Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
File: 5aJ1VcGlxd3396zIOfpXeqfuepw.cer (raw, json)
Hash identifier: oMzpeDhw0/fPbIhMOxN48SncTnYb565w+qgbcfreIiY=
Subject key identifier: E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5001CF1885B50F1E7E52AC18629149D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:29:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 33907
AS: 34025
IP: 193.26.17.0/24
IP: 194.145.172.0/22
IP: 2001:67c:2968::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:1c:f1:88:5b:50:f1:e7:e5:2a:c1:86:29:14:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:60:a2:6e:35:a9:86:3e:3a:e4:06:2d:a5:43:
c3:eb:a0:b6:9a:e0:6c:b8:0a:98:15:d0:55:79:bb:
55:98:f5:91:5f:91:f5:66:97:a2:0e:51:aa:25:39:
b4:84:09:d8:57:45:93:18:d3:c5:8c:f9:de:8b:50:
ba:3c:82:c5:2a:ee:d3:04:b7:63:5c:32:56:3b:76:
d1:d0:7b:c7:91:c4:6e:6f:cb:68:c0:d8:38:8d:b1:
9a:1e:6a:e1:f7:62:51:39:bf:a6:90:22:b5:0c:9a:
33:bf:3e:33:cd:43:6f:0f:14:49:67:bd:8d:c2:93:
f0:22:51:e0:28:ff:5c:bd:85:d9:c3:f0:e3:5f:34:
f4:3c:0b:9a:a2:47:1a:4d:54:d6:ea:a3:94:e8:23:
b9:8c:36:e0:29:13:eb:04:89:41:75:e7:2a:af:14:
2e:01:94:67:a4:57:97:08:c1:5e:da:ad:5a:fd:23:
85:23:54:fe:90:3f:a4:94:77:87:55:06:37:38:f3:
9a:ef:85:4f:e3:2d:f2:ee:98:b0:ed:d6:30:b8:01:
b0:b6:72:70:52:08:30:14:37:8d:02:c2:19:60:5b:
6e:97:86:26:90:bd:14:b8:0f:09:71:0b:fb:ff:d4:
8b:ee:de:86:fd:d3:87:78:91:93:46:54:82:db:25:
05:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.17.0/24
194.145.172.0/22
IPv6:
2001:67c:2968::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
33907
34025
Signature Algorithm: sha256WithRSAEncryption
a4:0b:9e:99:f1:e2:fa:69:e2:05:ad:bf:72:50:51:57:ba:61:
3a:4f:11:75:b3:94:3e:3b:d0:a6:6e:9f:83:fe:81:4f:26:c6:
8f:28:5c:e3:b7:56:e7:65:04:22:f1:f2:0c:7f:e9:8e:55:ae:
c9:f2:ca:10:a8:63:da:02:8f:09:6f:20:36:1c:b0:cf:d7:f6:
9f:bd:ad:10:b3:ee:2f:2f:e8:c1:01:6a:fe:ae:63:b2:bc:85:
c7:b1:12:5d:12:d4:4f:7f:d0:6d:98:2c:79:d6:3c:2a:bf:d7:
ea:33:c0:68:cf:20:a7:8b:ce:15:3c:40:3d:b7:d2:41:8a:61:
4e:ee:79:5d:dc:cd:c7:10:35:19:43:29:ad:59:88:68:a5:ef:
c3:0d:5b:a5:48:e4:7b:57:7f:1e:03:2b:eb:37:cf:d5:f8:17:
72:c1:72:25:07:bd:8e:2a:df:50:d2:f7:a4:f0:19:09:62:ac:
63:dc:af:83:00:e4:3d:b4:3e:53:54:29:6a:1d:7c:3e:1e:fa:
67:81:88:e7:b1:ef:c7:91:d7:b7:52:76:d4:dd:ae:6e:c4:dc:
7b:2b:81:94:2d:51:3b:80:e8:e1:a9:d9:ae:17:df:38:ea:53:
15:b6:94:aa:6f:c4:5c:1e:60:56:ab:6f:8f:ab:b2:c1:e5:34:
f0:c5:dd:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 05:09:36 2024 by rpki-client on console-fra.rpki-client.org