07:
91:20:df:a7:4a:ec:64:a6:2b:d7:9c:17:d6:cc:76:
d1:fb:85:32:ef:05:cf:c5:7e:33:3a:00:61:c8:f2:
2f:9e:0e:f6:24:1c:8f:99:f2:6e:a6:a3:16:77:be:
6a:09:f5:d0:de:1e:09:c5:44:0b:68:1e:f2:41:75:
41:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:85:BA:EA:62:F8:D6:06:26:24:87:38:C4:5D:FB:D2:21:73:7F:4C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.97.32.0/22
IPv6:
2a00:66c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200460
Signature Algorithm: sha256WithRSAEncryption
1f:4f:b1:a3:19:dc:f5:df:d9:8f:ee:37:28:56:62:b8:fd:93:
32:30:74:de:bf:9e:9a:32:76:e4:25:cc:eb:70:60:ac:70:bf:
bf:93:bd:ca:c0:0d:ed:f9:2a:1c:5e:8f:9f:51:ed:04:89:98:
fe:f2:b8:29:10:41:e5:01:31:b3:5e:ba:e5:79:08:7e:6a:4a:
68:b7:34:74:2d:7b:2b:b6:ae:c0:17:f1:56:d6:b1:6f:ef:8c:
4f:d7:11:1d:08:f7:7f:0f:6a:e8:eb:ee:42:7c:47:0b:37:97:
94:79:48:0b:32:69:36:85:d5:05:ea:6a:44:76:9f:c1:7b:93:
10:bb:e0:38:b0:5f:4f:cf:53:11:86:8e:f7:cc:bf:ea:74:64:
37:53:06:0b:1b:57:ef:8c:64:7d:da:33:c0:06:ae:ad:85:66:
83:fb:ab:e6:7d:41:6a:49:5e:08:0b:d6:7d:0e:f5:31:86:5e:
61:60:20:64:d7:e4:90:ed:dd:38:e3:95:7c:30:d7:24:f3:96:
62:69:dc:f4:e7:56:61:2c:41:a9:8d:7b:13:a3:2c:ca:3e:77:
a6:20:c0:e3:f9:3b:52:6a:ff:e1:cf:be:36:4e:b9:c6:b7:bc:
b2:5c:49:0f:36:f0:2a:95:38:2d:c9:c4:26:ae:4a:04:54:98:
a4:f8:52:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 16:56:45 2024 by rpki-client on console-ams.rpki-client.org