Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/G5gPIqWVKk75pOxKng0MNR_slFQ.cer
File: G5gPIqWVKk75pOxKng0MNR_slFQ.cer (raw, json)
Hash identifier: fdWEbgqQPxWGslqpR2/U1BqWVEhPpYfO9J+a12Nqwqw=
Subject key identifier: 1B:98:0F:22:A5:95:2A:4E:F9:A4:EC:4A:9E:0D:0C:35:1F:EC:94:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC493995FEA3884BEB0248BBDAFDB65E0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:56 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 25560
IP: 62.216.160.0/19
IP: 85.199.128.0/18
IP: 95.143.160.0/20
IP: 147.78.108.0/22
IP: 217.24.208.0/20
IP: 2001:1a50::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:99:5f:ea:38:84:be:b0:24:8b:bd:af:db:65:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b980f22a5952a4ef9a4ec4a9e0d0c351fec9454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ca:41:f4:ac:e5:94:81:2f:72:0e:7c:4f:6c:
f0:c9:df:78:2e:76:cb:ed:ec:d2:4d:f1:ad:1f:7d:
7c:9a:92:db:c1:97:60:45:5c:2d:64:13:69:2c:3e:
9f:71:94:77:44:ae:ff:55:33:e1:4c:d3:69:a4:12:
87:5e:cd:e8:c0:6d:8c:0a:57:33:c7:fd:f4:5b:f5:
a3:a5:34:9a:72:e4:fa:6b:fe:ff:1e:bc:e8:0c:08:
37:44:24:76:01:2a:0d:92:ef:f1:49:34:ed:89:4a:
af:17:2f:27:93:7d:54:de:e2:0d:af:12:f3:f5:39:
f8:4d:2e:ba:ef:20:ef:b4:27:75:c1:65:e5:79:92:
45:d2:5d:a4:7f:3f:34:06:40:06:a9:dd:21:24:ea:
6e:35:68:e0:a5:17:c4:88:69:bd:37:56:3e:93:21:
f3:b8:9b:2a:15:7e:cb:76:f8:37:9d:c7:1e:27:c1:
be:71:75:9e:51:af:c4:bc:07:31:1e:75:e2:d3:21:
19:9d:93:e2:0f:b1:56:92:86:8d:28:22:50:6c:08:
94:73:78:b3:07:fe:9b:c3:c6:64:41:8f:f3:f0:e1:
67:f2:ef:7a:ac:3c:e3:f4:d9:0f:60:67:be:19:d0:
1c:e4:bb:68:45:07:54:8f:d0:5f:f7:71:24:fa:f7:
a7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:98:0F:22:A5:95:2A:4E:F9:A4:EC:4A:9E:0D:0C:35:1F:EC:94:54
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.216.160.0/19
85.199.128.0/18
95.143.160.0/20
147.78.108.0/22
217.24.208.0/20
IPv6:
2001:1a50::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25560
Signature Algorithm: sha256WithRSAEncryption
a2:e5:cb:7b:ed:50:75:a4:82:23:42:5c:3e:4f:2c:1d:3e:cf:
81:4b:4d:99:f1:a8:1d:9d:9e:ce:30:a1:a2:fb:f9:00:bc:93:
e9:99:07:30:44:d1:22:eb:30:46:30:ab:2e:24:d0:a6:9b:90:
8f:9a:5c:a6:31:4b:e4:00:b9:ee:10:1d:c6:96:48:ae:6c:d5:
56:7d:39:a0:62:cc:70:b0:3b:05:cf:73:8e:ec:2b:5a:64:14:
f8:05:c3:f9:86:6b:75:ee:03:45:f1:76:f1:ea:e4:01:64:00:
47:f1:a1:e8:9c:f4:57:61:6d:30:07:1f:a0:a2:1e:ff:3e:65:
f3:51:1b:03:27:a6:6d:1d:88:15:d3:d6:5c:24:7c:9d:c6:1c:
1b:b2:d2:26:3c:3a:03:72:7d:76:46:70:fc:2e:44:e4:88:c5:
05:3a:31:79:ec:76:9f:fe:ae:26:e1:3e:33:f9:ab:8c:bc:bd:
da:48:c0:93:c2:e7:ed:68:ba:73:96:48:b9:d6:65:4e:3e:6a:
4e:d8:06:3d:dd:40:74:24:59:64:65:57:6f:73:4f:fd:4e:11:
f7:7e:ca:4a:0d:49:21:17:0e:2d:0f:e8:8a:f1:5e:cb:a5:a9:
d7:5b:99:27:6e:ff:da:a3:5c:d5:52:0f:78:02:83:3d:d4:f8:
7b:73:f7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 06:57:22 2024 by rpki-client on console-ams.rpki-client.org