Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.cer
File: A5sBNT5Ro6h-g1ljvYgz7YGFPXc.cer (raw, json)
Hash identifier: 8rf/Xnmh/LMblBSpCVQM+/2ehv34BIvurTrvXmFarMo=
Subject key identifier: 03:9B:01:35:3E:51:A3:A8:7E:83:59:63:BD:88:33:ED:81:85:3D:77
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8708244599922730CD092D0A3A3DEB0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:31:05 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 35260
AS: 203318
IP: 185.138.80.0/22
IP: 185.214.73.0/24
IP: 217.26.112.0/20
IP: 2a00:1ac0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 21:23:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:82:44:59:99:22:73:0c:d0:92:d0:a3:a3:de:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:31:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=039b01353e51a3a87e835963bd8833ed81853d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0a:ed:12:f0:7f:c6:a7:22:82:3e:85:7c:98:
8f:9f:7d:3f:2b:85:4e:e7:50:5f:d7:db:32:20:dd:
2c:a3:03:c3:67:ba:b2:e5:e1:90:08:9d:1d:29:9a:
8b:ca:f0:94:b6:95:1f:ae:86:5c:04:fc:35:86:0e:
4a:28:b0:67:8e:5a:fa:65:e7:21:84:96:31:4c:cb:
aa:26:07:d5:aa:d6:87:78:3b:79:9e:a5:f8:bb:74:
d9:cc:1a:74:1c:7a:16:9a:74:7b:2d:ce:4f:a2:f5:
4c:2b:46:65:c0:3d:ee:3b:93:f6:88:56:04:bc:3e:
bd:30:25:0d:53:f4:c0:e0:7a:4b:7c:49:4d:a6:e1:
82:88:09:70:b3:72:b5:a2:b8:95:04:c7:99:9b:ba:
e2:e5:17:49:05:c5:a7:4d:24:01:38:95:a9:31:0a:
0d:1e:4b:04:ad:17:db:77:b5:77:7c:2d:40:6a:2c:
c1:fa:c9:04:18:93:29:c9:e9:bc:4b:36:7e:f9:88:
2d:23:74:0d:66:93:d0:86:6b:ea:c7:17:49:d6:6e:
7a:7e:6f:9f:74:29:1f:32:90:20:00:5f:33:b3:8c:
bd:b4:c3:70:6a:5d:b9:96:89:07:75:b8:38:ed:80:
2a:df:23:50:21:12:40:b3:df:28:b2:31:38:09:53:
cb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9B:01:35:3E:51:A3:A8:7E:83:59:63:BD:88:33:ED:81:85:3D:77
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.80.0/22
185.214.73.0/24
217.26.112.0/20
IPv6:
2a00:1ac0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35260
203318
Signature Algorithm: sha256WithRSAEncryption
10:82:94:1d:7f:ed:87:1a:68:bd:4a:ed:b1:ec:3e:23:81:3e:
4f:aa:f5:61:b9:4e:2b:b5:77:52:37:e2:7d:52:06:a8:1c:a1:
d1:1b:cf:96:1c:c5:cb:c2:02:0a:86:4e:98:89:9a:3c:ae:20:
20:80:18:09:fb:6e:07:fb:c4:7b:fe:fe:68:ea:25:99:70:45:
5b:be:c8:78:cb:3d:0c:ee:7d:1e:3c:f5:8b:e9:ed:57:10:22:
b1:c9:39:1b:ad:84:cc:c0:6f:d3:7e:fa:c2:61:31:13:f7:6d:
35:f5:9e:32:46:f0:e6:4f:7b:c9:d2:7c:d8:f2:7a:60:b9:16:
14:03:6d:59:00:f7:0c:89:66:0d:d3:67:3f:c6:a3:94:12:0b:
71:c9:3f:8d:68:b1:f8:b1:24:d6:8b:ab:7e:eb:56:aa:3b:bb:
ac:9f:fa:48:17:5d:87:07:6f:24:83:80:cf:04:4f:78:92:9b:
b9:bf:ca:f1:82:ac:32:a9:af:94:de:59:08:f1:1d:4e:6c:4e:
60:5a:ec:b0:73:ce:37:d2:57:92:da:e8:e3:1c:31:72:25:f8:
44:04:2e:06:69:79:f0:a6:1d:9f:bd:ee:c3:76:75:cd:2e:24:
11:fd:e9:47:37:14:59:5c:24:b2:64:e0:94:69:c0:b4:dd:4f:
0d:fa:19:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 00:19:52 2024 by rpki-client on console-ams.rpki-client.org