Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer
File: 5snUihjDwNLk5jp7g4haeWd1WCY.cer (raw, json)
Hash identifier: 3x5qZJUiN4M/Bkr8+hyW0SfauEVYfo9uLS54qX+1Gi0=
Subject key identifier: E6:C9:D4:8A:18:C3:C0:D2:E4:E6:3A:7B:83:88:5A:79:67:75:58:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86F8C9F812A0E79997BE08376B503BA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:30:02 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 25180
IP: 5.148.0.0 -- 5.148.159.255
IP: 31.221.0.0/17
IP: 62.244.160.0/19
IP: 83.244.128.0/17
IP: 109.231.192.0/18
IP: 149.63.0.0/16
IP: 167.98.0.0/16
IP: 176.46.160.0/19
IP: 2a00:1d40::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:8c:9f:81:2a:0e:79:99:7b:e0:83:76:b5:03:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6c9d48a18c3c0d2e4e63a7b83885a7967755826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9a:36:24:cb:b5:a8:3f:61:f8:8b:40:01:eb:
6b:50:2d:eb:77:4f:aa:40:9c:7d:dc:ed:b0:76:7e:
84:0b:63:d6:2a:c0:bc:65:6a:92:45:8d:d8:e2:c6:
84:11:a2:e8:dd:65:f7:82:56:36:9a:90:a9:b7:1a:
a2:6f:13:1c:90:a8:41:c2:a2:11:a0:b4:f0:a7:2a:
8f:17:dc:b2:ac:1f:7b:1b:f5:76:99:72:df:10:19:
be:d7:17:76:83:ae:51:0b:64:86:8c:b7:97:85:54:
e2:2e:e6:43:ee:d6:95:6d:db:e0:b0:bf:ce:b5:70:
a7:74:35:54:23:92:0c:6e:04:49:d0:8c:e4:8b:64:
ad:f2:b6:c9:9d:c3:0b:34:89:e8:db:e5:c3:55:9a:
b9:c3:7c:08:07:3c:86:ae:bd:94:ed:b8:a8:bf:ed:
dd:69:38:9d:0c:bb:34:e6:22:93:98:0d:1f:db:d2:
45:34:00:b5:d2:f9:8c:e3:f1:e6:4d:42:b4:1c:27:
d2:2d:08:66:10:75:5c:3f:ab:dc:52:e3:40:45:70:
8a:17:25:60:01:13:0e:54:c9:4f:38:c8:69:2e:53:
72:00:0b:e7:e1:df:b2:be:99:3c:3d:5a:ff:d9:17:
8c:a4:c4:bb:1a:6f:0c:28:a9:43:a0:0a:4c:d0:69:
35:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C9:D4:8A:18:C3:C0:D2:E4:E6:3A:7B:83:88:5A:79:67:75:58:26
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.148.0.0-5.148.159.255
31.221.0.0/17
62.244.160.0/19
83.244.128.0/17
109.231.192.0/18
149.63.0.0/16
167.98.0.0/16
176.46.160.0/19
IPv6:
2a00:1d40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25180
Signature Algorithm: sha256WithRSAEncryption
26:26:ba:7f:7f:30:43:57:82:14:3a:00:ef:97:de:e4:92:b5:
dd:e0:33:a9:5c:62:21:3e:dd:93:9b:6c:20:1c:80:d8:1c:01:
a3:3f:75:c7:b7:7c:06:8e:5b:bc:7a:58:e7:a9:13:f2:04:4d:
1f:ad:32:81:f9:12:bc:53:6c:08:f6:3a:0c:0e:cc:45:02:b4:
53:8d:32:eb:dc:5e:8d:20:34:22:8b:9c:02:e2:67:b0:23:40:
53:17:cd:2e:45:2f:0e:8c:b8:55:99:7c:3a:ea:3f:74:fd:71:
a9:8c:e2:60:3e:08:18:19:83:50:59:2f:3d:90:69:0d:e9:08:
57:5a:0c:07:24:af:06:38:b9:ed:ad:d6:db:6a:2f:d8:bf:31:
4a:ed:e6:2e:26:b2:30:01:b2:7c:74:78:40:68:60:5c:73:70:
45:40:e1:70:a3:82:8e:81:e8:e3:d6:2b:d8:65:d1:69:f5:22:
28:e4:5c:da:f5:b2:08:94:a9:01:57:e7:e3:84:dc:2d:e7:f0:
a4:53:0e:68:d1:fb:13:60:e1:a4:c6:50:a5:16:97:85:6e:1c:
19:f5:4e:28:86:7e:53:46:5a:69:1c:b2:29:e3:70:75:92:71:
33:e2:57:2b:cd:86:00:8c:55:26:8e:cf:35:78:6a:7b:3e:c3:
cf:d3:f6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 10:07:42 2024 by rpki-client on console-ams.rpki-client.org