Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/X4anFB9vt7TCi84xRGe2FU4Pk3c.cer
File: X4anFB9vt7TCi84xRGe2FU4Pk3c.cer (raw, json)
Hash identifier: NNdJSS+d2A97c1up549t5m3pAkTwtf4IGiT4OUtZqqY=
Subject key identifier: 5F:86:A7:14:1F:6F:B7:B4:C2:8B:CE:31:44:67:B6:15:4E:0F:93:77
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E5AF01A2FA567BF4F337FC69644E7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:53 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 12965
IP: 193.178.150.0/23
IP: 195.234.131.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:5a:f0:1a:2f:a5:67:bf:4f:33:7f:c6:96:44:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f86a7141f6fb7b4c28bce314467b6154e0f9377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b9:c9:a7:8c:8b:43:8b:48:70:0a:d0:c8:f9:
ea:8c:6c:67:ca:d9:45:45:c9:d3:8d:50:3e:b8:6b:
dd:15:75:32:27:aa:84:3d:f5:bb:b5:68:91:88:ad:
35:2e:46:da:fc:44:c7:8d:53:45:1e:88:6e:75:0e:
87:d3:dd:77:1c:b2:2d:a4:21:4a:e9:f5:16:80:ca:
1e:85:18:41:96:f2:9e:09:92:30:f5:b8:6b:8d:9a:
94:75:33:0d:81:66:3b:54:dd:a1:f6:98:d3:95:0b:
8f:7c:88:c4:f2:a1:85:77:08:e2:d4:76:b5:ff:41:
aa:86:93:1d:2f:67:d3:b3:bd:46:5b:32:ce:87:3f:
57:ec:f3:3d:e2:e8:bd:17:4d:79:aa:dd:7e:95:64:
be:6b:ff:10:46:de:d1:04:38:d1:02:03:bf:3b:d3:
a8:3f:11:f4:35:08:21:e2:34:ad:4c:0f:a4:82:40:
3a:81:e8:0d:5c:94:de:5f:49:cc:1d:99:e5:51:fd:
3b:97:bd:f6:1d:f8:bf:2f:8e:3b:69:f0:29:29:fb:
d5:bf:a7:e4:34:c0:49:fa:52:60:f8:d6:cd:74:67:
3a:3a:1b:d1:a6:f7:a9:26:f0:74:66:26:db:14:c0:
9f:7b:5d:d2:61:6d:49:7d:fb:ad:f2:94:25:57:5c:
7a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:86:A7:14:1F:6F:B7:B4:C2:8B:CE:31:44:67:B6:15:4E:0F:93:77
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.150.0/23
195.234.131.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12965
Signature Algorithm: sha256WithRSAEncryption
68:c8:7b:eb:0a:dc:cc:9b:db:da:2a:c9:d9:f4:0a:16:e7:74:
02:4c:97:d2:8e:6b:79:4c:75:48:2e:22:00:a8:11:22:03:c2:
db:77:03:c4:fe:ac:5f:59:03:fe:56:06:be:cd:5e:ec:38:dc:
88:ba:1c:e5:85:63:e8:9b:ed:3c:36:56:57:ab:bd:5d:89:f6:
76:64:19:c1:7a:46:e1:34:28:a2:7c:49:dc:dd:f5:c0:5a:00:
c5:4e:bc:59:1e:08:a0:40:45:2b:39:09:0d:1e:f0:b8:28:e0:
30:44:fc:dc:f3:2f:ca:ba:a2:c7:c2:49:e1:12:2e:4e:09:c3:
01:28:7a:0a:90:ff:c0:b4:42:21:dd:c9:a4:68:08:53:4b:f1:
45:f5:9c:56:35:d6:7b:b0:65:20:6e:15:80:0c:a3:fc:ef:fe:
e6:af:7e:de:1e:51:38:e2:55:38:db:bf:ec:7c:f3:aa:7c:32:
c7:54:ed:a8:7e:f5:83:f9:10:7a:e8:8e:43:f9:28:d2:df:62:
c1:ce:e1:cb:81:f2:88:61:8b:a3:0f:21:c1:7a:63:06:56:df:
67:54:76:2a:ee:99:97:c0:28:33:a3:dd:3a:22:82:89:29:e3:
34:e1:81:63:ed:06:cf:15:f3:56:6d:54:5b:07:d7:fa:2b:d8:
6e:2e:05:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:47:13 2024 by rpki-client on console-ams.rpki-client.org