Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer
File: PIbsMh5y_UbJjcwM18cLytVX1Zw.cer (raw, json)
Hash identifier: mypxkaV+/KixWRIq5tzF8rEhIkSHwr9IYEX9Sp7q87E=
Subject key identifier: 3C:86:EC:32:1E:72:FD:46:C9:8D:CC:0C:D7:C7:0B:CA:D5:57:D5:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E570B747E5F38ED40D722B0C7827B3F81
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 19 Mar 2024 14:09:12 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 207607
AS: 209097
IP: 5.182.144.0/22
IP: 45.149.56.0/22
IP: 185.115.204.0/24
IP: 2a0e:5c00::/29
IP: 2a12:f280::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:57:0b:74:7e:5f:38:ed:40:d7:22:b0:c7:82:7b:3f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 19 14:09:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c86ec321e72fd46c98dcc0cd7c70bcad557d59c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a5:10:92:54:9e:9c:41:b3:d1:cf:6a:86:e2:
13:fa:ba:16:a7:d5:07:78:55:cf:7f:9f:c3:83:8c:
eb:2d:e0:b4:c5:fd:a7:0f:2c:9c:27:66:85:13:4b:
dc:5a:3a:7e:40:e4:f0:71:87:d4:81:a6:db:2b:b1:
c8:63:51:e6:e8:79:4d:d7:1d:0b:a3:a4:e4:ba:50:
15:bc:3b:68:59:fb:7b:e3:f8:85:b5:82:a1:4a:48:
5f:a6:0f:ef:c7:33:b8:44:e6:51:42:ce:18:22:1f:
96:02:5e:e5:cb:f0:94:c5:5a:58:35:e3:d6:dd:86:
d5:9f:1c:ce:41:59:f3:93:bf:75:a4:d4:ad:5d:3d:
62:ca:c1:86:00:45:68:87:0c:fc:d0:ae:11:5c:ef:
33:b9:3e:a2:e3:30:e6:d4:81:2b:e0:b3:43:02:0e:
eb:ed:9d:61:81:b6:b5:0a:79:b4:66:f7:70:6c:e8:
1c:d6:96:2d:16:d7:b8:2c:7c:92:83:23:c7:4c:1c:
6b:05:1c:78:78:29:51:7c:db:25:f9:67:41:ad:a7:
84:57:19:ec:56:cb:f3:e8:86:b5:04:c8:23:c3:6d:
7d:9b:58:0e:32:ac:a6:bf:af:ae:00:c8:4e:e5:cd:
7f:53:63:d0:9d:59:36:40:16:a0:a1:37:f6:9a:55:
76:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:86:EC:32:1E:72:FD:46:C9:8D:CC:0C:D7:C7:0B:CA:D5:57:D5:9C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.144.0/22
45.149.56.0/22
185.115.204.0/24
IPv6:
2a0e:5c00::/29
2a12:f280::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207607
209097
Signature Algorithm: sha256WithRSAEncryption
20:ba:d8:2f:32:db:88:75:9a:5b:67:f0:e9:25:45:6d:ef:6b:
38:87:ea:71:13:f5:01:d4:c1:6a:55:9a:ef:8d:ca:56:9d:a3:
7f:09:20:cb:05:92:90:3d:b1:9a:a2:ba:0d:e2:94:91:32:92:
51:35:7b:5b:08:4f:9f:da:a4:72:a1:87:08:20:a9:5c:e3:f6:
dc:da:b4:1e:d9:d6:c3:55:38:22:42:c9:eb:7d:64:d7:8e:7b:
04:8f:74:64:47:15:2a:b4:d8:da:f8:a3:75:c8:74:6f:18:ff:
5c:72:51:48:db:60:aa:ef:e3:d1:8b:f2:3a:d5:55:f9:9e:d0:
2d:c0:13:97:90:71:d7:a5:1e:43:ad:ce:54:e7:eb:ed:d5:f6:
ff:05:2c:b2:e9:f3:89:b8:0e:a9:5d:af:a9:06:bf:8b:11:f9:
40:b2:cb:5d:c9:8e:8e:01:1f:0d:03:3c:42:46:7a:5e:bc:50:
97:f2:1d:8c:12:fb:bf:f8:03:07:57:d5:d7:80:bd:30:41:f4:
62:70:20:ea:a0:e4:c0:1b:90:65:b1:cb:4e:7c:dc:f2:a0:dd:
33:cd:b5:6d:8e:ae:e2:e5:07:15:6e:16:c5:dc:21:4d:f1:b9:
8e:60:be:32:fc:e4:d5:8f:c7:bf:67:1b:ca:86:22:54:a9:3a:
34:42:98:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:15:02 2024 by rpki-client on console-fra.rpki-client.org