Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
File: sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer (raw, json)
Hash identifier: 3bJcKGhlBqEA5j1D41PLU9WfcUHwfgTv+fBk5Kzf/0M=
Subject key identifier: B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B233762A5A82CA977134CFA9DB305
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:31:02 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 49671
AS: 60445
IP: 185.217.5.0/24
IP: 2a12:f8c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:23:37:62:a5:a8:2c:a9:77:13:4c:fa:9d:b3:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:31:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5d:34:3d:2e:37:a3:c0:56:50:36:ab:03:68:
31:54:b3:77:e6:a8:29:db:ac:b8:7b:aa:90:a4:0f:
89:fd:5b:62:1e:2c:91:ee:94:4b:3f:71:5e:92:b0:
68:10:41:7f:78:71:05:73:0e:cd:36:2e:78:f9:df:
e9:60:ac:d2:5e:13:de:b2:72:85:b4:6a:fe:2d:59:
ed:a9:be:fc:32:8e:e0:27:4a:ab:ad:b5:61:d0:f5:
d5:6e:bc:30:4b:01:ae:34:75:96:47:1e:60:c1:0b:
51:4e:7f:ab:b3:48:a1:d7:e4:f6:04:88:71:c0:44:
e2:40:d6:7b:c6:07:c3:87:65:73:c9:c0:47:4a:36:
93:d4:3c:79:33:93:28:01:ff:32:7a:7a:0f:f9:21:
38:f3:82:d1:9a:4f:ac:1b:e8:c0:79:51:69:0c:72:
74:88:d4:ee:7a:f2:e5:b3:a0:eb:e5:a2:79:2c:18:
a0:26:b6:b2:71:dd:2e:01:e2:67:4f:06:fb:42:87:
72:6a:e8:6c:a6:c5:81:0b:a7:b3:ba:8a:dc:7f:72:
13:0b:97:b9:66:5f:03:8b:64:3c:37:59:43:2c:9a:
99:ab:54:c3:25:e4:00:72:95:81:ea:5f:a8:31:94:
33:75:e2:72:21:cc:84:05:ab:92:96:03:32:e1:57:
40:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.5.0/24
IPv6:
2a12:f8c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49671
60445
Signature Algorithm: sha256WithRSAEncryption
50:bd:95:a6:c7:ff:88:9a:d8:94:a3:58:6d:5f:5f:4f:fa:25:
c5:b1:a7:89:49:cb:12:a4:28:90:04:31:cf:14:72:48:36:ed:
c6:25:3e:c3:43:cd:1d:df:f2:48:a1:b4:e4:9d:42:e3:e8:42:
dc:fc:13:33:2e:47:c3:43:be:53:7f:47:31:fe:de:9d:d0:42:
70:77:a8:5d:63:c6:a3:28:05:17:7a:96:7c:7d:29:af:ac:52:
5b:aa:73:c4:b1:8d:e6:c9:4d:55:ae:ce:d6:93:8f:60:3d:16:
a4:e9:b5:44:69:c4:41:24:0c:55:ff:96:5b:32:34:99:f6:d2:
44:7c:51:d8:ac:22:c0:84:58:f5:83:dd:a3:bf:17:33:c2:c3:
92:15:53:f0:34:a8:84:f0:c8:d8:37:7a:26:4e:10:dc:46:91:
c3:53:23:52:b5:e1:f4:29:eb:3c:f0:ed:49:79:e1:2f:47:b2:
5f:8a:13:a7:b8:04:d3:b4:5a:df:dd:04:f0:8b:61:d2:7e:6d:
31:10:bf:3c:53:50:d5:da:98:9b:9f:32:87:d1:33:91:ea:75:
56:78:d6:96:a8:7c:0f:a6:83:7e:aa:37:b7:2d:6a:42:82:75:
48:34:cf:4e:08:74:29:86:5b:4f:ba:ba:85:fe:7d:e9:86:bd:
9d:2c:7f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:46:25 2024 by rpki-client on console-fra.rpki-client.org