Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
File: X63Q6UW8YRAcabzmSj1yi6G7hmE.cer (raw, json)
Hash identifier: SGgej8IprN1XUDJdNER2cKkGUzgXAjOi8xyE657Wgrs=
Subject key identifier: 5F:AD:D0:E9:45:BC:61:10:1C:69:BC:E6:4A:3D:72:8B:A1:BB:86:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA292B0DA2CA6F19E71400BB2BCF7543
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:32:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 207493
IP: 94.231.193.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:2b:0d:a2:ca:6f:19:e7:14:00:bb:2b:cf:75:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:32:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5fadd0e945bc61101c69bce64a3d728ba1bb8661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b1:30:39:70:33:5c:ed:95:75:ef:6c:1f:e2:
c2:87:66:5a:e5:89:c1:ea:c2:c2:64:0e:6b:22:d0:
a6:5d:65:33:d4:9d:ea:90:db:e7:7f:a3:6a:a3:58:
94:1e:99:4c:f8:43:5e:f3:9c:df:2f:02:46:f1:bd:
6b:f5:5f:7b:2a:32:80:28:5a:cb:c3:92:1a:37:36:
73:a9:5a:77:a1:b8:0c:d9:76:e6:3b:82:ee:64:82:
6f:22:e9:34:34:7c:8c:6e:05:e8:80:d0:f7:8e:10:
79:6a:bc:c8:55:6e:50:fa:af:68:c8:ff:1c:1e:84:
a2:b3:76:5e:1b:f4:b4:12:e1:72:e1:cf:82:a3:f9:
01:41:79:22:46:33:ec:8c:19:43:30:f8:17:f5:f0:
19:b2:92:2f:69:7a:a8:25:e8:c2:92:85:aa:69:bf:
f8:8f:8e:bc:79:01:71:52:86:5c:07:84:4c:1f:ed:
84:55:be:9e:62:2b:1d:32:48:3e:ae:65:db:c0:92:
fe:a8:41:e3:e9:f4:db:3a:4c:9b:f3:33:ea:56:15:
7e:35:4d:58:39:3d:e7:30:f6:57:cb:7e:42:1d:c3:
71:f7:24:33:0a:ac:ce:91:e7:66:cd:b2:0c:a3:3f:
a2:2a:ec:6d:cf:38:b8:2e:d7:8e:23:0a:3d:22:6d:
98:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AD:D0:E9:45:BC:61:10:1C:69:BC:E6:4A:3D:72:8B:A1:BB:86:61
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.231.193.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207493
Signature Algorithm: sha256WithRSAEncryption
6b:23:b8:d2:29:b4:c7:cb:55:20:19:ea:ee:42:fb:e3:53:4f:
b7:af:9e:99:33:98:d7:41:91:6b:98:0f:94:e8:30:74:0b:46:
98:22:bc:0f:b1:03:23:9b:57:bd:c2:be:6a:ba:da:01:b1:d6:
87:6d:6d:17:65:7d:c9:0b:9a:9d:a5:3f:94:d4:92:da:5c:76:
a4:48:8e:ad:3a:6d:6f:63:53:32:46:60:e6:35:25:54:46:b4:
6e:71:b9:74:96:2b:0d:48:84:47:91:f5:33:3e:c3:2d:88:b3:
45:c3:a9:05:56:84:3f:4f:79:b9:16:b2:d0:0f:7e:ef:d0:7a:
ba:61:7b:93:29:d0:32:c9:0c:0d:d9:28:55:87:a5:a6:c9:a2:
8f:7a:a0:43:e9:9a:a6:d1:4d:75:6b:ef:6a:7c:4d:88:88:5f:
2b:a5:18:38:1e:11:43:95:dd:f3:e4:c1:c6:92:9d:ed:21:bb:
e3:13:6a:b8:1a:5b:b2:9d:1c:62:a1:d1:59:0b:c3:c2:fe:25:
6a:e8:d5:92:1b:85:21:49:8b:81:c7:25:d1:79:d8:4d:be:f7:
83:8b:1d:03:0f:85:28:41:df:6f:76:11:85:bb:cd:8c:54:dc:
81:cd:1d:9f:0a:08:fe:f4:f5:97:1a:8e:f2:16:e0:4f:9c:53:
23:c3:2f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:47:14 2024 by rpki-client on console-ams.rpki-client.org