Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.cer
File: 5nP_ENelVPxRp_mcH2Hhzu-Zhbw.cer (raw, json)
Hash identifier: Jf9ZGLVxuEB+qZKrvAPqNU4pzppgOk3LHDNNjZKfqmY=
Subject key identifier: E6:73:FF:10:D7:A5:54:FC:51:A7:F9:9C:1F:61:E1:CE:EF:99:85:BC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86F9985140AE03F2D27C5EBBA60D149
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:30:06 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.7.212.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:99:85:14:0a:e0:3f:2d:27:c5:eb:ba:60:d1:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e673ff10d7a554fc51a7f99c1f61e1ceef9985bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:00:c8:8c:a9:c3:b0:7d:e3:9c:e2:b9:2c:d8:
a4:13:90:6e:ac:3c:f7:e0:de:6e:d4:36:04:95:32:
6b:04:46:92:47:48:7d:94:a3:01:85:76:d9:94:db:
96:65:39:16:a0:71:d5:8b:7b:5c:d8:02:ff:fc:06:
6b:1e:ff:52:96:eb:54:66:78:db:56:43:4a:c0:0e:
20:1b:82:8d:ef:e6:eb:b0:db:ba:b3:16:bb:1b:b6:
d5:79:e0:36:bd:20:2b:f5:ee:e0:b4:2d:cd:3e:13:
33:aa:58:93:ff:31:13:bf:9d:65:7f:ce:5e:d1:c5:
17:1c:0a:18:90:52:f4:63:b1:6e:d9:5b:47:d0:2e:
ae:eb:7a:d4:14:80:2e:5b:8a:0f:4f:a9:65:0d:36:
b3:d2:03:88:54:99:9c:61:87:f2:10:ac:a6:e4:3a:
1b:20:12:a6:da:b2:9e:49:9f:df:df:6d:c7:11:47:
81:28:63:ff:cc:2e:db:74:4e:ef:b5:05:e7:18:44:
b3:9c:bf:ae:b2:af:5e:0c:a8:d5:23:79:39:28:83:
d9:51:07:5e:bc:7f:99:f8:1a:d1:95:85:7f:7f:89:
32:0f:b6:fe:d4:3d:4c:0a:60:f0:58:c5:c0:c4:5d:
55:32:7a:fb:ca:d4:bf:a6:2c:d4:7a:b9:40:9d:76:
90:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:73:FF:10:D7:A5:54:FC:51:A7:F9:9C:1F:61:E1:CE:EF:99:85:BC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.212.0/24
Signature Algorithm: sha256WithRSAEncryption
46:4d:69:4e:09:dc:69:d8:8c:f5:0b:9d:a0:59:e3:78:a7:b6:
9e:d8:ad:4f:17:21:60:5f:6c:cf:5a:ed:12:e6:b7:24:97:54:
2b:e4:f9:aa:99:70:84:5d:75:6e:0d:39:cd:c1:60:1b:d8:58:
fe:bc:07:7d:b5:97:ea:e3:d4:45:29:08:1a:36:4e:7f:56:55:
92:0b:1c:a8:dd:7c:ab:fd:67:e2:0c:b2:4d:45:50:01:5c:22:
50:8f:53:83:14:8c:55:93:d5:bb:6f:63:2c:cf:69:95:b9:0b:
74:07:97:4f:9e:95:4f:1e:98:73:bc:79:1d:38:67:0e:fc:e3:
56:46:55:f6:91:e2:46:bb:cd:c2:45:72:76:63:cd:2d:9e:72:
47:65:e2:f0:4c:ed:0c:9a:84:5c:22:c4:8c:c0:e3:01:eb:28:
7c:86:ac:46:0d:73:40:40:e8:1f:07:0e:d3:78:b4:40:24:4a:
7d:9b:cc:e0:63:e0:cb:84:95:51:00:36:55:00:5f:11:79:2d:
36:12:64:84:e1:46:57:47:e0:35:33:1c:d5:2b:55:90:60:98:
8f:ba:a2:3e:dd:45:28:1e:f1:92:26:2c:d4:09:ff:78:cd:11:
76:2b:1f:60:6e:f3:59:ff:f2:9c:04:24:58:8a:cc:af:e0:40:
fb:6e:5e:2a
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzIb5mFFArgPy0nxeu6YNFJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDQzMDA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjczZmYxMGQ3YTU1NGZjNTFhN2Y5OWMxZjYxZTFjZWVmOTk4NWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowDIjKnDsH3jnOK5LNikE5BurDz3
4N5u1DYElTJrBEaSR0h9lKMBhXbZlNuWZTkWoHHVi3tc2AL//AZrHv9SlutUZnjb
VkNKwA4gG4KN7+brsNu6sxa7G7bVeeA2vSAr9e7gtC3NPhMzqliT/zETv51lf85e
0cUXHAoYkFL0Y7Fu2VtH0C6u63rUFIAuW4oPT6llDTaz0gOIVJmcYYfyEKym5Dob
IBKm2rKeSZ/f323HEUeBKGP/zC7bdE7vtQXnGESznL+usq9eDKjVI3k5KIPZUQde
vH+Z+BrRlYV/f4kyD7b+1D1MCmDwWMXAxF1VMnr7ytS/pizUerlAnXaQtQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFOZz/xDXpVT8Uaf5nB9h4c7vmYW8MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE2L2NiZTdl
NS1kY2M4LTQyNjUtOGQ3ZC00OGNhMzM2NzVhNTAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvY2JlN2U1
LWRjYzgtNDI2NS04ZDdkLTQ4Y2EzMzY3NWE1MC8xLzVuUF9FTmVsVlB4UnBfbWNI
MkhoenUtWmhidy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAuQfUMA0GCSqGSIb3DQEBCwUAA4IBAQBGTWlO
Cdxp2Iz1C52gWeN4p7ae2K1PFyFgX2zPWu0S5rckl1Qr5PmqmXCEXXVuDTnNwWAb
2Fj+vAd9tZfq49RFKQgaNk5/VlWSCxyo3Xyr/WfiDLJNRVABXCJQj1ODFIxVk9W7
b2Msz2mVuQt0B5dPnpVPHphzvHkdOGcO/ONWRlX2keJGu83CRXJ2Y80tnnJHZeLw
TO0MmoRcIsSMwOMB6yh8hqxGDXNAQOgfBw7TeLRAJEp9m8zgY+DLhJVRADZVAF8R
eS02EmSE4UZXR+A1MxzVK1WQYJiPuqI+3UUoHvGSJizUCf94zRF2Kx9gbvNZ//Kc
BCRYisyv4ED7bl4q
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:06:28 2024 by rpki-client on console-ams.rpki-client.org