Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
File: XHURStws-O3qUFlX556JBEJmwk4.cer (raw, json)
Hash identifier: D9M/LJXKwrZehAP/XNXfq1XcSeh5fBZFcqcCKlPbrzU=
Subject key identifier: 5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D6454B805E129F632B3EDF98DB2C27F5F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Feb 2024 11:01:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 197988
IP: 46.28.200.0/21
IP: 92.39.48.0/21
IP: 95.183.48.0/20
IP: 2a0c:2240::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:64:54:b8:05:e1:29:f6:32:b3:ed:f9:8d:b2:c2:7f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 1 11:01:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c75114adc2cf8edea505957e79e89044266c24e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6f:0e:cb:6a:fb:72:3e:96:78:71:88:4c:1e:
f4:79:3b:02:ec:03:b0:0e:98:0e:6d:76:4c:da:dd:
ab:2d:9e:2d:8e:f4:cf:75:fe:d2:97:c0:c6:ed:3d:
44:95:3e:d3:03:37:ad:cb:8b:ce:31:c9:c0:df:89:
77:3a:e9:fd:75:68:cd:f2:68:8a:17:3f:38:36:41:
c9:8b:0f:5e:99:22:ad:c0:43:da:8a:c0:d8:d0:4c:
54:c4:86:7b:f3:53:79:4f:c4:a0:f3:6e:70:4e:c4:
85:33:18:b2:06:f0:b1:04:df:82:17:03:59:2f:87:
43:82:8c:02:be:8e:ba:c9:ed:c3:8c:1b:0f:1b:03:
8c:98:9c:fa:63:97:27:d6:9d:f0:64:c8:cd:c3:de:
9e:01:3d:bb:fc:c6:f9:95:b0:63:71:4f:4a:45:9c:
a3:88:25:6e:89:fd:67:c2:5b:c3:75:06:30:c1:5a:
3b:9c:ed:a0:4e:47:ce:e0:dc:90:1e:c0:e3:55:41:
93:fe:07:e6:f4:1c:6c:03:92:be:f6:d9:8b:9f:07:
c1:1a:97:3c:44:f6:93:c5:dd:5f:78:1e:8e:7e:3d:
c3:ed:f2:2f:d4:54:8d:51:72:b0:2d:a7:46:4b:3a:
49:9b:bf:0b:e7:3f:87:9f:b1:70:38:53:3d:bb:df:
8e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.200.0/21
92.39.48.0/21
95.183.48.0/20
IPv6:
2a0c:2240::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197988
Signature Algorithm: sha256WithRSAEncryption
89:2b:99:96:79:e7:e4:95:63:14:c6:14:db:ad:0f:b2:fa:0b:
8f:7c:cc:36:13:fc:34:a5:64:85:49:74:4f:24:73:42:cd:67:
a5:7d:f6:d7:01:dc:9f:44:20:fb:4c:06:1d:ae:dd:e8:d7:55:
a4:81:d0:03:06:41:c3:4b:3d:f0:a3:ab:8f:bd:1e:de:35:63:
07:b6:54:ff:69:53:48:a7:a1:2a:0e:ca:98:41:d6:cf:54:a1:
52:8e:99:d2:32:d0:c9:ce:87:c7:52:13:86:74:21:c3:01:07:
ce:43:8c:71:31:11:26:bf:b4:78:22:ad:41:42:01:79:fb:be:
71:82:0c:a3:a1:91:a0:21:1b:a6:b2:7d:f0:65:34:03:02:67:
a2:69:cb:f4:f6:36:51:a7:21:ac:2d:cb:02:7e:d3:d7:e2:b8:
ac:79:59:29:3f:43:6a:db:85:46:7c:0d:de:5f:6f:d8:3c:3b:
fe:81:5d:09:f9:8d:86:f7:5e:9c:5e:7f:03:58:a6:79:82:61:
16:25:17:18:a3:d5:a0:f5:4d:d2:c8:dd:d1:56:9c:f9:b4:85:
5c:9a:ce:cf:e8:c6:55:be:4a:f0:38:0d:fa:18:bf:88:c2:14:
0f:d8:86:aa:be:12:66:75:57:ca:0e:3e:35:1c:66:8a:6c:f7:
7f:fe:d1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:20:15 2024 by rpki-client on console-fra.rpki-client.org