Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer
File: P5YkCZj85BJMPLTfusuw7RYYQFo.cer (raw, json)
Hash identifier: j7+qINWLlU7K/gjxWVyJxQN6A+ibqo0ZIsY1lEU6Y9Y=
Subject key identifier: 3F:96:24:09:98:FC:E4:12:4C:3C:B4:DF:BA:CB:B0:ED:16:18:40:5A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B6F210A6EC0371A07E89583009D97B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 198101
AS: 201457
IP: 185.52.216.0/22
IP: 185.74.204.0/22
IP: 2a03:4760::/29
IP: 2a04:bf80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:f2:10:a6:ec:03:71:a0:7e:89:58:30:09:d9:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f96240998fce4124c3cb4dfbacbb0ed1618405a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:07:52:f3:26:53:aa:c3:ad:59:aa:c2:ac:44:
3d:5c:53:a6:3d:b1:8a:59:4b:78:6f:30:7b:e1:be:
81:bd:ae:b9:03:93:d6:c1:e0:3f:0e:1a:c5:63:a4:
0e:30:b8:ad:06:97:b6:93:33:ef:87:48:02:e9:8c:
91:42:44:fd:c8:a2:76:33:e4:d8:f4:f8:7a:b6:51:
98:a0:66:fe:86:bc:69:1f:a4:74:da:ba:24:80:20:
58:d5:50:a8:4d:c9:fa:f6:d9:ff:61:3e:6e:60:c9:
b0:fc:05:7f:d6:8f:01:79:ca:3d:67:16:dd:17:e2:
49:b2:34:d5:1f:f3:d9:61:c7:ef:da:ed:fa:39:85:
6c:4d:10:80:ea:32:46:f3:64:f3:3a:06:77:53:0d:
c6:e9:ad:f2:a4:e4:67:ac:c8:21:bb:52:96:bf:d3:
93:3e:c1:62:c6:8c:28:7a:ff:10:63:28:fc:cc:b6:
ad:52:66:a0:b9:91:1a:25:51:fc:13:7f:d3:8e:97:
57:b1:35:3c:17:88:45:f4:ad:7c:69:2d:8d:8d:82:
88:03:98:78:43:4b:d8:fc:2e:2b:f2:84:95:3c:84:
5d:32:cb:6f:a2:11:a3:22:56:fd:d2:fc:f5:61:fc:
0e:a9:62:8f:b9:19:33:8a:97:f9:f1:e6:fd:d6:d3:
6d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:96:24:09:98:FC:E4:12:4C:3C:B4:DF:BA:CB:B0:ED:16:18:40:5A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.52.216.0/22
185.74.204.0/22
IPv6:
2a03:4760::/29
2a04:bf80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198101
201457
Signature Algorithm: sha256WithRSAEncryption
a0:24:40:5f:05:b0:90:b2:2b:af:9a:65:4b:24:dc:93:35:fe:
b6:17:dd:20:a4:75:1c:83:dd:5b:b5:62:45:05:85:13:84:78:
6b:bb:fe:06:d1:7f:4b:1e:3d:50:19:75:8b:c4:2f:f9:d2:2d:
78:65:cc:6b:3b:e6:33:7b:00:39:76:17:7b:0c:84:e7:61:9d:
ca:44:ae:9e:5a:09:bf:31:68:0b:99:79:31:52:fd:27:1e:cc:
c0:ce:f3:a2:a7:cd:4e:c0:33:21:da:e4:ef:da:7f:d1:ca:35:
4e:de:ac:dd:5e:14:16:8e:be:56:4a:98:d5:d0:a4:4c:b2:d2:
df:7c:b0:de:56:90:74:5d:e9:53:bf:f1:0a:0b:a3:97:4f:92:
6f:7b:89:3b:6f:70:78:7e:9f:25:90:fa:04:be:5c:de:1f:48:
3a:81:06:1b:54:17:83:df:f0:ea:ad:27:a1:9c:62:1a:98:dd:
62:0f:7c:cb:40:d0:59:86:02:7a:eb:17:ed:3e:e5:0c:7a:ab:
96:d1:19:e2:7c:e6:02:31:25:ce:8d:d6:88:8b:27:ca:ed:2b:
9a:2e:b4:92:35:57:ac:31:de:7d:5e:0c:40:f2:45:25:94:99:
ee:41:38:bf:80:8a:81:96:5a:98:6c:ee:d0:dd:9c:3c:dc:1b:
24:9f:23:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:56:50 2024 by rpki-client on console-fra.rpki-client.org