Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer
File: 5c4xqiBddBAUR-_9bDE1GGFGRTo.cer (raw, json)
Hash identifier: W89gNQT3gMIsn/5XuJ9OPuZr+/6XpX6lgXL/RNGRAkw=
Subject key identifier: E5:CE:31:AA:20:5D:74:10:14:47:EF:FD:6C:31:35:18:61:46:45:3A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC801ACDED899F8CA39CA3A666FEF2D15
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:30:02 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 203292
IP: 185.73.176.0/22
IP: 2a05:4440::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Apr 2024 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:ac:de:d8:99:f8:ca:39:ca:3a:66:6f:ef:2d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e5ce31aa205d74101447effd6c3135186146453a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b5:b8:7d:06:a5:17:dd:48:a2:7b:45:af:d9:
ea:5b:0b:30:9c:2d:9c:34:f2:5f:b6:43:0a:b1:e0:
ba:4d:e3:6b:a2:a3:00:73:7c:2e:8c:13:61:1a:67:
60:35:95:a0:9e:49:d5:42:5a:c1:43:ee:b6:1d:05:
bd:57:de:75:27:0b:d6:4a:64:b4:09:a7:c5:b6:44:
fd:81:36:2d:9e:62:fc:f1:30:64:ea:11:6f:42:32:
8d:b9:6d:bd:29:af:6f:c4:49:71:1b:72:4b:a8:cf:
8b:98:0a:ba:81:fc:89:d2:50:e9:da:68:56:ae:1a:
9a:a8:a5:7c:7c:5b:92:93:78:99:50:11:b1:47:de:
b0:45:cd:78:a8:b3:c0:ae:1c:ac:64:a0:39:73:b8:
e8:43:17:0a:82:6c:d8:98:77:67:05:73:23:ce:7d:
ae:47:dc:48:fe:01:36:7b:e6:15:6c:6e:ac:21:8c:
bc:5e:1e:d8:6a:77:d4:b7:a9:34:c9:d4:20:56:1c:
f0:b8:9d:ea:38:0a:af:e4:90:9f:fb:80:b6:07:e8:
cc:a2:ee:39:81:26:9e:b3:68:f0:85:08:2a:3d:7b:
e6:6b:c0:73:8f:50:e4:96:b0:d5:bc:ce:5f:ff:35:
af:cf:e8:ff:30:b3:98:43:ad:1e:f0:06:bf:4c:e7:
6b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CE:31:AA:20:5D:74:10:14:47:EF:FD:6C:31:35:18:61:46:45:3A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.176.0/22
IPv6:
2a05:4440::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203292
Signature Algorithm: sha256WithRSAEncryption
12:d2:22:63:c0:26:2c:e6:ec:61:6e:77:08:72:54:50:31:9d:
55:b7:ab:26:1e:6b:f4:87:2f:31:e8:15:23:ee:fc:72:20:66:
50:64:ff:40:a3:b1:2a:0f:71:59:1b:cb:60:38:5d:3f:3d:5d:
d6:a6:53:4f:69:8f:80:a3:dd:28:d8:18:c2:28:ec:d7:a4:9f:
fb:49:f9:42:33:9e:1c:7d:e9:c4:0e:4a:0f:59:fe:89:ea:4f:
01:19:5a:21:34:5c:d1:98:38:82:93:c7:55:cc:61:e0:d7:63:
14:99:fc:f2:a2:60:29:97:54:b5:ef:62:a5:01:aa:f9:92:8f:
f1:f0:b9:dc:3a:a3:f4:67:98:42:aa:ed:5b:d4:9e:84:5e:2f:
38:b7:09:34:0e:88:aa:d7:86:2b:d4:66:a0:a3:28:d6:93:c1:
2c:e2:05:28:e0:04:c2:e2:3e:8b:fc:c9:35:ec:79:bf:8f:70:
8e:95:09:6b:6d:48:c9:b1:08:16:3b:df:33:30:8f:c9:17:f4:
2b:0c:36:9a:44:10:18:84:47:12:71:ee:68:b3:c2:6d:2c:66:
d5:e1:9a:88:38:8a:05:e2:65:e6:f8:27:24:ae:db:c0:25:c4:
3c:aa:ab:22:f1:ff:26:64:2c:df:09:3a:c8:d4:47:5e:5a:44:
7b:50:c7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 15:29:07 2024 by rpki-client on console-ams.rpki-client.org