Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer
File: smK_Id5ROFhZQWxMYIAB4gJaXSU.cer (raw, json)
Hash identifier: luF0dRC+e3duUWToQ+W+8cgpWCc+upgez2r2/Mwpn4I=
Subject key identifier: B2:62:BF:21:DE:51:38:58:59:41:6C:4C:60:80:01:E2:02:5A:5D:25
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0191D71A808123F694A2C7800B2A80A4C516
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 09 Sep 2024 14:05:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 49396
IP: 91.232.181.0/24
IP: 130.193.78.0/24
IP: 185.19.148.0/22
IP: 185.61.112.0/22
IP: 195.177.252.0/23
IP: 2a04:ebc0::/29
IP: 2a04:ec40::/29
IP: 2a11:9d80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d7:1a:80:81:23:f6:94:a2:c7:80:0b:2a:80:a4:c5:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 9 14:05:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b262bf21de51385859416c4c608001e2025a5d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d6:51:50:1a:a5:51:6a:a1:2b:f5:2b:88:89:
38:26:32:9d:e9:a6:80:9a:95:2f:0a:0c:c8:81:a0:
67:3e:e3:2d:e9:23:a4:b9:bf:f2:54:39:25:de:60:
82:6d:e2:f7:3e:04:ff:4d:fc:2a:e4:fa:06:05:f2:
00:f1:0f:fc:4f:4d:1f:29:0f:c7:78:26:73:30:a8:
45:be:7d:87:87:18:14:a9:86:99:48:c4:78:ac:12:
cb:a6:6a:73:12:1e:03:26:14:0b:22:05:d8:19:a3:
d2:9b:a1:eb:da:08:87:71:ac:97:69:61:90:b4:fb:
a3:4d:39:df:01:c0:3e:91:49:95:5f:18:4e:4f:3c:
b7:3b:ad:5f:05:64:89:fc:a5:af:07:94:c8:9d:df:
a0:75:68:f9:c8:56:79:4a:0d:55:e1:50:b5:31:16:
f2:da:e0:1c:6f:9c:b5:f9:bd:eb:49:a7:e8:47:2e:
77:d3:2d:30:6b:75:6f:5a:45:8d:dc:38:b9:5a:b8:
a9:38:c0:09:ef:ae:71:65:f4:b7:dc:35:4c:d1:d9:
e6:58:87:d6:68:10:59:46:92:fc:02:c8:e3:ca:8c:
38:4e:18:c6:4d:66:17:ae:0a:1a:66:2d:5f:46:08:
b8:7e:44:aa:70:96:c6:7b:30:78:16:8a:2c:69:91:
f0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:62:BF:21:DE:51:38:58:59:41:6C:4C:60:80:01:E2:02:5A:5D:25
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.181.0/24
130.193.78.0/24
185.19.148.0/22
185.61.112.0/22
195.177.252.0/23
IPv6:
2a04:ebc0::/29
2a04:ec40::/29
2a11:9d80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49396
Signature Algorithm: sha256WithRSAEncryption
54:a1:34:6e:79:d6:3d:5f:8a:2e:43:91:31:d5:7b:a9:04:92:
1c:8b:ac:7f:9e:03:b8:c1:e4:68:5b:b6:51:23:97:2b:cd:c7:
90:d4:c7:21:af:47:0c:24:87:8d:99:0c:83:5e:a2:95:41:68:
fb:9a:3a:70:15:e6:24:9f:63:a7:3c:4d:70:8c:07:d0:e8:16:
a2:fb:ea:51:d1:34:39:b2:36:02:42:59:06:d8:86:27:f9:c8:
67:6d:31:ba:1f:92:cd:5c:1f:7b:6b:49:25:9c:55:76:ba:82:
92:f6:13:78:08:8f:cb:99:45:bc:de:ff:5a:29:3b:72:3e:be:
72:26:21:a3:7e:32:98:c9:07:54:7f:7c:21:59:7e:33:f0:af:
7b:54:b2:a8:df:ce:0c:f1:80:19:4f:10:fb:da:28:49:bc:ea:
0e:04:02:31:85:c3:7b:e5:59:b7:cb:ab:ef:0a:dc:dc:fc:9f:
98:2a:af:82:73:94:aa:ab:10:1f:9c:6f:c2:83:42:ec:08:e6:
34:8e:47:db:55:48:ce:d3:a4:cb:a6:d1:9e:80:a4:c2:29:19:
2f:a1:5a:00:a2:92:ac:ca:de:07:ab:5b:db:c7:9f:09:18:62:
91:22:15:5b:27:02:a3:bb:89:a9:12:51:46:17:1a:f0:19:72:
89:93:99:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:47:28 2024 by rpki-client on console-fra.rpki-client.org