Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
File: XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer (raw, json)
Hash identifier: nbKcPrEJDGBwGnt2wY6OBd+Lv3tzd4wN0iRUguOFHeQ=
Subject key identifier: 5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B6EB130DA5BB1D9A4026FDC1987D40
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:54 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 60759
IP: 188.95.91.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:eb:13:0d:a5:bb:1d:9a:40:26:fd:c1:98:7d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5e:db:45:10:a7:75:18:5c:e1:51:5c:81:01:
4d:42:d6:80:1a:9a:dd:22:e5:33:f9:30:7d:09:35:
ec:17:ac:26:8d:4f:e4:a4:3e:d5:54:d7:0e:f7:16:
5c:8c:18:80:eb:50:d5:39:10:6b:ec:5e:14:5d:05:
e5:c1:fe:84:d8:4b:a1:65:92:ff:aa:ce:ec:bf:2c:
02:06:e4:9f:69:ab:9a:ad:c4:be:76:ef:d4:ce:c5:
b6:a3:c6:33:10:91:2f:77:2b:79:2e:52:a3:3d:de:
d8:68:68:c3:1a:bc:d8:7d:19:b5:b8:9a:a9:9b:c1:
b0:c9:90:78:0d:b5:5b:3c:b0:43:ca:f7:97:ae:b3:
50:98:4b:ed:99:2c:12:fe:fc:14:f2:29:ca:b0:6c:
76:98:94:20:9b:bc:cf:e0:ad:1d:82:4b:1b:7c:2c:
c7:fa:6b:66:42:13:ac:b6:ef:9f:70:23:91:c4:52:
d3:0a:4c:4e:54:05:a6:a6:4e:83:86:a3:c0:5d:23:
78:71:9c:00:36:36:20:6e:38:b8:67:b4:86:fa:79:
db:0a:24:29:a9:44:22:45:f6:08:87:7a:a9:08:9f:
78:8c:25:bf:33:f1:f1:4e:19:74:52:e7:cf:d8:50:
cc:a1:b6:d4:3e:ef:dc:b3:1f:81:27:9f:bb:08:38:
4c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.95.91.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60759
Signature Algorithm: sha256WithRSAEncryption
53:ea:d4:a1:65:b5:32:a2:d9:40:87:ec:d8:cc:aa:bc:3a:0a:
da:bd:e5:e1:56:2f:60:2b:57:01:c4:36:d5:8a:ca:df:d1:e7:
42:0b:2b:01:8f:bf:45:ea:b0:c4:9f:76:2c:c1:cc:d6:f4:f6:
9d:c1:f5:5f:91:a2:b2:33:a6:7b:86:77:91:bd:7b:90:49:cf:
d8:97:cf:5f:17:e6:68:3f:41:99:49:d9:69:5d:ec:65:b8:92:
80:ee:56:9b:e5:0a:3d:c1:f5:6f:36:fe:0d:96:66:b2:d0:9b:
2c:df:13:86:16:0e:ca:34:52:47:e9:40:24:25:4e:80:91:5b:
5f:0c:f0:05:db:6a:24:83:57:f4:bf:45:1f:54:5a:bd:ed:04:
0a:c9:bc:26:72:bf:dd:7d:a8:93:44:ef:ac:ad:f1:4d:11:84:
64:87:aa:76:1e:92:98:e8:e3:a4:65:b3:5d:73:85:b3:08:4d:
c7:17:a6:78:35:74:df:a1:ed:25:9a:9a:95:77:54:74:d1:7d:
55:b7:a4:77:e7:c2:72:72:e1:9e:d4:be:74:60:38:f9:0f:79:
31:b0:0b:d7:03:8f:18:cf:57:83:c4:d4:69:00:19:ba:00:74:
c5:1c:26:60:a1:31:05:ef:9b:0c:a0:95:24:71:18:46:0e:cc:
f0:65:ef:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:22:10 2024 by rpki-client on console-fra.rpki-client.org