Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
File: Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer (raw, json)
Hash identifier: 4E/dM//5OcZ/XhbneY26EV8ObOWzo+VnQNeQcV1p9E4=
Subject key identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BC525DFF2B09F22075D9182BAC5113
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 29555
IP: 85.117.96.0/19
IP: 185.57.72.0/22
IP: 217.76.64.0/20
IP: 2a03:32c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:52:5d:ff:2b:09:f2:20:75:d9:18:2b:ac:51:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f2:5e:5f:c8:34:42:32:51:63:ee:a9:bf:f9:
8f:cd:20:a7:72:1e:6d:bc:81:25:5e:3f:20:d5:1f:
f4:2c:fd:38:09:55:2f:6e:c2:43:4c:f7:48:93:91:
fa:fb:27:26:ae:8d:60:65:bb:b9:e4:58:ad:bf:9f:
c1:57:56:b7:f0:a0:fa:01:69:04:26:17:b3:67:d3:
31:2f:fd:e9:d3:7b:79:a4:6e:18:31:42:69:f1:d1:
bd:33:87:3a:82:f7:c6:f8:5f:62:e8:30:e0:0c:b4:
62:db:87:42:f9:d7:47:fc:a9:7f:2f:24:ca:f6:49:
2c:85:b3:c7:24:74:f1:76:0f:87:05:77:61:f3:51:
d0:d0:5a:82:96:d7:9d:a9:d1:43:db:75:ea:f9:72:
3c:df:df:f4:52:48:e4:4b:68:ac:ac:bc:a4:60:d4:
c1:25:a2:e2:7d:79:ef:07:93:5a:59:48:ab:b2:88:
76:0f:7a:cb:8d:ca:3d:c0:41:cb:9d:05:53:45:c4:
5c:67:4a:c0:8f:d7:04:3e:15:8b:3f:da:7e:d5:f4:
ab:9b:c7:a4:28:30:e1:e0:92:af:33:b4:30:91:ab:
53:8a:f1:33:b1:f4:bd:73:2a:c4:b4:07:57:f0:b6:
df:87:ff:24:13:1e:ed:a5:ae:ea:14:ca:dc:c6:d3:
35:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.117.96.0/19
185.57.72.0/22
217.76.64.0/20
IPv6:
2a03:32c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29555
Signature Algorithm: sha256WithRSAEncryption
92:ed:f1:d3:85:bc:dd:30:27:44:6d:8e:40:8f:b3:31:6a:19:
62:67:54:6e:34:b9:11:35:83:a2:39:ac:85:67:13:76:1e:cd:
03:34:34:ce:3d:94:71:b2:c0:63:a0:63:12:66:11:9f:36:9b:
5a:19:64:17:31:f2:ca:09:d1:b1:80:24:93:f3:35:32:f4:28:
78:54:08:ac:32:76:59:6a:e1:ae:a7:74:c4:59:d0:f0:13:1a:
3b:cf:ea:38:bb:76:e2:94:a4:5a:9a:95:d0:2b:08:6d:bc:2f:
e3:09:1d:b7:17:8a:d3:e9:7a:d7:9d:dc:26:55:6c:ff:c3:a1:
e8:32:6c:42:ce:9a:9d:c7:66:39:be:05:ad:4f:24:83:89:9a:
39:2f:20:d0:b4:c3:62:69:72:2d:8b:19:df:de:97:75:b3:81:
0f:99:f4:2b:a0:0d:c9:2e:68:14:64:ae:fb:98:c1:d9:9c:6d:
dd:f8:54:98:05:32:75:4c:13:61:ac:8c:77:6a:05:86:5d:c2:
91:4d:d9:1a:c3:19:11:20:c5:66:e1:a2:6f:44:f0:0a:5b:c7:
39:70:5c:69:d6:ca:1a:72:4e:82:41:04:76:e1:64:86:d7:66:
a1:53:bf:f0:22:a2:fd:9d:b6:ee:44:86:52:f0:6c:e2:e1:30:
e0:ce:6e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:40:21 2024 by rpki-client on console-fra.rpki-client.org