Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SXjTKLzeUpTzcnZcEa7vKBVbDwI.cer
File: SXjTKLzeUpTzcnZcEa7vKBVbDwI.cer (raw, json)
Hash identifier: 4n04xTuub5RxsHy7rt18xsD+He5DWbKU5fNAyKPIDi4=
Subject key identifier: 49:78:D3:28:BC:DE:52:94:F3:72:76:5C:11:AE:EF:28:15:5B:0F:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F2F1291FC722288E770AFB4FBDD83D6F6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Apr 2024 12:54:57 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 47745
IP: 85.187.1.0/24
IP: 151.237.60.0/23
IP: 185.255.59.0/24
IP: 212.5.56.0/23
IP: 2a0c:5a40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2f:12:91:fc:72:22:88:e7:70:af:b4:fb:dd:83:d6:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 30 12:54:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4978d328bcde5294f372765c11aeef28155b0f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:3b:be:47:45:35:f8:c6:20:7d:89:61:a3:c1:
34:5e:7f:68:a9:d9:4a:61:7c:06:51:34:88:e5:0b:
b8:73:4c:7d:ee:4d:e2:d4:e7:82:11:12:41:2a:1c:
78:85:dc:70:e2:d3:3b:49:23:5d:b9:3f:18:29:0e:
5b:16:b9:cc:78:01:1d:6f:dd:3e:f5:67:70:a6:4f:
2e:5b:26:ce:95:a4:88:40:eb:94:09:d0:52:32:67:
7f:8a:e2:8d:1d:eb:8d:ff:54:23:83:c3:8a:d2:97:
48:c8:41:e2:ba:54:f0:69:4d:d5:1d:f8:33:95:a2:
e9:aa:e8:26:b0:8c:40:61:02:4f:a0:8a:f0:bb:38:
c9:7e:00:c7:5e:c6:77:eb:6e:4b:6d:b7:51:a1:22:
61:ae:af:31:cc:ca:47:cb:1e:9a:3c:d9:fb:40:57:
96:b0:e6:7a:b4:1d:90:f9:8d:4f:86:5c:d4:2d:89:
20:ad:d2:5a:8f:40:71:4f:c0:56:e3:21:b0:57:5a:
d2:74:56:02:ce:31:9b:7b:80:55:26:f9:0a:93:79:
c0:3c:63:d1:e2:f2:60:b1:38:bf:0e:70:d9:d9:44:
af:65:7b:1d:52:b1:63:b9:ce:6c:2c:7a:30:78:ac:
15:b9:11:70:3c:64:56:3d:2c:73:c9:9c:1d:54:b8:
f2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:78:D3:28:BC:DE:52:94:F3:72:76:5C:11:AE:EF:28:15:5B:0F:02
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.1.0/24
151.237.60.0/23
185.255.59.0/24
212.5.56.0/23
IPv6:
2a0c:5a40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47745
Signature Algorithm: sha256WithRSAEncryption
15:f9:3f:86:c1:ef:da:68:2b:ec:b0:bc:2f:87:29:19:39:36:
2e:56:4c:1f:09:48:c7:6c:bd:7e:72:87:5d:8a:0c:9e:66:b7:
35:8e:9b:9e:12:25:40:11:ff:02:eb:0f:fd:cd:01:ba:6a:81:
55:8a:68:26:70:14:e1:f4:26:39:82:a2:a5:2d:88:ff:43:4c:
49:6b:c4:e7:38:4e:23:84:fb:34:c6:69:92:7d:6f:25:ba:97:
a0:76:ea:f6:95:6a:51:cf:40:4d:01:d1:8c:df:4c:61:02:fc:
21:38:1b:de:74:0d:57:b7:08:90:4d:61:fd:60:76:a8:57:f0:
af:46:2e:9f:ee:f2:f0:cd:33:57:42:81:c0:d3:4c:41:4a:2d:
5e:39:ac:69:4f:13:b7:ec:ee:dd:10:b5:86:c1:f5:14:eb:ab:
7d:d4:9b:ba:ae:68:b1:87:af:34:02:1f:16:c3:f3:b9:f7:0a:
34:fd:c4:39:34:a6:c1:01:00:2c:8a:7b:ad:f7:45:41:d3:5a:
e9:63:3c:05:c0:a9:fd:7f:db:06:bc:4d:1d:eb:1c:7a:63:b4:
93:97:0c:a7:36:13:2b:7c:32:21:09:3e:de:e7:85:ee:60:25:
b1:58:f1:41:18:2c:32:99:c7:10:ac:c6:e9:b9:2e:c7:3c:1b:
d6:4a:80:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:59:53 2024 by rpki-client on console-fra.rpki-client.org