Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.cer
File: p3Ml5JXLAVAgO3nyRvTNTA_sJP8.cer (raw, json)
Hash identifier: Ea21fwtD7+BnDSsW751MDBl0fenKIgL//7GcRNU3OsI=
Subject key identifier: A7:73:25:E4:95:CB:01:50:20:3B:79:F2:46:F4:CD:4C:0F:EC:24:FF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B7B3F41F4AB9C0FAB1B98F0DCF89A0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:29:37 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 15520
IP: 194.176.168.0 -- 194.176.172.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:b3:f4:1f:4a:b9:c0:fa:b1:b9:8f:0d:cf:89:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a77325e495cb0150203b79f246f4cd4c0fec24ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:60:2c:cb:10:65:19:14:e2:89:f9:3e:d1:e7:
e1:08:68:58:6e:b3:94:da:64:d6:c6:c4:0d:94:94:
a0:c2:b3:76:a6:5f:18:cc:59:ad:54:9e:0b:9c:12:
6e:5b:83:e6:50:b5:e3:9f:9d:1c:17:34:78:31:98:
65:e6:60:96:5c:50:4a:b8:73:f0:a3:80:95:4b:25:
7b:ca:81:b9:e1:84:db:35:ef:b6:53:6a:36:c4:fe:
de:a5:bd:04:c3:05:c4:44:b3:fc:72:c6:d1:70:69:
fe:c8:f7:cd:34:45:43:de:ed:70:d8:79:78:bf:af:
89:e7:72:06:76:8b:00:8b:1a:35:d6:d1:61:27:de:
ff:ee:96:c3:18:e0:2e:66:8b:94:d9:45:e8:03:f4:
27:4b:ab:69:a5:a3:8c:28:b0:01:2d:f7:c2:ee:04:
dd:49:7e:43:95:5a:e6:93:21:3f:3d:da:f4:4d:ce:
7a:0d:05:38:5b:02:ec:6f:c0:32:b1:09:27:db:d4:
a8:58:48:07:52:e0:a0:2a:b6:a3:e5:50:7c:a2:24:
7a:09:3c:37:ce:44:55:5e:4b:b4:ff:0e:21:0f:3a:
3b:1f:6b:3b:e1:37:a0:1c:b6:c1:5c:f1:eb:13:73:
ab:a6:24:8b:1c:f3:80:03:aa:d6:0e:9e:48:37:99:
15:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:73:25:E4:95:CB:01:50:20:3B:79:F2:46:F4:CD:4C:0F:EC:24:FF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.176.168.0-194.176.172.255
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15520
Signature Algorithm: sha256WithRSAEncryption
79:16:1c:25:ec:b5:59:b9:a5:ee:c2:c9:db:96:9f:bc:53:de:
be:86:de:b8:cf:98:d4:3d:ce:21:6b:1b:72:e3:df:59:e5:0c:
23:9d:75:a0:e1:11:41:27:61:47:44:a1:b9:ce:92:6b:b5:50:
dc:95:d5:17:38:72:5f:59:98:db:60:76:a6:cc:17:9f:69:a9:
af:c2:78:ef:ae:62:6a:03:f3:b7:57:38:8c:6a:d6:b6:00:7d:
2e:5f:16:f3:d9:d7:83:d5:c0:5a:ea:10:d0:88:04:ce:d1:27:
c6:49:12:aa:a9:64:f7:1a:a6:d2:e5:87:23:66:27:d4:8b:4a:
2a:14:5b:1b:9d:21:a1:76:ae:47:f5:ca:e4:00:3e:b7:da:e6:
96:c8:ad:10:2b:9b:ea:ed:16:ba:ac:2b:9f:77:06:38:f1:cf:
96:59:be:e4:68:bc:bd:b3:3c:e0:ae:a8:20:d0:73:46:4b:f1:
de:5d:6c:fb:6c:85:6a:23:e7:05:64:2b:9c:2c:a4:a4:cc:3e:
61:e7:09:60:9b:b6:9c:51:ab:2e:45:0b:1b:4b:df:80:54:f4:
0e:b8:9f:b5:da:b4:ac:1f:42:80:de:bc:8d:38:d4:05:78:b5:
33:25:6e:06:7a:5b:74:a4:d6:ca:fd:c7:9a:e9:81:d6:c7:7c:
9f:48:63:3a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri May 3 09:37:04 2024 by rpki-client on console-ams.rpki-client.org