Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
File: J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer (raw, json)
Hash identifier: Qw+gUoPnF2Bo/ayTNeU0X/Rr2HmYRVzXDxap+oj2ie4=
Subject key identifier: 27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D68C803B5171F8ACABEAE6BB4332EBE1E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Feb 2024 07:45:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 48289
IP: 5.22.192.0/21
IP: 2a02:d780::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:68:c8:03:b5:17:1f:8a:ca:be:ae:6b:b4:33:2e:be:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 2 07:45:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=279159ef22f82b936731664ee67c3b6ea96ef443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:94:2c:d0:a3:07:cf:f6:4a:6c:25:6a:44:6b:
64:b9:29:2d:1a:f6:37:36:d7:e1:0b:4a:1f:71:d1:
b3:50:57:cb:89:30:34:09:4d:5a:a3:06:f4:67:c6:
45:a3:88:2d:9d:9d:47:2c:83:f6:a4:c2:8f:b8:ea:
1c:e8:c6:6b:0c:f4:69:85:af:f5:23:b3:e3:40:8c:
28:fc:1b:92:89:54:4b:70:5a:73:aa:94:0b:f6:5b:
6e:bf:14:59:06:a0:c1:6d:bc:df:9c:bc:9d:a7:ed:
59:0a:98:70:1c:97:d9:c8:f4:83:10:5a:2e:6f:51:
30:49:7b:65:eb:c4:4a:24:a3:a1:98:2f:18:28:7e:
a5:5d:89:d9:f5:ea:48:5b:b7:2b:ee:8c:f6:36:65:
1f:52:5a:eb:90:db:8e:a6:a8:d0:b1:58:a1:05:66:
db:c7:0d:4b:53:49:8d:06:b1:67:66:5f:9c:96:86:
47:87:22:84:3f:fb:55:90:f7:24:b1:60:59:16:4a:
20:d6:d5:8e:d9:57:24:db:b8:10:64:f5:dc:be:bb:
b6:f0:7e:18:50:df:08:50:ce:ec:af:cd:67:7c:5d:
eb:43:cf:9b:9a:79:9c:f0:86:f4:c8:07:aa:48:9e:
f8:fc:5f:50:65:f7:3f:90:40:a6:ba:36:a7:8e:93:
5e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.192.0/21
IPv6:
2a02:d780::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48289
Signature Algorithm: sha256WithRSAEncryption
76:9e:0b:28:10:1d:82:4b:c8:3f:5c:c4:49:7e:94:37:60:5c:
a7:f1:28:03:8f:b0:d9:d1:9b:12:89:65:33:ed:e9:ab:cb:1c:
88:9d:2e:3c:ce:7a:f7:5f:88:97:9e:56:30:4b:f4:9f:22:43:
69:10:cd:df:0a:b6:63:1f:da:f7:75:27:36:d7:21:8d:ec:b1:
86:a3:3c:54:1a:73:b1:d1:01:1d:ba:0e:8f:41:df:2f:49:8c:
f4:c8:a0:06:5d:ac:4f:00:55:7e:81:e0:fd:27:a8:bb:17:4d:
2f:8e:f8:cc:38:4c:1d:81:b4:68:43:ac:bb:0e:30:60:bb:9d:
ea:9e:92:e5:ef:cf:bb:0e:5a:1c:32:77:b4:0d:42:0f:66:9c:
42:e2:f1:5e:d1:db:94:0e:60:09:e9:f3:b9:23:98:2e:42:f5:
28:53:89:e6:a2:f0:c3:c8:0b:f0:05:a1:e4:a3:47:43:06:8b:
45:cc:03:c7:45:7f:fe:b2:c6:42:5d:92:cb:b5:c8:7b:1e:aa:
29:11:8c:fd:ce:d2:d7:c7:d0:ac:c2:6f:31:10:8a:3e:d8:99:
83:d7:13:1c:dd:1d:61:fb:91:5f:95:5c:6f:d1:95:bd:5f:27:
2c:75:09:79:b1:49:e1:2f:b0:98:74:48:17:63:17:1e:4c:8e:
9f:65:61:10
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAY1oyAO1Fx+Kyr6ua7QzLr4eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMjAyMDc0NTU1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzkxNTllZjIyZjgyYjkzNjczMTY2NGVlNjdjM2I2ZWE5NmVmNDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZQs0KMHz/ZKbCVqRGtkuSktGvY3
NtfhC0ofcdGzUFfLiTA0CU1aowb0Z8ZFo4gtnZ1HLIP2pMKPuOoc6MZrDPRpha/1
I7PjQIwo/BuSiVRLcFpzqpQL9ltuvxRZBqDBbbzfnLydp+1ZCphwHJfZyPSDEFou
b1EwSXtl68RKJKOhmC8YKH6lXYnZ9epIW7cr7oz2NmUfUlrrkNuOpqjQsVihBWbb
xw1LU0mNBrFnZl+cloZHhyKEP/tVkPcksWBZFkog1tWO2Vck27gQZPXcvru28H4Y
UN8IUM7sr81nfF3rQ8+bmnmc8Ib0yAeqSJ74/F9QZfc/kECmujanjpNezwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFCeRWe8i+CuTZzFmTuZ8O26pbvRDMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFhLzVjMTVi
ZS1hZWYyLTRjMzEtYmZiNC0zMWJhZjZlZWRlOGEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWEvNWMxNWJl
LWFlZjItNGMzMS1iZmI0LTMxYmFmNmVlZGU4YS8xL0o1Rlo3eUw0SzVObk1XWk81
bnc3YnFsdTlFTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQDBRbAMA0EAgACMAcDBQMqAteAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwC8oTANBgkqhkiG9w0BAQsFAAOCAQEAdp4LKBAdgkvI
P1zESX6UN2Bcp/EoA4+w2dGbEollM+3pq8sciJ0uPM5691+Il55WMEv0nyJDaRDN
3wq2Yx/a93UnNtchjeyxhqM8VBpzsdEBHboOj0HfL0mM9MigBl2sTwBVfoHg/Seo
uxdNL474zDhMHYG0aEOsuw4wYLud6p6S5e/Puw5aHDJ3tA1CD2acQuLxXtHblA5g
CenzuSOYLkL1KFOJ5qLww8gL8AWh5KNHQwaLRcwDx0V//rLGQl2Sy7XIex6qKRGM
/c7S18fQrMJvMRCKPtiZg9cTHN0dYfuRX5Vcb9GVvV8nLHUJebFJ4S+wmHRIF2MX
HkyOn2VhEA==
-----END CERTIFICATE-----
Generated at Fri May 3 06:55:14 2024 by rpki-client on console-ams.rpki-client.org