Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/z5YlVBq-a1rpJmcdqpisbYCU7Hs.cer
File: z5YlVBq-a1rpJmcdqpisbYCU7Hs.cer (raw, json)
Hash identifier: SDgLpKMuyge4HaxBA42s26Ufvwo7nxbUkFK0Q/EHgUU=
Subject key identifier: CF:96:25:54:1A:BE:6B:5A:E9:26:67:1D:AA:98:AC:6D:80:94:EC:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DBEBAD292DAAEC5C69898A08198DFC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 45033
AS: 49344
IP: 185.43.128.0/22
IP: 185.138.196.0/22
IP: 2a01:6f20::/32
IP: 2a07:f80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:eb:ad:29:2d:aa:ec:5c:69:89:8a:08:19:8d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cf9625541abe6b5ae926671daa98ac6d8094ec7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d7:56:95:79:bf:9e:4c:75:ad:14:87:7f:34:
bb:97:18:07:d2:98:e3:3c:03:11:2b:7e:a8:71:db:
76:3f:56:fe:67:13:1f:fa:1c:34:fe:4b:5b:d8:ea:
7e:bd:4a:35:3e:f6:46:bf:57:36:e1:66:e9:3d:65:
1e:8e:92:ac:de:4b:ad:31:3a:e8:3a:f3:dc:07:0a:
cd:af:10:8b:62:f6:7c:49:e0:8d:be:e4:5d:71:67:
33:3a:d6:63:79:87:15:dd:2f:ef:ca:8a:ba:4e:17:
25:22:f8:83:6f:de:b8:86:05:39:d2:a1:4f:49:54:
21:12:d2:d5:9f:9e:db:cd:5e:1f:96:bd:be:9f:b5:
39:67:9e:69:d2:a9:b9:e4:0d:2f:1b:5e:a3:d0:ce:
72:95:cc:56:2a:1d:45:ad:65:94:af:65:dd:ec:5d:
c1:bf:20:48:0b:09:d7:48:05:94:b2:2c:8d:44:62:
4e:74:49:05:ca:b8:3b:7e:34:02:ab:32:29:03:dd:
09:ae:fb:89:0e:0a:14:33:93:d2:e5:51:c5:22:63:
e3:ec:89:f2:2d:e0:45:f5:6d:5c:9e:f2:25:a8:25:
22:e6:93:84:f5:6d:f9:68:dc:5d:48:b0:66:50:65:
3f:13:e9:79:58:ba:70:52:d8:8c:1b:a9:80:ec:c3:
39:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:96:25:54:1A:BE:6B:5A:E9:26:67:1D:AA:98:AC:6D:80:94:EC:7B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.43.128.0/22
185.138.196.0/22
IPv6:
2a01:6f20::/32
2a07:f80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45033
49344
Signature Algorithm: sha256WithRSAEncryption
62:3f:dc:68:41:15:ed:30:92:37:cd:a8:14:2f:38:75:0e:28:
60:c1:ee:07:07:a7:4d:c2:94:eb:12:74:05:bb:6c:2f:c3:0f:
1d:97:55:d9:84:c3:54:4d:b0:e1:43:f6:e7:5d:73:34:d3:b9:
1a:bd:95:fc:5a:45:e1:7f:d8:e6:30:f8:15:f1:81:2c:84:59:
6b:1a:fb:2f:76:e6:87:81:10:68:37:50:6b:ff:a4:8e:3f:ad:
df:fa:33:67:ab:de:6a:61:1e:82:32:1b:d2:90:d4:70:d5:6e:
e6:29:0e:3a:12:fc:c4:16:47:b3:c5:14:7b:b2:bb:cf:bc:d2:
c5:81:0f:31:4e:5a:7b:88:c4:0c:e8:f0:a8:cf:23:aa:ea:c0:
d6:c4:f9:4d:9a:68:bc:3b:76:0c:63:d3:24:00:ba:ba:cc:d4:
b5:9e:c6:a1:9a:49:55:a6:1c:b9:24:f4:30:70:3a:f3:34:b6:
6a:0d:4e:20:27:f6:07:92:40:e2:52:29:7e:3a:ee:7b:83:04:
f3:4d:9e:b8:31:1a:6f:30:7e:93:2f:57:78:00:70:80:83:3f:
40:81:98:79:14:43:b3:20:d0:7e:1d:5d:fe:3c:c9:a3:35:4f:
a1:36:89:65:1d:8a:f8:26:7c:ff:19:a4:e1:a8:d4:01:da:5c:
19:d6:1f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:43:15 2024 by rpki-client on console-ams.rpki-client.org