Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer
File: RjXaOiCHnlX-loU-DXru_1M4bos.cer (raw, json)
Hash identifier: j7GzVgU/Gk/HNWHYG8Ud3uMpEuINQJM1in6HDF8kkaQ=
Subject key identifier: 46:35:DA:3A:20:87:9E:55:FE:96:85:3E:0D:7A:EE:FF:53:38:6E:8B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D0D45E04B03F1CF0D4BA68CF3257FD6A4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 15 Jan 2024 13:18:19 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 201130
IP: 5.63.22.0/24
IP: 194.150.184.0/23
IP: 2a13:4340::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0d:45:e0:4b:03:f1:cf:0d:4b:a6:8c:f3:25:7f:d6:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 15 13:18:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4635da3a20879e55fe96853e0d7aeeff53386e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cb:0a:09:a0:b7:f2:08:29:ce:b4:c1:88:bd:
1e:a1:11:35:4a:11:8b:36:09:fd:03:b8:31:34:21:
36:b4:25:17:9c:2f:f0:8e:5e:62:7a:c4:ea:66:c4:
d7:ff:a8:42:93:6c:94:43:65:c0:18:ed:27:ac:df:
e2:0a:d7:cc:5f:6b:59:63:79:d1:58:56:57:c9:07:
3c:b7:e5:b3:b0:88:2e:c4:d9:09:9e:e8:19:ff:fc:
ad:20:11:38:cf:d0:4d:48:d9:6e:84:9f:51:df:91:
7d:3d:ac:b9:72:cb:65:f6:24:61:98:db:02:36:3b:
a3:f5:95:9a:b1:14:11:9d:e8:4c:60:cc:da:24:14:
aa:cf:8a:24:25:7c:2e:4c:14:6a:7b:fd:ba:ff:99:
3f:d7:b3:d6:bf:1c:ea:01:bb:15:62:37:c3:85:90:
1e:f9:6f:d1:43:ce:eb:86:83:72:46:6a:cc:26:ff:
5f:39:df:ae:c3:e4:a9:35:0d:54:a2:1f:d2:d8:28:
e9:3e:d8:c5:44:8c:a1:42:fb:c6:70:ed:58:d1:0c:
27:c2:9e:a4:92:50:b9:91:41:2c:cc:2a:44:5d:44:
ab:4c:dd:c4:98:10:7d:16:fc:82:99:24:99:bc:ba:
64:14:83:d0:06:c2:3a:e4:b2:cd:4f:9d:3f:8c:cd:
e6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:35:DA:3A:20:87:9E:55:FE:96:85:3E:0D:7A:EE:FF:53:38:6E:8B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.22.0/24
194.150.184.0/23
IPv6:
2a13:4340::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201130
Signature Algorithm: sha256WithRSAEncryption
23:af:13:9e:67:59:3e:17:5d:c6:68:1b:db:b6:e5:ee:f3:22:
f1:37:21:2a:32:4f:80:a9:5d:4f:c2:40:2f:1e:96:35:72:e7:
9a:1e:ef:72:b6:ae:00:12:00:4e:68:f3:b2:83:c6:4a:b1:8e:
5a:60:b1:bb:66:5f:d7:56:81:4b:b3:44:28:08:33:05:79:ab:
1c:04:97:40:33:da:e3:98:bf:3e:79:42:b0:1e:bc:55:e8:23:
23:c4:11:b9:1b:7a:b8:0b:be:70:5f:c2:b9:e4:53:85:b8:f0:
1b:8a:eb:b3:4d:9d:60:05:e5:b3:af:86:03:cd:75:1d:37:fa:
44:7b:df:3d:fb:de:41:89:11:2d:33:ef:db:6b:ad:00:60:ad:
d8:f5:ad:70:a0:8b:04:b2:1c:f8:bf:88:f9:12:ce:6b:25:af:
5a:17:88:56:b6:3b:28:27:bb:24:b8:32:e4:9a:51:3f:9b:19:
fa:b1:46:a8:e0:3d:66:bb:d5:73:c0:72:ee:85:7c:25:5a:c0:
56:31:67:03:f0:21:11:f5:c8:4e:e0:12:c6:35:5e:91:46:29:
a4:9c:ac:98:94:ea:78:18:be:f1:09:79:48:69:37:09:56:bd:
62:9e:77:dd:86:c2:22:f1:07:20:f5:53:63:33:0c:a8:f0:b5:
a0:c6:cf:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:15:03 2024 by rpki-client on console-fra.rpki-client.org