Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer
File: E38zct9XyBSrqLUakHhh2SueT1U.cer (raw, json)
Hash identifier: WPZmsYOVxVcMO/mM6rzRAfIb+j9xFnU+YKM/cA/cZUI=
Subject key identifier: 13:7F:33:72:DF:57:C8:14:AB:A8:B5:1A:90:78:61:D9:2B:9E:4F:55
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC0429F2590D3ECDEED933EAEBD06D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 209459
IP: 5.253.24.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:04:29:f2:59:0d:3e:cd:ee:d9:33:ea:eb:d0:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=137f3372df57c814aba8b51a907861d92b9e4f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ce:9f:19:c2:3d:a4:a0:10:79:55:22:57:3e:
0a:42:92:79:40:03:ef:3d:38:01:38:f6:31:5f:4a:
45:a6:82:96:55:cb:29:d6:c9:2e:89:c1:69:c0:9d:
0a:39:28:81:fc:4d:a0:ad:6a:c1:8f:ab:23:23:38:
12:d4:dd:73:a0:ce:3f:89:62:3b:97:4c:fc:0e:e0:
46:19:22:5c:19:f7:41:d3:0b:1d:e7:e1:fc:61:46:
2f:36:74:99:a4:3e:3e:e3:35:c7:1a:7b:86:bf:9d:
8c:b3:35:6d:35:8f:01:74:3f:66:c0:f3:2a:0c:38:
6e:99:c7:ef:1a:50:fe:76:96:95:4b:df:c8:e9:2f:
c0:d6:17:e4:eb:0b:bb:40:9b:a7:aa:0f:7b:35:7a:
df:5a:00:0a:20:c2:ea:7f:05:1f:6b:3e:03:8d:4d:
1c:82:e4:fd:9b:96:cf:79:27:1c:04:1e:05:51:d8:
1c:1d:ab:22:6e:f2:80:8f:b9:75:0a:5a:e4:8f:07:
1d:3d:59:8d:cc:11:c6:86:b4:21:4f:9c:54:9a:85:
72:77:ee:1d:57:69:c4:94:be:4e:f5:60:a0:7e:ad:
74:c3:25:5f:48:db:39:c5:48:40:9e:0d:54:09:0f:
b6:d2:53:66:60:a9:fa:32:ce:d2:7f:91:bb:62:23:
eb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:7F:33:72:DF:57:C8:14:AB:A8:B5:1A:90:78:61:D9:2B:9E:4F:55
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.24.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209459
Signature Algorithm: sha256WithRSAEncryption
61:cf:fa:2c:ee:9e:c1:64:44:87:41:0b:c5:bb:15:74:e3:33:
38:bd:94:b1:25:45:1d:36:9b:d2:e2:cf:2b:fd:6c:cd:dc:e1:
5b:ad:67:c5:6b:e8:c9:65:9c:0b:87:12:60:86:f2:0c:5f:32:
8d:a6:a7:9a:d3:c6:a9:3a:5a:f5:cf:73:05:a3:92:e2:c7:9f:
2a:0d:23:93:9f:e9:dd:5f:fb:2a:dd:9e:0a:2f:22:b4:d9:02:
d3:80:40:d0:42:6b:51:0c:84:cf:69:51:58:24:88:a6:10:ad:
3c:5b:a3:da:5c:ac:88:55:21:5f:8b:75:c7:6b:47:cd:a1:a4:
87:66:2b:f3:5b:b4:02:07:d8:b5:33:83:1a:d9:e0:47:0e:54:
d8:9f:26:92:de:ce:28:90:36:6a:7c:de:b8:a9:75:40:58:86:
a5:7c:5b:38:5a:c9:70:9e:73:16:05:c2:45:51:d7:c3:0e:b7:
43:63:d6:51:e5:85:dc:66:de:39:ac:c6:59:23:89:54:fb:be:
1e:5c:90:e4:0b:9e:a1:0f:84:ea:22:19:9e:12:33:73:af:cd:
88:eb:33:34:80:c5:80:b8:11:50:7f:3e:f9:7f:33:e9:61:83:
21:23:49:92:0d:63:1a:f9:c5:e0:4d:9d:b7:bd:3a:b0:e7:ac:
43:cc:7f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 17:29:09 2024 by rpki-client on console-ams.rpki-client.org