Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XFe2FhFxnsfI4AErGv9-gfx2ib0.cer
File: XFe2FhFxnsfI4AErGv9-gfx2ib0.cer (raw, json)
Hash identifier: FHDKxEHwsZz+v+ZLZT0MvjzxOSW26nhJlebSQ+BbYWI=
Subject key identifier: 5C:57:B6:16:11:71:9E:C7:C8:E0:01:2B:1A:FF:7E:81:FC:76:89:BD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DBF77CEA51F9CE035C31702FF1EFE7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 28984
IP: 195.47.224.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:f7:7c:ea:51:f9:ce:03:5c:31:70:2f:f1:ef:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c57b61611719ec7c8e0012b1aff7e81fc7689bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:54:37:d6:dc:a3:b4:ab:5e:28:b5:f0:93:98:
68:15:04:17:04:44:45:93:28:92:99:d8:e1:0e:ad:
14:0c:13:a2:8a:8d:0b:ae:42:bf:57:5d:9a:68:24:
c2:65:2c:df:e8:fe:a7:14:32:e3:98:c9:eb:85:d6:
a0:85:51:20:79:b9:ab:c4:b1:46:d6:68:3a:02:b7:
99:b9:fd:22:1e:97:8f:97:c9:50:b9:41:92:da:9c:
ce:24:3c:54:71:0a:e8:5a:f4:f0:24:6a:73:41:74:
f6:11:14:bf:06:f1:c3:a1:3f:dd:58:9c:15:65:8f:
e3:fc:75:4a:f8:c1:7b:11:83:90:5a:18:46:45:70:
6e:26:4b:8e:4c:8f:97:8f:42:4a:23:a8:7d:58:26:
c3:9b:d6:25:e4:3a:4f:7f:8a:a4:bd:65:9b:0e:13:
c5:a5:e2:57:e5:1d:a7:ac:40:59:bf:ad:e6:2b:a2:
c6:7f:62:35:2b:c2:f8:9a:86:b3:71:1d:e3:98:8e:
d0:a9:b7:eb:88:e7:f7:5f:5d:ee:55:1e:cf:f4:53:
57:08:e6:11:85:15:47:06:f9:01:99:6a:9e:7b:9e:
c9:50:86:d2:d8:19:70:4e:3f:ce:53:a8:8c:5a:9f:
8c:27:a5:dc:ac:6f:00:14:52:6e:bf:c0:34:dd:3b:
44:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:57:B6:16:11:71:9E:C7:C8:E0:01:2B:1A:FF:7E:81:FC:76:89:BD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.47.224.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28984
Signature Algorithm: sha256WithRSAEncryption
28:41:ba:65:56:74:06:74:7e:f4:9d:5b:a1:05:84:7d:4e:76:
18:a5:89:dc:10:a4:95:93:01:d0:bb:dd:d2:c7:b7:6f:d5:e5:
57:a4:94:af:cf:d9:e9:92:2c:c7:fc:a2:91:52:93:86:f8:e4:
34:b7:5d:45:75:17:75:75:79:ed:48:ae:ba:c1:80:c4:05:8f:
c2:0f:98:1e:13:88:e1:57:0c:76:6c:15:2d:18:c0:f5:c1:96:
77:e9:73:e6:ed:dd:17:3d:90:61:23:24:9e:fb:9a:1c:5d:ea:
1c:5c:2a:80:0d:61:3a:00:c0:34:18:cb:e4:3f:b7:67:d6:cd:
65:62:c6:28:ca:3d:43:f5:ed:43:bc:8b:f6:7c:73:33:8c:9c:
ca:d3:67:7a:c1:8f:ee:61:c0:20:83:23:ff:8b:95:e7:46:ad:
99:3a:60:9d:f5:9b:fa:69:20:83:cc:ef:32:92:04:77:03:1a:
5f:5c:9f:27:70:c9:eb:9d:89:2c:fb:4a:56:63:39:d0:c2:15:
dc:0e:1f:d7:7d:25:e9:f9:16:86:16:40:f5:04:04:78:0d:49:
97:90:4e:ac:f8:a2:f5:a4:50:34:8a:bd:fc:5c:21:16:1b:81:
4b:8d:20:59:0d:63:0c:d1:ad:b1:8f:91:6d:61:04:31:bb:17:
37:4e:9d:ea
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgISAYzF2/d86lH5zgNcMXAv8e/nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTYyOTM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YzU3YjYxNjExNzE5ZWM3YzhlMDAxMmIxYWZmN2U4MWZjNzY4OWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFQ31tyjtKteKLXwk5hoFQQXBERF
kyiSmdjhDq0UDBOiio0LrkK/V12aaCTCZSzf6P6nFDLjmMnrhdaghVEgebmrxLFG
1mg6AreZuf0iHpePl8lQuUGS2pzOJDxUcQroWvTwJGpzQXT2ERS/BvHDoT/dWJwV
ZY/j/HVK+MF7EYOQWhhGRXBuJkuOTI+Xj0JKI6h9WCbDm9Yl5DpPf4qkvWWbDhPF
peJX5R2nrEBZv63mK6LGf2I1K8L4moazcR3jmI7QqbfriOf3X13uVR7P9FNXCOYR
hRVHBvkBmWqee57JUIbS2BlwTj/OU6iMWp+MJ6XcrG8AFFJuv8A03TtEowIDAQAB
o4ICnzCCApswHQYDVR0OBBYEFFxXthYRcZ7HyOABKxr/foH8dom9MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY0L2I3ZmU3
NS0zMGVlLTRhNmYtYjUyOC1mYTMwNzFjNDM1ZjEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjQvYjdmZTc1
LTMwZWUtNGE2Zi1iNTI4LWZhMzA3MWM0MzVmMS8xL1hGZTJGaEZ4bnNmSTRBRXJH
djktZ2Z4MmliMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwy/gMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC
AnE4MA0GCSqGSIb3DQEBCwUAA4IBAQAoQbplVnQGdH70nVuhBYR9TnYYpYncEKSV
kwHQu93Sx7dv1eVXpJSvz9npkizH/KKRUpOG+OQ0t11FdRd1dXntSK66wYDEBY/C
D5geE4jhVwx2bBUtGMD1wZZ36XPm7d0XPZBhIySe+5ocXeocXCqADWE6AMA0GMvk
P7dn1s1lYsYoyj1D9e1DvIv2fHMzjJzK02d6wY/uYcAggyP/i5XnRq2ZOmCd9Zv6
aSCDzO8ykgR3AxpfXJ8ncMnrnYks+0pWYznQwhXcDh/XfSXp+RaGFkD1BAR4DUmX
kE6s+KL1pFA0ir38XCEWG4FLjSBZDWMM0a2xj5FtYQQxuxc3Tp3q
-----END CERTIFICATE-----
Generated at Fri May 3 07:39:45 2024 by rpki-client on console-fra.rpki-client.org