Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.cer
File: 5sxlwnwjKYsMWg4Lx0ulEDSnBMg.cer (raw, json)
Hash identifier: bal0i6ny73Y5EdCCFe1Rhg0R46ZcvO84Oqk+0lutj2w=
Subject key identifier: E6:CC:65:C2:7C:23:29:8B:0C:5A:0E:0B:C7:4B:A5:10:34:A7:04:C8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BC8579AB3B6BA89499FBC0253204AD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:44 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 31010
IP: 91.212.85.0/24
IP: 2001:678:598::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:85:79:ab:3b:6b:a8:94:99:fb:c0:25:32:04:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6cc65c27c23298b0c5a0e0bc74ba51034a704c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:22:b2:1e:a1:5f:e2:49:63:30:81:99:1d:fd:
96:c9:68:1e:31:a4:03:f9:59:92:9f:79:53:7a:1f:
0a:ac:fa:77:de:ce:ec:e7:89:06:47:a8:9e:fc:65:
80:6f:dd:60:9a:40:25:ca:b3:fc:d4:7f:8d:72:66:
63:7b:f7:8e:ed:fd:bc:65:56:21:39:87:68:c8:da:
ce:c9:1e:06:21:6f:5a:fe:89:2b:04:9c:23:0d:ed:
5c:17:27:ad:8c:4c:7b:84:a7:71:10:51:a6:a6:5b:
1a:9d:d8:06:f5:23:a7:92:c5:11:a8:86:52:5b:2d:
30:6f:65:a3:53:1c:e0:85:b3:50:84:11:0f:e1:a8:
25:b2:00:e1:b1:be:b8:dd:1a:20:07:78:c1:e6:63:
c4:7d:68:a3:3c:96:b6:63:96:31:b9:c4:49:9f:b4:
d0:bd:f7:ed:7d:15:39:75:35:e7:48:44:81:55:9a:
d5:d9:18:40:1a:0c:b0:ff:80:53:b6:b5:ce:e6:8e:
00:df:f9:e8:d8:07:6f:77:74:eb:4b:2d:51:e2:ef:
46:4e:eb:67:c6:6f:bd:83:02:52:65:ea:00:59:98:
ea:e2:2a:17:35:8c:8c:78:b3:5b:5d:60:5e:68:9f:
19:93:35:2a:88:2e:bb:d6:6b:93:36:71:2b:9b:6a:
26:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:CC:65:C2:7C:23:29:8B:0C:5A:0E:0B:C7:4B:A5:10:34:A7:04:C8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.85.0/24
IPv6:
2001:678:598::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31010
Signature Algorithm: sha256WithRSAEncryption
64:f3:e9:67:80:79:a9:e0:02:1a:49:82:87:5f:5a:df:94:4b:
5f:eb:0a:1d:1c:b4:9e:62:20:fa:bc:72:21:60:3b:76:e6:78:
c3:90:7f:99:56:ca:74:54:56:df:e0:da:bf:7d:89:2f:3d:f6:
43:08:07:50:ad:f2:0e:fa:5c:d7:39:04:cc:0f:e0:e5:07:b6:
4c:dd:1f:50:4b:8c:e2:00:c8:ee:86:cf:48:e3:d9:a6:ca:0f:
9a:69:87:e7:a8:4d:c9:fb:ad:4d:c5:a7:40:0f:20:9c:c5:28:
5b:36:09:02:68:26:ff:db:23:c5:4d:51:f1:10:2b:2f:b8:17:
9e:90:68:18:73:2c:18:3b:ea:83:6d:46:8b:e0:6f:7b:d9:7c:
47:79:92:26:fb:4d:a4:a2:db:97:d8:42:9a:86:d9:28:be:0f:
ae:1a:ac:46:05:a5:85:82:77:da:aa:89:ab:aa:6f:8e:4e:7f:
3b:cd:77:22:8c:b1:3e:1f:3d:f5:1a:35:e8:d9:62:88:41:94:
53:84:e1:58:eb:2e:22:1b:d3:be:30:66:88:21:6c:46:ca:65:
6e:46:31:14:ab:e8:a6:48:04:85:90:45:b5:fa:a3:1e:dd:21:
61:c4:fb:fe:96:e3:52:06:af:1a:b4:24:41:e6:f7:bc:c6:77:
28:7f:66:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:05:55 2024 by rpki-client on console-fra.rpki-client.org