Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5fmtISzWWrTuK46bP4uDPDkA6n0.cer
File: 5fmtISzWWrTuK46bP4uDPDkA6n0.cer (raw, json)
Hash identifier: 2PDr75CbuiwirCYCjbZ1ZOI1lGCiBvdw9BufrKUkqc8=
Subject key identifier: E5:F9:AD:21:2C:D6:5A:B4:EE:2B:8E:9B:3F:8B:83:3C:39:00:EA:7D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC500878E271BC545E6308D01F3D020A5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:29:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 58209
IP: 217.18.81.0/24
IP: 2a0e:5e40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 00:45:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:87:8e:27:1b:c5:45:e6:30:8d:01:f3:d0:20:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e5f9ad212cd65ab4ee2b8e9b3f8b833c3900ea7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e4:31:18:11:12:85:ea:6d:5e:fd:be:bf:43:
66:80:e3:3f:00:e9:c8:b6:1d:33:2d:79:40:fb:82:
07:a0:0e:67:6b:8b:f9:0e:b9:12:93:38:a7:3d:3b:
58:a5:88:d3:a7:72:ec:2b:18:7e:1d:f2:84:ad:4a:
d7:be:9a:5a:6f:38:8f:10:a1:d8:e9:aa:44:fe:e9:
4d:f8:50:ce:5f:d2:20:c2:85:02:92:d6:b6:e5:38:
e0:17:4a:81:05:56:cb:66:28:fb:74:54:e1:20:6e:
af:c6:43:ff:72:87:fb:1b:e1:2e:22:6f:00:55:df:
83:2f:02:6f:e3:85:c6:77:d4:6f:06:08:47:3e:02:
c9:71:2f:ea:8a:7c:7f:05:63:18:e9:47:4f:f1:cb:
3d:8d:1e:e8:b6:5d:72:74:82:23:32:88:c2:cd:8a:
c0:24:33:4a:76:5b:8a:5d:82:da:18:d7:d6:52:53:
05:35:26:5e:97:89:76:89:4a:74:b7:12:ee:26:ce:
5c:c2:d2:07:46:a4:95:c9:f0:17:91:91:f2:1d:d9:
45:0e:fc:d6:95:47:0e:d7:35:d9:c2:a9:41:1f:9c:
4c:54:25:7d:ad:b8:7a:1f:cf:55:80:41:d2:0f:d1:
f3:dd:c8:e2:ac:dc:bc:0a:4e:0a:0e:07:11:9d:55:
43:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F9:AD:21:2C:D6:5A:B4:EE:2B:8E:9B:3F:8B:83:3C:39:00:EA:7D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.18.81.0/24
IPv6:
2a0e:5e40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58209
Signature Algorithm: sha256WithRSAEncryption
23:84:d4:8f:3d:27:37:43:6a:f0:18:82:4c:e2:a1:0b:7e:f6:
2f:64:17:0a:61:7e:2b:bd:2f:0d:09:64:30:a2:cc:b5:8a:56:
fc:d7:39:86:8c:0e:f7:6b:cd:21:fc:f3:4a:58:3f:df:2f:23:
f6:97:aa:f6:7c:d5:e2:7e:e1:8a:86:04:50:d4:9f:cd:90:aa:
ae:89:af:34:b1:db:92:c1:41:31:58:cc:bc:67:8a:e2:2a:99:
fd:1a:0f:65:9b:b0:6d:50:43:46:c9:41:80:89:6e:2c:87:ff:
f3:c7:b2:86:7e:84:c9:bd:30:9b:9d:e8:1d:e2:36:16:1b:c4:
54:1d:6d:b5:45:d0:4f:a6:0d:81:8b:7b:3f:76:5c:e4:36:da:
67:1c:eb:4d:d0:78:6f:bb:49:be:1d:d2:83:9c:1d:6a:ed:29:
34:9f:11:b7:00:b8:15:95:ab:03:52:e9:75:05:69:6a:7a:90:
23:64:e5:58:1c:42:06:fa:22:3f:cc:31:bd:83:4c:04:e8:28:
5d:0f:7f:b0:bb:a0:cd:23:55:31:a7:e0:d4:3e:d5:5f:11:b8:
44:04:42:d7:26:f3:a6:5e:2a:71:4e:ea:0b:06:6f:5f:17:c8:
1e:78:3f:20:84:81:96:d4:40:bc:94:63:ce:20:88:43:a1:86:
4a:1e:ca:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 03:22:58 2024 by rpki-client on console-ams.rpki-client.org