Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EXa5JJcZYIXW-71fHJkpzyuCMKg.cer
File: EXa5JJcZYIXW-71fHJkpzyuCMKg.cer (raw, json)
Hash identifier: 7dSAVmXqC9q1mLA1fOZhDMRgy2bcpPVbJOjC65Hwteo=
Subject key identifier: 11:76:B9:24:97:19:60:85:D6:FB:BD:5F:1C:99:29:CF:2B:82:30:A8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5001A0EAA9FFDE82F5A8A050277654A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a5/b9e6d5-a045-4438-bcaa-9d94fe97f125/1/EXa5JJcZYIXW-71fHJkpzyuCMKg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a5/b9e6d5-a045-4438-bcaa-9d94fe97f125/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:29:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 50819
IP: 91.234.168.0/23
IP: 194.1.169.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:1a:0e:aa:9f:fd:e8:2f:5a:8a:05:02:77:65:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1176b92497196085d6fbbd5f1c9929cf2b8230a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ac:3f:26:ca:aa:a0:ea:80:bd:5b:c1:32:f5:
62:b7:34:f2:35:eb:2c:ee:8c:ee:00:aa:5a:f1:f2:
b1:0d:d6:9e:31:f5:36:22:af:ee:c7:0c:af:88:23:
b5:06:fc:8b:44:db:0d:ab:ce:eb:62:c4:70:4b:2a:
8f:58:a7:04:7d:6b:4c:c5:f1:53:e2:26:ff:d8:6c:
ea:5e:9a:a7:d3:cd:90:a1:b2:7b:0c:4f:ee:bb:cc:
87:e6:f0:e8:23:22:6e:d6:db:e2:26:36:b2:ef:2b:
b9:10:2e:c6:5d:3f:9b:7e:61:af:47:81:e8:80:1d:
c5:da:f0:99:cd:0f:d5:c8:dc:7c:09:2f:ca:98:65:
10:24:da:50:6f:26:2c:da:51:d5:78:e8:d5:cd:9d:
6d:1f:17:5c:78:5f:09:6a:de:84:be:07:e2:84:0e:
5a:34:8d:aa:5f:b6:6e:21:55:3a:2c:00:b8:02:d1:
5d:a9:d5:db:51:23:2f:f0:ea:11:cf:92:2a:e8:69:
83:4c:67:f6:bd:b6:9e:df:1a:ab:20:be:c0:00:21:
35:84:2b:5c:04:d5:ca:cc:01:38:92:d5:ae:e3:ea:
e7:2a:35:04:ab:cf:3a:b2:fa:78:02:ce:a6:e9:a8:
eb:95:2e:4c:9c:1b:9f:8d:47:6b:96:f4:1f:e8:8e:
8b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:76:B9:24:97:19:60:85:D6:FB:BD:5F:1C:99:29:CF:2B:82:30:A8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b9e6d5-a045-4438-bcaa-9d94fe97f125/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b9e6d5-a045-4438-bcaa-9d94fe97f125/1/EXa5JJcZYIXW-71fHJkpzyuCMKg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.168.0/23
194.1.169.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50819
Signature Algorithm: sha256WithRSAEncryption
1a:27:65:cf:a8:4c:c4:e1:d0:30:d1:1b:b7:aa:49:01:4b:40:
34:44:d9:88:79:40:44:5e:7f:8c:c6:45:5c:55:d2:7a:03:eb:
c5:7b:e2:dd:58:b1:2e:fc:25:ba:ce:4b:42:4f:18:f2:f2:40:
bf:00:2e:05:4b:52:4c:0d:97:08:97:4d:ae:72:65:03:28:3d:
2c:8c:fc:03:73:22:77:91:61:06:30:39:22:c4:56:30:7a:28:
d6:73:f7:67:2d:38:e9:1b:43:5b:62:eb:3a:5b:dd:32:70:b6:
87:3a:4b:55:92:1d:b8:e1:e6:3e:f8:16:26:b3:b8:37:6c:9c:
25:58:ff:29:94:1b:bb:9f:ad:7e:9d:fa:93:2c:47:98:1f:fa:
75:44:4f:6b:70:66:c3:ca:c0:67:10:5c:e5:46:59:0e:88:33:
60:05:a6:38:db:be:8f:a3:c1:8f:ab:ad:2f:b5:e2:7f:82:96:
40:e1:22:a5:82:4e:7e:c9:75:4f:95:42:b8:4a:14:98:a8:f2:
66:8c:66:34:7b:75:ff:fe:cb:5c:ed:54:e9:a2:af:26:8e:c4:
82:46:a1:16:4b:7f:fc:83:cc:42:b5:e7:ae:99:c3:94:ea:b3:
61:44:8d:2d:e0:4c:20:26:1f:a7:68:ee:dc:4b:04:79:61:58:
68:03:50:0d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 26 11:54:12 2024 by rpki-client on console-ams.rpki-client.org