Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5dkNfwNRL229BkXf4nQ2ji2ETCM.cer
File: 5dkNfwNRL229BkXf4nQ2ji2ETCM.cer (raw, json)
Hash identifier: aIt4N1Di/KCPANOsVLqlSe/2MemcOEHpYT8FxmlpCpw=
Subject key identifier: E5:D9:0D:7F:03:51:2F:6D:BD:06:45:DF:E2:74:36:8E:2D:84:4C:23
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC725B65B0E7FCD127581C109DC28764D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/cd7526-61ad-46cc-8784-3d63557301c0/1/5dkNfwNRL229BkXf4nQ2ji2ETCM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/cd7526-61ad-46cc-8784-3d63557301c0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:29:46 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 200059
IP: 185.40.80.0/22
IP: 2a00:fc20::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:b6:5b:0e:7f:cd:12:75:81:c1:09:dc:28:76:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e5d90d7f03512f6dbd0645dfe274368e2d844c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:55:33:e3:05:c1:d4:09:5a:69:fe:e1:76:43:
f1:ec:0d:c5:31:73:b9:8e:fc:21:c2:28:3f:43:1d:
1d:62:a6:ee:a1:14:d4:6a:cd:59:65:3c:78:c7:fb:
9a:41:ff:6f:2e:7d:3e:3e:c8:72:75:5b:42:47:45:
c3:bf:21:4a:66:79:98:d9:b4:c8:82:43:9f:b2:d3:
c8:5c:79:ad:cb:37:fc:37:67:c3:73:26:71:21:0a:
6c:1f:18:d1:cb:ee:20:e8:3b:ce:07:e0:42:ca:6a:
5c:aa:3a:ce:2f:3b:d6:cd:82:74:0a:ea:33:50:57:
f7:8e:29:c4:45:19:11:c7:77:e2:c5:50:03:e2:7f:
2f:02:95:b0:85:5d:1a:16:a1:ca:a0:2e:11:35:f3:
8a:ed:3e:e9:2f:c6:de:51:13:1d:39:a2:f2:6a:da:
88:9e:23:51:ea:d6:10:9f:39:07:e2:05:b4:7c:24:
68:51:53:0f:20:f2:3b:81:85:3c:ae:9b:ed:58:27:
73:79:57:5c:f5:9b:0f:88:12:7d:cf:59:38:2f:2c:
82:82:e6:e2:74:9e:2e:52:a7:9b:ce:e1:7c:2d:8c:
be:aa:46:f3:5c:80:87:80:8f:de:19:d9:70:28:bf:
b8:6d:68:13:c1:4c:b1:2e:7c:12:48:59:41:c1:de:
c1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D9:0D:7F:03:51:2F:6D:BD:06:45:DF:E2:74:36:8E:2D:84:4C:23
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cd7526-61ad-46cc-8784-3d63557301c0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cd7526-61ad-46cc-8784-3d63557301c0/1/5dkNfwNRL229BkXf4nQ2ji2ETCM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.80.0/22
IPv6:
2a00:fc20::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200059
Signature Algorithm: sha256WithRSAEncryption
9c:cb:55:07:69:ae:09:7d:57:0d:87:39:f8:70:b4:36:95:11:
e9:df:0b:a6:d3:b0:f9:f2:ac:28:42:90:b9:d0:69:5c:64:94:
0b:74:91:bd:94:0e:f7:d4:66:8d:4e:a1:df:83:08:84:26:28:
ca:32:0e:50:3a:3d:f6:ec:94:a2:9e:56:fb:62:35:ac:a3:cb:
cf:c2:6f:e9:ef:22:27:68:0f:40:46:97:a6:48:f5:61:c6:3b:
36:b9:dd:e0:9f:dc:53:44:7f:ad:85:0b:98:44:52:b9:0e:9a:
0d:e4:26:ee:c7:cb:5f:1b:58:22:3d:5c:9e:33:be:1d:9e:6a:
2e:9d:4c:d2:22:7e:08:d9:cd:dd:83:c9:ea:f2:b2:cc:47:ed:
da:4e:67:9a:c2:e0:0c:c9:3a:46:7a:1e:1c:0a:96:cd:ef:ad:
95:54:48:60:ba:69:9c:e4:ba:be:e0:2f:fb:a6:a6:55:43:34:
ae:f4:a7:ec:57:82:e6:fe:7f:22:74:0c:2c:1e:e5:9e:43:76:
91:ae:11:ee:34:09:a2:e5:75:68:89:44:13:0a:d7:65:f7:6e:
39:e9:f3:92:bb:92:d7:02:e4:64:9b:3b:68:e2:b1:fe:8b:ad:
c5:b9:4c:29:61:6d:5b:a1:29:e4:15:3d:86:42:cb:6f:86:18:
c2:94:12:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 09:42:46 2024 by rpki-client on console-fra.rpki-client.org