Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer
File: m5fCLQsziopFqhNFsJF7oNyXM5A.cer (raw, json)
Hash identifier: NBexLi+eWlvQTfdx6TWlBjB9qlox4sWBxwyDCsXbnc4=
Subject key identifier: 9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B70EEF22E65A4F03BE7F2F9FCA7ACC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:30:03 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210654
AS: 213035
IP: 185.28.36.0/22
IP: 185.126.34.0/24
IP: 2a00:9c20::/32
IP: 2a10:1440::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Apr 2024 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:0e:ef:22:e6:5a:4f:03:be:7f:2f:9f:ca:7a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b97c22d0b338a8a45aa1345b0917ba0dc973390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bd:b8:7b:b7:b7:d1:99:38:a9:51:6b:c2:6f:
c4:20:52:83:08:2d:21:b0:75:aa:73:4c:9b:b2:03:
e7:45:b7:3f:1b:84:f6:d6:f3:fc:ef:01:98:fb:44:
30:de:b4:e6:a3:cc:e0:7c:95:1f:cb:30:10:56:2f:
6a:53:30:d4:bb:b3:a2:2a:ec:fb:29:c2:4e:a1:96:
ff:5d:38:bf:52:51:be:65:0c:d8:51:81:5e:b7:c0:
b5:a8:99:47:2e:4f:70:13:f9:0f:df:2f:40:a5:37:
56:48:e8:ab:71:82:e0:fd:4d:73:8c:55:59:b9:fc:
7e:65:69:ef:5c:69:08:8b:45:20:a7:25:1d:e6:6f:
6d:3a:56:8e:69:0f:d6:61:01:50:cd:2d:94:00:fa:
ca:53:17:76:06:f2:87:4f:f4:c7:fe:f3:1b:26:da:
a9:4a:79:72:e5:d2:81:cc:82:1f:5a:d3:f5:f8:45:
3d:d3:78:68:0e:21:a3:99:8a:e2:50:dc:e7:9e:18:
db:7b:14:25:30:0b:0a:af:13:ab:8c:e0:89:21:61:
84:de:01:cd:59:5c:55:38:14:66:b6:08:d2:7e:40:
59:2a:43:66:b0:cb:c4:17:2b:35:66:a0:c7:4c:c8:
76:ff:5c:7c:e7:85:54:87:d6:ef:fd:4a:42:a1:1f:
0b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.36.0/22
185.126.34.0/24
IPv6:
2a00:9c20::/32
2a10:1440::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210654
213035
Signature Algorithm: sha256WithRSAEncryption
9b:ef:9b:ce:84:52:44:0a:b4:87:ee:fa:cc:61:bc:3c:55:d8:
c8:1e:ed:be:16:a4:5e:6f:77:47:aa:4d:b7:d7:c2:dc:15:1b:
27:aa:97:9d:a9:42:5f:fa:b1:8a:d9:3d:65:9c:e5:79:71:f4:
96:22:c0:71:b0:03:0c:e5:08:ac:50:9b:0d:7f:5d:f3:c4:1e:
10:b1:f2:d5:66:8f:c3:1f:29:a7:4f:77:c0:33:7b:9c:39:48:
85:6c:19:2a:b0:17:aa:c2:39:37:54:21:9d:3b:15:80:d0:44:
23:15:4b:b2:77:a3:6a:87:de:4d:10:23:d0:71:9e:1c:cc:44:
53:2e:bc:dc:b9:4c:bd:31:70:f9:5a:2d:89:20:0e:1a:dd:e8:
5b:46:a3:90:1a:b0:3a:dd:67:db:c2:c1:42:3d:b6:f5:9f:df:
8c:95:a1:45:40:be:44:5a:eb:16:b2:8b:0e:2d:4a:7a:58:c5:
6b:36:02:69:72:20:72:94:64:81:e1:3a:ad:7e:db:ef:de:1d:
b0:d5:e9:87:47:b3:6a:2b:29:77:de:7a:fc:31:81:67:01:2f:
9f:d5:b1:e0:05:96:57:51:06:e7:07:d6:2d:ad:a1:4a:aa:f5:
74:a5:60:1c:8c:c0:e6:9b:2a:67:da:0b:7b:ae:e3:75:ed:42:
7c:89:42:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 15:56:05 2024 by rpki-client on console-ams.rpki-client.org