Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.cer
File: XDRKGsDL_EDHWgz8e-yWx8Nb0ns.cer (raw, json)
Hash identifier: cAdA62T8autJ/v5PvBSk9J5Ln8qtccP4RY5S0MVS4Rc=
Subject key identifier: 5C:34:4A:1A:C0:CB:FC:40:C7:5A:0C:FC:7B:EC:96:C7:C3:5B:D2:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B8FB586470E371E79AF00F26C23F04
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/329ab8-b1d9-4f9f-a9c8-cd18510edcdf/1/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/329ab8-b1d9-4f9f-a9c8-cd18510edcdf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:31:00 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 51996
IP: 46.183.208.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:fb:58:64:70:e3:71:e7:9a:f0:0f:26:c2:3f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:31:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c344a1ac0cbfc40c75a0cfc7bec96c7c35bd27b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:68:04:21:88:37:e9:b1:1f:4c:04:02:7e:0a:
cc:c6:7a:96:53:57:ca:84:64:eb:9f:d1:6c:f3:97:
b0:71:cf:ae:ad:14:6c:d0:0c:d8:d0:1a:43:d1:65:
62:67:6b:dc:3a:d7:d3:08:17:3f:78:3c:7e:f4:f1:
0e:46:39:64:23:30:95:89:3d:30:eb:07:d9:f5:b4:
8b:99:2b:46:9e:15:0b:24:25:de:6c:24:a3:74:fe:
4f:df:88:79:03:52:4b:cc:26:5d:36:a9:8c:0e:ec:
e6:84:b3:80:e4:45:b4:e1:f7:bc:bb:8e:36:70:d2:
d0:3a:a9:e9:ba:75:7a:5b:a4:50:45:d0:aa:b9:eb:
40:d0:b5:1f:fe:7c:ae:4d:3f:20:4e:d7:26:e7:5e:
a6:3b:5a:d8:99:00:d6:85:7a:f7:1c:b5:7f:f7:87:
f3:63:ea:9f:aa:6a:12:3f:a4:5c:31:22:e6:85:f3:
dd:e9:04:0a:27:c7:d7:06:f1:c7:50:9f:77:80:23:
09:b2:8f:7e:fd:d4:63:e4:4f:41:e6:3c:10:ed:6f:
b7:c4:ac:4b:3f:61:f3:79:0b:2d:8b:9b:1e:d4:bc:
25:6b:61:5d:97:d1:4f:2e:2f:b9:f6:a2:f7:5d:79:
3f:8a:3a:9e:0b:cd:74:9f:f5:93:92:34:b3:af:d0:
10:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:34:4A:1A:C0:CB:FC:40:C7:5A:0C:FC:7B:EC:96:C7:C3:5B:D2:7B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/329ab8-b1d9-4f9f-a9c8-cd18510edcdf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/329ab8-b1d9-4f9f-a9c8-cd18510edcdf/1/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.208.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51996
Signature Algorithm: sha256WithRSAEncryption
9c:ba:07:b1:42:b7:a6:9a:98:28:89:c7:1c:dd:04:80:ae:0c:
c2:d5:d1:b1:1c:e2:72:04:35:96:18:2b:ed:97:ab:74:8e:3e:
0c:e2:9c:6d:fb:19:df:7f:cf:89:91:89:73:31:7c:fb:a4:96:
ae:4b:c3:72:c3:64:66:cd:b3:91:b9:11:fc:92:01:a5:9d:23:
c9:1a:71:be:54:be:5f:c5:80:f7:dd:2b:24:de:b9:44:de:46:
ff:d6:88:66:cd:ff:0f:08:e7:7a:96:f2:c6:63:1b:bf:c7:31:
89:86:8d:58:c6:76:08:11:62:53:88:29:67:64:af:0b:ec:57:
39:b1:fe:45:6c:1b:8f:b5:f3:4b:d3:11:f2:b3:50:43:31:e7:
f5:1c:5b:77:9a:bb:81:d5:42:18:f1:53:db:f9:81:d2:94:f8:
11:06:88:f8:c5:78:63:01:93:08:2e:f1:ef:b0:1f:82:53:f5:
c9:f3:b4:88:e6:5a:5b:3d:a7:ce:d3:38:6c:d7:2f:b1:a9:6f:
98:ce:e5:fa:43:b5:27:65:c4:71:b5:3e:7e:fb:f7:8f:5b:9e:
16:97:a5:e9:95:ec:52:39:77:8f:fe:46:a8:7e:a4:af:da:6f:
46:b8:b9:15:72:34:38:bd:4c:93:41:02:d6:35:a1:2f:67:57:
ad:b1:10:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:20:12 2024 by rpki-client on console-fra.rpki-client.org