Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5ecAZeAJ3tlYVugKBTsuntzv-4w.cer
File: 5ecAZeAJ3tlYVugKBTsuntzv-4w.cer (raw, json)
Hash identifier: Er/v+BkkaGQDYcbEiqQ+YrtLern1ss73HnFxqezfBpU=
Subject key identifier: E5:E7:00:65:E0:09:DE:D9:58:56:E8:0A:05:3B:2E:9E:DC:EF:FB:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018EF64C8E0C51F1BD3DE1ECABDEAE972228
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/59/8b43b3-03eb-4867-a60e-d7d9533287c5/1/5ecAZeAJ3tlYVugKBTsuntzv-4w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/59/8b43b3-03eb-4867-a60e-d7d9533287c5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 19 Apr 2024 12:19:56 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 212.46.46.0/24
IP: 2a14:42c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 20:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f6:4c:8e:0c:51:f1:bd:3d:e1:ec:ab:de:ae:97:22:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 19 12:19:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e5e70065e009ded95856e80a053b2e9edceffb8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e1:98:80:2d:4a:62:d9:9a:55:c9:a0:7a:56:
d7:27:85:5a:5a:f4:8c:6e:00:6d:2f:2b:c4:30:26:
ff:36:52:f5:4f:e6:99:56:95:9c:23:df:88:8a:e9:
51:39:18:53:83:4c:0b:2b:32:61:e0:98:b7:09:24:
d4:e2:86:8e:45:3e:18:a7:9f:58:53:ee:c7:50:12:
88:04:0d:8f:34:20:c6:f2:a5:2e:aa:62:ad:70:4c:
9e:6a:8a:0e:10:d0:3a:21:d4:4b:82:44:c1:66:23:
51:f2:e9:7f:ee:84:8c:08:b2:f9:fa:18:fb:b0:26:
48:b5:2c:44:74:62:d6:71:7a:fd:06:6b:cb:24:0b:
02:02:2e:1b:24:a9:1a:d2:08:d6:ea:27:3a:6f:6e:
77:6d:34:ee:e0:60:27:7f:23:1a:96:1d:81:d5:e1:
a6:19:c1:8f:2c:06:e8:98:25:7d:b6:fa:1d:f5:f0:
35:87:77:74:fb:09:4c:18:52:bb:f2:74:83:78:08:
fa:3c:eb:5a:7b:9c:6f:ae:f0:ff:c8:9e:a3:f6:82:
ee:2d:cd:42:40:a6:3d:b2:0b:14:4b:14:2c:ff:37:
fe:55:b9:dd:98:33:e9:a4:8d:d2:d2:89:fd:6b:15:
7c:99:6a:c7:d3:26:c8:ac:b6:a9:30:d8:38:8f:76:
51:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E7:00:65:E0:09:DE:D9:58:56:E8:0A:05:3B:2E:9E:DC:EF:FB:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/8b43b3-03eb-4867-a60e-d7d9533287c5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/8b43b3-03eb-4867-a60e-d7d9533287c5/1/5ecAZeAJ3tlYVugKBTsuntzv-4w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.46.0/24
IPv6:
2a14:42c0::/29
Signature Algorithm: sha256WithRSAEncryption
02:13:32:a8:41:8d:1b:ec:d7:8c:57:a6:76:36:7d:4a:cc:23:
71:5d:45:89:93:ff:6c:fd:10:11:1d:31:af:c8:8e:7b:b8:4e:
ed:98:c2:36:53:f2:ee:e1:9f:56:1e:51:f3:0c:f0:7b:c7:8c:
4e:39:eb:fa:7d:7c:d0:71:c3:14:41:f7:4a:0e:bc:d4:a6:fe:
75:4a:47:9b:c2:f9:fc:ed:31:bb:d0:9c:65:5f:da:08:80:5a:
73:0e:0c:19:e3:15:5c:99:ce:3e:ee:7e:b2:a2:2e:a8:ff:98:
bc:d2:ea:47:81:d7:3d:5b:dc:5f:1b:c0:31:ea:30:d9:7f:68:
4a:e9:4c:aa:cc:df:bc:99:d8:8a:5b:6f:2d:f7:b1:d4:31:9f:
70:56:55:0d:de:68:59:c2:88:46:6e:81:4b:c6:0d:4e:b8:ba:
69:35:1f:f7:00:78:fa:48:49:62:36:94:95:bd:27:86:bd:9a:
f6:d3:69:61:54:7f:3d:61:76:66:22:d2:e2:71:dc:a5:32:33:
4d:67:94:f1:42:bb:13:25:60:71:2d:05:60:d2:32:85:cc:c6:
94:c9:71:4e:73:b0:5a:07:96:5b:52:be:43:68:8a:a8:a3:64:
3a:fb:93:ef:ab:0c:c8:5a:66:6c:09:a4:cc:25:b8:c5:4a:7e:
e0:67:31:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:01:03 2024 by rpki-client on console-fra.rpki-client.org