Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer
File: _5JbpaQQRnlkY0z_SvrXelbaRyI.cer (raw, json)
Hash identifier: Eb7I4K3/ihZpvfvRp8FMV+faKP6gohSqp5/XKb9C8TU=
Subject key identifier: FF:92:5B:A5:A4:10:46:79:64:63:4C:FF:4A:FA:D7:7A:56:DA:47:22
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F803BA53C026D0FEA18562B47F56FC46A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 16 May 2024 07:09:03 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 200071
AS: 201718
IP: 185.37.244.0/22
IP: 185.62.208.0/22
IP: 2a03:120::/32
IP: 2a04:72c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Jun 2024 14:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:80:3b:a5:3c:02:6d:0f:ea:18:56:2b:47:f5:6f:c4:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 16 07:09:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff925ba5a410467964634cff4afad77a56da4722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:48:9a:05:cc:f9:6e:55:c0:96:7d:3c:47:13:
26:3e:c6:64:e8:c7:d8:9a:88:d3:19:cf:da:6f:c7:
69:80:1f:c4:27:4d:b7:e9:7b:aa:e8:17:9b:f6:a5:
57:1b:39:2d:7d:b4:f4:16:63:c8:2b:f1:17:bc:b6:
4a:22:7b:94:1a:1c:02:e2:92:bc:30:86:2a:f1:03:
b0:f1:60:5f:12:7b:ed:f5:f6:a1:f0:8f:c2:e0:a6:
f8:2a:6b:c3:36:1d:c0:74:28:a2:8b:53:6c:16:54:
ae:ab:5d:48:3e:98:10:e1:70:a9:79:fa:b7:a0:05:
28:c0:d0:ee:cf:05:8c:0c:25:e8:10:b1:ca:30:95:
87:b8:a8:ed:86:88:aa:6e:44:a2:3d:9a:2b:9f:ad:
bd:bc:9e:50:e7:58:24:06:fc:52:7b:4e:83:00:8b:
49:eb:b6:63:2a:3d:53:a3:8e:0a:bd:e2:dd:92:a4:
14:0b:49:d1:ee:3d:09:3e:00:a4:cd:e5:3c:8b:cc:
d2:bc:35:35:9c:13:66:82:4a:45:74:6b:c9:6c:34:
95:90:4f:6f:52:cb:e2:cb:7c:43:28:61:ec:19:f2:
e0:1d:1c:a3:38:53:cc:a9:cc:10:27:30:00:8f:94:
32:c0:49:0e:41:5e:56:6f:4f:bb:ed:f3:46:3c:8c:
19:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:92:5B:A5:A4:10:46:79:64:63:4C:FF:4A:FA:D7:7A:56:DA:47:22
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.244.0/22
185.62.208.0/22
IPv6:
2a03:120::/32
2a04:72c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200071
201718
Signature Algorithm: sha256WithRSAEncryption
61:73:e8:f7:f5:5f:e2:c2:f5:00:d4:83:ca:6e:c3:fc:b6:48:
cf:4b:1a:80:0d:3c:63:4f:2e:92:e1:88:b1:53:47:af:3e:91:
6d:9b:6b:18:ae:7b:09:b6:9a:16:71:65:3b:87:72:c2:06:ff:
e1:d4:99:b5:cf:30:b8:81:43:ff:03:f1:07:ee:b0:c8:2d:13:
d2:cf:39:d4:00:fa:b9:8c:23:88:09:82:de:df:1b:dc:89:d4:
e0:3f:40:90:c9:33:ed:64:fc:8e:92:bd:98:e2:82:02:69:30:
2c:90:a3:99:8b:fd:ba:df:21:98:17:d5:2a:e5:0b:05:a5:91:
9a:1e:bb:76:c2:12:a5:ca:d8:8d:17:bf:a2:1b:0d:90:55:01:
95:70:f5:49:f5:dc:71:9c:be:66:66:ea:6c:34:39:09:d9:05:
26:6e:c1:64:1d:1b:29:b1:72:05:48:14:5b:0f:88:13:13:32:
04:5e:2d:e3:01:42:21:aa:79:9c:a1:80:03:07:99:7e:b8:f9:
1a:69:3d:b7:86:79:0c:c7:be:f8:02:ed:97:5e:cf:cd:8c:00:
2e:f9:16:a0:53:03:8e:c5:cc:3f:73:5f:3d:0a:f5:44:15:72:
dc:9d:60:75:48:e5:ec:88:d5:b7:9d:8d:ad:77:11:e8:91:1c:
cf:8e:9e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 23:16:49 2024 by rpki-client on console-ams.rpki-client.org