Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/N5D3H6pDya9aDc9gP9Cyp4wiSpM.cer
File: N5D3H6pDya9aDc9gP9Cyp4wiSpM.cer (raw, json)
Hash identifier: ABfqYuKBsH5sbpVW2jeXFXCyUJyJ62faExacsSlV4YM=
Subject key identifier: 37:90:F7:1F:AA:43:C9:AF:5A:0D:CF:60:3F:D0:B2:A7:8C:22:4A:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC80157BBCD05479D3E0B4FD68E87F3EE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 50826
IP: 185.133.156.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:57:bb:cd:05:47:9d:3e:0b:4f:d6:8e:87:f3:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3790f71faa43c9af5a0dcf603fd0b2a78c224a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:00:d3:c2:dc:17:1f:aa:e4:ee:6b:8f:5d:b2:
a4:16:62:8d:e3:b6:c1:1c:e6:82:bb:ac:94:0a:e8:
23:90:7c:b4:51:c3:b7:c8:d7:2d:b8:57:28:10:e4:
3b:30:81:37:2f:b6:14:dc:00:13:d9:35:91:fe:09:
cb:26:0d:02:25:94:6b:e1:94:6a:86:11:29:2a:94:
4c:ce:58:7f:67:48:79:a5:94:4a:a5:cb:b4:70:19:
ac:ce:55:dd:6c:42:97:96:6d:7a:32:7c:1e:55:ec:
e3:e8:19:e5:f1:42:ac:32:d4:4d:9f:bb:18:2f:e6:
bd:db:89:6b:3a:a0:48:a3:01:11:9e:b4:12:33:90:
e6:d4:5c:ae:d2:82:b7:29:22:1c:ee:34:5b:e0:a8:
ec:51:70:9e:2f:b5:ba:a4:f0:17:b5:bf:c0:4a:06:
09:a1:f1:24:16:06:ce:87:9b:1c:73:8c:57:ed:78:
38:d3:db:c4:95:73:91:e2:c5:e2:d4:5e:23:5d:2b:
87:9e:8e:f9:af:56:fa:c2:ee:4d:96:d7:f7:ac:8f:
94:e0:da:06:ff:21:50:53:eb:80:56:b2:1e:cd:26:
b5:24:3e:0d:50:a9:a1:2c:a8:74:2c:58:64:85:d9:
fb:d0:df:72:f7:19:6d:10:2d:2d:61:e3:1c:f6:1d:
6d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:90:F7:1F:AA:43:C9:AF:5A:0D:CF:60:3F:D0:B2:A7:8C:22:4A:93
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.156.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50826
Signature Algorithm: sha256WithRSAEncryption
91:c1:84:db:e3:bc:59:df:78:06:60:04:98:4d:20:9e:e9:43:
16:2e:5d:4e:dd:a6:12:a0:09:5b:d5:24:e3:67:c3:ec:86:75:
da:e1:47:c6:52:62:6f:82:30:4e:41:40:4e:0d:b9:27:19:b2:
3c:14:7e:96:42:70:8d:3d:e1:c1:d4:1a:6f:43:96:29:f0:2c:
3a:79:2a:2d:6e:89:30:c6:b0:34:4b:12:a2:81:3c:99:ca:48:
53:2a:33:bd:69:b4:9c:94:aa:d6:de:cd:87:e8:70:92:51:b7:
7a:b8:a8:c7:8e:33:04:84:66:fc:a8:65:3e:b6:d1:f7:ed:46:
4a:79:01:f9:51:f8:8c:cf:6e:da:ee:d4:8e:60:9c:59:7d:6c:
2e:6e:1b:62:4b:50:29:7d:a8:90:ca:d2:e2:12:5d:89:09:80:
1c:ae:f0:6e:d7:cf:bd:64:58:6f:32:6c:af:68:99:4a:46:de:
e5:d0:33:a9:b8:75:61:01:18:f5:bd:09:2c:18:f5:f8:13:8a:
03:be:91:9d:ad:b8:71:26:ba:a6:00:f3:7a:c3:64:a4:4f:e5:
3a:5a:49:7f:66:c6:4e:7a:cd:e0:58:a3:14:13:d3:70:a7:b0:
ae:04:66:8e:f3:84:75:39:76:0c:ac:92:2b:5d:74:1b:89:6e:
2c:6c:b4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:04:33 2024 by rpki-client on console-ams.rpki-client.org