Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer
File: X6TYBGSXj26_upX3RaMwVyb3LZM.cer (raw, json)
Hash identifier: ipXH1AbVxo+UqPASRBpog8Az/mH/6Q1C1faNA5O3isw=
Subject key identifier: 5F:A4:D8:04:64:97:8F:6E:BF:BA:95:F7:45:A3:30:57:26:F7:2D:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7951FB7BC30F092AFC45A81F86BEAC9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:31:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 5542
IP: 92.61.176.0/22
IP: 185.123.208.0/22
IP: 2a06:af80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:1f:b7:bc:30:f0:92:af:c4:5a:81:f8:6b:ea:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5fa4d80464978f6ebfba95f745a3305726f72d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:19:b7:70:ac:b9:1f:e3:11:8c:ca:0f:51:5a:
84:22:42:58:6f:a2:83:a2:3b:25:e4:e4:ad:f3:88:
b3:0d:69:aa:a9:d9:3a:4c:29:ed:4a:b6:f6:74:56:
14:ab:1d:39:54:d2:26:c1:9c:cd:eb:72:09:36:e0:
99:23:8e:ee:8f:4f:ca:fd:19:65:26:46:aa:be:79:
b7:63:22:54:14:be:61:0a:b9:56:fc:e0:9e:0d:1a:
07:76:be:cb:c5:44:9d:8d:20:93:aa:3e:22:ff:49:
4e:09:95:79:6a:0c:63:7a:9f:e4:53:81:9e:74:37:
94:63:3a:64:44:62:38:f8:21:7d:95:aa:b4:93:31:
0a:ac:7d:11:ad:c9:2b:5f:08:00:73:6c:c9:e7:bc:
7c:e6:3b:f5:2f:9f:96:d9:fb:46:c9:4f:a8:d5:51:
92:fa:32:3b:c9:fa:ba:3a:45:fa:08:23:82:f1:7b:
ed:37:1d:8e:24:f5:5a:3b:b2:48:9a:5f:f7:b5:ba:
98:da:ca:c6:3b:77:0d:77:12:51:69:9f:0f:ea:c7:
bd:28:4f:2e:94:ad:8f:f0:05:9e:c1:62:26:0b:38:
3f:be:97:1c:f5:dd:aa:71:d5:7d:f7:f8:0b:99:3d:
d9:cd:2a:64:fb:73:ae:1c:61:78:ff:d7:a8:0f:b1:
de:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A4:D8:04:64:97:8F:6E:BF:BA:95:F7:45:A3:30:57:26:F7:2D:93
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.176.0/22
185.123.208.0/22
IPv6:
2a06:af80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
5542
Signature Algorithm: sha256WithRSAEncryption
0d:f2:f6:36:a9:f5:6d:57:9c:e7:f6:5e:2b:28:f6:76:a9:ce:
27:80:be:4a:3f:9d:29:d9:c9:7e:f7:92:da:5d:3e:a7:b8:f3:
3c:81:fa:ff:4a:40:42:6c:c5:63:1f:de:74:1d:2c:5a:98:ff:
01:80:a5:6d:e0:66:d6:97:d5:59:39:e2:7c:93:fb:e1:03:15:
da:d4:fc:32:06:6e:f7:a7:3c:e1:e2:2a:34:87:d1:e6:e0:a2:
12:45:68:39:d4:b4:41:4f:46:7a:90:ba:d4:d2:ae:7b:0d:2f:
d7:18:b6:bd:4f:1a:31:50:38:9b:d9:9c:44:ca:36:f2:80:ee:
d4:a8:c4:ff:21:4e:41:c9:b4:36:25:62:78:23:77:fc:c5:12:
ba:e5:2b:90:6d:68:b7:e7:ca:4f:36:3b:34:3a:4a:17:1c:0e:
a7:b1:0c:5f:c9:61:11:95:15:50:39:46:54:f4:d1:f5:90:90:
4e:07:cc:11:53:0e:52:cd:b2:b3:4a:5c:fe:a2:96:6c:88:c2:
27:55:b4:bf:15:25:b6:f4:67:97:48:39:b1:80:b7:17:bd:e5:
54:3e:e3:f9:96:72:f7:bc:85:cb:c2:1b:a6:62:55:7b:64:4a:
86:1d:0b:2b:53:50:1c:49:62:6a:0f:a0:b1:1b:57:50:d4:90:
a9:cd:92:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:10:20 2024 by rpki-client on console-ams.rpki-client.org