Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5jR-Z44M-9AHUY0juyLdSCIxV0.cer
File: b5jR-Z44M-9AHUY0juyLdSCIxV0.cer (raw, json)
Hash identifier: fWq9RpAmasc+zR/JUYy93rjCfxwRv6e2u8kFkjXBDyI=
Subject key identifier: 6F:98:D1:F9:9E:38:33:EF:40:1D:46:34:8E:EC:8B:75:20:88:C5:5D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7952623E45A9CAF04C342DA942F7BC1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:31:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 56600
IP: 176.126.128.0/19
IP: 192.162.152.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:26:23:e4:5a:9c:af:04:c3:42:da:94:2f:7b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f98d1f99e3833ef401d46348eec8b752088c55d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b4:f0:84:ef:04:39:ad:79:78:7a:91:0c:1b:
33:58:16:c3:fa:fc:b4:eb:8c:2e:9d:7d:7d:f6:7b:
00:3b:4e:cc:00:46:2c:ed:82:59:fd:f7:10:5e:fe:
1f:d9:91:42:84:e2:2a:fe:d6:a8:1b:2d:a2:20:4f:
06:41:c3:16:64:b2:62:6c:75:a0:e2:79:a4:49:60:
45:1b:85:d9:c3:77:6f:0d:fa:da:17:c7:58:58:92:
04:4f:b7:85:1f:7c:51:41:52:32:7b:d2:a5:95:12:
17:3c:fe:4b:50:d6:0b:14:00:b9:ca:5b:71:e8:31:
00:a9:8f:a6:90:df:40:ea:de:ed:69:f6:4f:06:18:
cb:53:5c:c2:be:53:14:7b:19:56:73:08:06:80:4f:
6e:76:f7:8b:38:7c:15:59:97:ea:a3:b3:a7:87:04:
f8:f4:87:f9:ce:b0:c4:bc:5c:32:e4:fb:5b:3a:67:
60:52:19:e3:31:36:e2:4a:e5:dd:5c:4d:c5:59:a1:
9a:26:c2:b7:cf:ee:f7:6f:58:59:f2:19:d9:3d:c9:
08:4c:25:b4:bd:ec:39:ad:a3:19:3e:31:7c:43:e8:
cd:60:b3:1f:6e:b6:c3:56:c5:d0:51:0a:cd:31:4d:
dd:37:d2:18:77:be:3a:63:1d:d2:da:ff:6c:43:82:
e6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:98:D1:F9:9E:38:33:EF:40:1D:46:34:8E:EC:8B:75:20:88:C5:5D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.128.0/19
192.162.152.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56600
Signature Algorithm: sha256WithRSAEncryption
63:74:65:89:12:e6:70:20:82:04:15:f5:63:d9:02:67:38:ce:
29:9c:d9:6f:5a:2e:8c:2a:d3:28:59:52:70:dd:fd:89:6f:b6:
75:df:22:4b:3a:bb:b9:35:2c:6a:10:b1:d5:a2:a5:c8:c6:06:
e3:f9:83:61:73:e7:b6:21:fb:ed:85:77:ca:47:32:85:54:7b:
85:82:12:6f:d5:6f:8b:99:aa:10:5b:fd:6d:2f:34:e9:d9:d1:
52:bd:fd:fb:14:6f:22:85:4e:37:45:d4:4a:6f:fe:1f:98:e9:
ee:1e:a8:41:7a:a5:40:6f:97:7a:5f:8c:d3:0b:81:24:eb:65:
46:a5:5a:2d:cc:5f:6b:b1:52:d5:a1:a9:1f:bd:28:7f:c5:d3:
7c:3b:3e:9e:ad:b1:7e:2e:2a:b2:b5:29:82:23:1c:eb:b7:dd:
e9:a9:93:7e:84:8c:54:6a:b7:17:e3:d7:73:82:5c:41:45:a3:
b5:7f:52:32:e4:75:ab:18:48:4c:2c:0a:ea:21:7f:59:4e:a6:
b5:40:6b:bd:5d:ab:f8:5a:20:16:89:22:43:8d:13:65:8c:f8:
6b:55:f2:18:d8:b7:23:93:b3:4a:0e:2e:44:cf:5a:3f:86:be:
af:54:0a:8b:f9:a6:40:fd:b0:54:22:4a:5d:a7:ee:55:d5:76:
b7:2d:a8:cd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 3 11:42:28 2024 by rpki-client on console-ams.rpki-client.org