Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.cer
File: a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.cer (raw, json)
Hash identifier: tNEAaf6I/o3nyKRG5DI8KEdC8XMS2gXTktf8MHS9hAA=
Subject key identifier: 6B:61:99:E5:5C:35:3E:F7:F3:D2:BF:4A:4F:E3:8D:D1:A0:AD:85:65
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DADDFD66874C9788418A4A527D4507
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 61395
IP: 5.83.56.0/21
IP: 2a04:680::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:dd:fd:66:87:4c:97:88:41:8a:4a:52:7d:45:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b6199e55c353ef7f3d2bf4a4fe38dd1a0ad8565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6f:c1:e8:b1:48:3b:00:86:94:b2:aa:8b:33:
07:e2:b1:40:af:11:ab:b9:ab:3d:da:40:3a:0d:2d:
49:a5:fd:cb:31:97:b3:b5:32:eb:46:6b:e6:14:80:
25:94:82:26:3b:2f:62:1b:cb:05:9a:a7:84:15:d8:
8b:91:4c:d9:4d:ab:39:ef:cc:6d:11:05:8e:0e:48:
91:ac:3c:9c:93:ab:ed:86:ac:37:d9:63:4a:cd:fb:
e8:e2:21:db:d7:07:2d:df:32:70:74:a9:a2:d7:d6:
65:47:57:4e:8f:9e:f0:aa:28:54:2a:fe:a8:10:b8:
c3:c4:83:0d:9c:a7:a0:6b:4f:8c:64:9b:22:26:6b:
0a:49:18:bc:7a:71:aa:38:f5:e9:4f:82:64:c4:a1:
56:e7:ec:c7:f2:89:6e:d6:cc:9d:ab:1f:71:51:32:
91:ef:ca:44:df:a9:0d:98:e4:e9:d9:dc:1c:28:ec:
d7:6a:2c:1f:c7:e6:80:06:7e:ff:be:bd:03:d3:2d:
b1:8b:7c:68:4a:53:f5:8e:a1:bc:4f:62:c9:ad:bb:
af:b7:3d:1d:26:43:71:c5:f6:81:37:28:3b:cb:1c:
ff:fa:e7:a1:d9:5f:15:3e:a8:34:10:8b:b7:bf:59:
e0:a5:62:ed:4e:9b:88:51:3f:1b:9f:b2:9e:68:d9:
91:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:61:99:E5:5C:35:3E:F7:F3:D2:BF:4A:4F:E3:8D:D1:A0:AD:85:65
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.56.0/21
IPv6:
2a04:680::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61395
Signature Algorithm: sha256WithRSAEncryption
38:22:2a:c3:aa:95:99:49:5d:e6:8e:4c:53:10:b7:59:bb:26:
14:23:48:90:98:89:a7:90:fa:0a:96:03:7b:0a:0b:66:dc:0b:
ee:c7:dd:92:be:42:bb:59:77:93:4d:20:0c:a0:cb:3e:b9:58:
0b:b7:e0:81:39:76:5d:6b:f8:32:14:bc:1f:3e:22:a1:2e:a4:
4f:ac:56:aa:b9:75:a1:d6:cc:ba:78:94:87:d8:65:35:64:d9:
36:b9:61:4e:db:d4:fb:57:c3:54:dc:06:c7:07:c5:0e:71:17:
d1:ac:a8:f9:4a:f2:db:65:e9:3f:f6:d9:e4:89:fe:c9:17:c1:
73:52:3e:e0:64:d1:b0:f2:43:92:2c:f9:3a:ef:e4:56:df:99:
10:74:ad:7e:ed:df:50:ea:50:6d:93:ba:a6:1b:af:1e:ad:89:
41:48:d8:6d:f2:86:a9:95:f6:ae:7b:41:04:c3:d6:a6:ea:8c:
f5:62:8e:55:fb:e1:96:94:bc:c2:86:ad:30:46:03:71:99:2d:
2f:28:ca:0f:4d:21:13:c6:8e:77:ae:cd:6c:1e:0a:6c:25:73:
24:0f:d5:59:48:9d:53:55:78:7f:dc:4a:69:fb:99:13:17:dd:
91:42:9b:06:bd:73:ed:6f:d3:0f:87:1b:94:e6:2c:65:fe:15:
49:9d:44:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:06:34 2024 by rpki-client on console-ams.rpki-client.org