Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer
File: W7HFcFXCnWafKJqfaPOSgjlCEyo.cer (raw, json)
Hash identifier: C4ebfv3Q9jhhm6Qa8j26K6mUJpJUPngDKt3d0PtebGk=
Subject key identifier: 5B:B1:C5:70:55:C2:9D:66:9F:28:9A:9F:68:F3:92:82:39:42:13:2A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DAE5AF2C2E653C599D1C9802E2D4F8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 209387
IP: 5.253.212.0/22
IP: 2a09:5dc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:e5:af:2c:2e:65:3c:59:9d:1c:98:02:e2:d4:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5bb1c57055c29d669f289a9f68f392823942132a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:61:be:93:d3:c2:09:98:1d:da:ff:4e:d9:5f:
2f:b4:36:af:f1:1e:96:d1:62:b7:81:9b:83:7a:d8:
e6:c5:66:6e:ba:54:6c:9c:d6:d6:5e:6f:58:95:ac:
31:c6:e6:32:90:37:9a:2b:44:33:e0:80:52:e5:93:
40:fb:c4:c0:b3:a7:33:de:ca:a8:2b:b6:84:75:e7:
c5:31:23:6e:c7:14:a6:64:b6:6f:11:61:10:6b:aa:
9c:38:c0:17:90:4c:cb:f9:e2:c0:aa:50:24:89:17:
cb:10:4f:0b:24:b6:f6:b0:ce:be:8d:4b:70:ff:01:
a3:4a:38:19:1d:aa:cf:f1:be:12:44:af:af:6f:82:
4d:1b:87:44:b5:f6:8a:64:a4:55:67:b3:2e:d4:f3:
9a:4c:de:24:ed:41:2f:a9:08:50:8f:7b:72:b5:55:
7b:32:34:34:64:af:b1:d7:10:62:49:83:66:b5:69:
29:7b:a4:b2:dc:59:71:67:f3:ad:df:45:b3:b0:d3:
83:91:60:ee:4a:bf:48:56:e9:e4:9a:85:a6:06:87:
83:8a:94:1e:60:21:6c:f4:9f:43:d5:e2:45:3d:b9:
53:10:55:35:0f:bf:90:f0:61:a6:61:e7:d9:b2:66:
1a:84:53:09:60:7d:4e:ef:a2:de:2d:c9:24:f8:37:
26:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B1:C5:70:55:C2:9D:66:9F:28:9A:9F:68:F3:92:82:39:42:13:2A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.212.0/22
IPv6:
2a09:5dc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209387
Signature Algorithm: sha256WithRSAEncryption
8e:d6:ed:3a:4b:83:eb:44:d8:d1:7b:7f:42:10:34:95:24:c3:
b8:15:27:f2:7f:99:6f:8b:b7:6b:94:1b:de:6e:a1:03:cb:cd:
a1:de:cb:88:dc:3e:f3:82:76:92:d1:a1:5e:c6:79:ba:8d:0a:
9c:02:2a:ad:69:0d:15:9a:12:45:10:9b:06:df:67:45:a8:2c:
14:4d:8e:21:0c:14:85:a2:f9:dc:29:49:cd:04:43:33:7c:a5:
3c:8c:e5:f3:93:57:94:b8:18:ab:19:49:27:bb:b7:c9:f9:43:
51:3a:83:95:c6:f3:dd:9b:08:cc:b1:2b:e2:19:b5:68:fd:8e:
e9:a3:b1:ee:91:50:6a:e7:80:f9:79:17:e8:25:b8:ae:58:a3:
b4:fc:30:2a:ba:3a:b9:6c:ff:b1:ac:40:28:df:ad:14:49:af:
a5:56:f2:82:50:78:0f:59:2a:c9:c7:eb:93:e1:12:23:11:4d:
66:6b:81:df:ee:a7:e9:3d:3b:dd:0d:9b:f2:e9:bc:fd:5b:37:
61:64:66:62:e9:2e:b3:72:9c:68:26:43:e8:61:43:52:cf:c0:
b3:40:c7:a6:02:c4:cc:b2:77:ec:2a:fa:b8:80:e3:55:e4:90:
3a:63:2e:97:4d:93:cb:cf:1a:66:4a:50:9e:5d:a7:57:d3:a3:
19:b8:30:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:35:18 2024 by rpki-client on console-ams.rpki-client.org