Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer
File: X4rRNUEr-QQb5f0I50okEg2z7sc.cer (raw, json)
Hash identifier: mIzWbAIvtYu9NlJmBpygJCUpfwhWtyWlASh6e3h1Xgc=
Subject key identifier: 5F:8A:D1:35:41:2B:F9:04:1B:E5:FD:08:E7:4A:24:12:0D:B3:EE:C7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4244E45B2FC4BF88F201ED11D195732
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 198367
IP: 91.234.60.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:4e:45:b2:fc:4b:f8:8f:20:1e:d1:1d:19:57:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f8ad135412bf9041be5fd08e74a24120db3eec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b4:18:cf:a1:48:e3:78:1d:12:90:36:2e:e2:
ef:b1:62:cb:6e:51:16:5e:6b:2e:15:b9:78:e1:15:
f3:7a:d1:5f:d1:e5:5e:c1:56:4a:ec:77:cf:f0:e7:
35:c4:4a:0a:58:5d:0d:cb:6c:db:81:e1:70:a4:60:
a9:8f:9f:81:f7:bc:c9:6d:85:1f:49:23:56:15:06:
f0:27:c8:d6:95:ca:16:ee:54:7c:66:cd:f8:7a:6f:
a0:3c:a0:b4:d1:ec:fb:a3:b4:1f:6f:27:bb:61:3f:
83:68:6c:33:ac:9c:4f:b1:f8:49:d7:73:43:32:8a:
27:cf:19:c9:af:3b:08:30:24:0a:4a:5f:36:e3:3b:
7e:0b:b4:33:ae:ab:27:23:75:79:56:15:0b:29:f9:
a8:cc:a5:aa:69:ad:af:69:9d:4f:b5:30:a8:01:f8:
a6:c5:f1:bf:1a:0a:f1:42:3f:c0:f8:aa:d3:d0:5b:
fc:28:9e:2e:86:c2:a4:39:81:9f:10:b2:23:d4:2f:
2e:46:aa:2f:49:da:80:61:d4:a8:cf:d6:7b:07:c3:
ee:d8:7f:ed:f2:41:9e:8c:31:a9:41:ab:cd:be:41:
be:26:4d:ef:67:61:94:32:f7:0a:db:93:d4:5f:c8:
a9:1d:50:fa:e7:25:6b:29:ec:e3:39:0d:0e:d3:8f:
a5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:8A:D1:35:41:2B:F9:04:1B:E5:FD:08:E7:4A:24:12:0D:B3:EE:C7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.60.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198367
Signature Algorithm: sha256WithRSAEncryption
93:01:43:ae:6a:04:46:92:da:10:c2:bc:b4:60:2b:91:45:b1:
ec:82:b1:21:6e:7e:9c:90:a5:0e:ad:25:6a:41:a9:f6:7f:6b:
1b:e6:5d:2a:17:9a:fb:b6:2f:21:bc:35:91:4e:4b:10:53:58:
2c:a4:81:eb:ff:f8:0e:4b:d9:b1:a2:73:8d:be:18:e4:d6:7d:
24:41:78:0b:05:90:f3:14:31:ab:09:e4:1e:33:48:ed:cf:89:
1a:12:3c:cc:18:78:1c:7f:b5:d9:da:ef:fb:35:7c:71:a2:d3:
b2:4d:50:e8:28:7c:96:63:c7:61:b9:62:f5:00:c5:0b:a5:84:
5e:b2:65:d1:a4:b0:3d:17:f6:a7:fb:29:79:a1:a6:e6:6c:ce:
11:8b:c2:a4:47:6e:c1:19:77:50:64:af:08:b8:1f:8c:3b:59:
b3:50:79:79:41:5b:26:22:39:d9:47:b2:d7:e9:86:e1:6d:8e:
a5:6b:85:83:79:2c:19:e1:91:af:f2:9c:ed:e9:cd:24:70:8d:
54:ab:bb:9e:5a:3e:e1:b9:1e:68:8d:b5:30:32:a5:09:72:85:
9b:3c:70:66:c1:95:34:2d:8d:57:00:7d:9a:82:e5:8c:d4:53:
22:c0:5b:c0:3d:59:e4:b7:07:fc:e0:1c:5c:e4:c7:c0:a5:e5:
ec:a3:c4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:20:05 2024 by rpki-client on console-fra.rpki-client.org