Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer
File: XNTi_CtB6FbbpbpiI1umQaDYG0g.cer (raw, json)
Hash identifier: 4W4COTdznV4At1b5CNcF7PDptXfyaSTJ39Jocew+RGQ=
Subject key identifier: 5C:D4:E2:FC:2B:41:E8:56:DB:A5:BA:62:23:5B:A6:41:A0:D8:1B:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94AAA9881D381259536A906EF818A0E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:29:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 195.42.106.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:aa:98:81:d3:81:25:95:36:a9:06:ef:81:8a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5cd4e2fc2b41e856dba5ba62235ba641a0d81b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:aa:b5:d4:4f:8b:33:5f:fb:a6:7f:12:ba:9d:
62:0b:f1:00:26:3e:91:66:01:d0:05:20:0b:0c:70:
b2:61:f2:cf:ca:b8:59:d4:69:1a:a3:c0:3c:9a:40:
74:ba:32:d5:18:1d:ec:b8:95:17:c0:ed:12:d6:fd:
b2:e0:31:c4:ae:94:85:2c:63:9b:32:05:f9:93:92:
04:57:d5:63:6f:1c:b8:66:88:d6:c7:d7:22:6c:d7:
85:cf:6e:55:34:01:e6:9b:75:5f:4e:9b:ee:4f:8a:
28:00:31:49:d7:b8:47:45:39:13:11:c9:1d:71:5d:
bc:73:3f:4b:41:dc:62:73:86:fe:64:92:e1:c9:e9:
e4:86:89:74:5a:52:73:8b:21:f1:97:02:63:e6:02:
24:40:13:42:1f:8a:10:7e:22:f4:44:f5:ec:10:5d:
07:d4:1a:dc:1a:67:8d:ed:14:95:0c:f7:d8:44:ef:
f8:d4:48:c0:08:67:ef:58:3f:50:bb:9b:14:40:f9:
d8:03:7a:69:2b:09:f8:a7:3a:ab:eb:d1:47:73:a0:
bd:47:0b:8d:41:8e:9d:c2:84:5d:ce:74:64:44:85:
bd:e2:b8:29:dd:b3:45:0d:fb:ec:3d:3b:e4:fb:37:
7a:ac:9e:0e:5d:7f:23:fc:79:06:a1:4a:82:ea:55:
90:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D4:E2:FC:2B:41:E8:56:DB:A5:BA:62:23:5B:A6:41:A0:D8:1B:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.42.106.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:33:7f:54:94:dc:ae:9d:7d:8c:e5:29:4f:a8:ed:d4:d8:20:
fb:84:21:10:d5:0a:cd:45:a7:8e:6c:00:25:c3:41:86:5a:4b:
b5:ac:3f:71:13:f5:be:b8:44:be:dc:a9:8a:1f:3f:ad:0d:6b:
45:b5:72:70:d4:5c:06:5c:47:57:8c:f8:00:c9:79:c1:29:ec:
87:4d:ff:35:2a:49:ca:27:57:e7:9e:e9:e6:df:93:70:38:b6:
8e:d0:94:90:d6:e5:0b:d3:05:48:02:68:21:94:fd:45:aa:8e:
7b:2e:2a:84:8a:05:94:39:e1:f2:48:d3:b7:43:ad:36:5d:19:
ba:b5:83:62:45:c4:66:dd:74:ea:0f:78:8e:13:ab:01:68:5c:
ca:4e:18:37:a3:ff:39:9b:c4:0d:f7:a3:9d:21:07:15:b5:a8:
4a:f4:09:10:36:02:58:d9:51:58:a8:36:8e:38:16:0c:10:2d:
d2:3c:ba:fb:a3:fe:3a:a2:58:fa:c3:66:f8:e4:10:15:ff:61:
6a:15:7c:45:f3:2c:d0:32:38:af:ab:da:26:52:a7:8d:af:be:
b5:a9:30:58:ef:a6:97:ed:e8:90:19:37:9a:c6:a7:21:f4:0f:
42:0b:5d:a3:5c:c6:35:dd:9f:6e:5a:17:c8:06:af:90:ad:7e:
c4:b3:23:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:36:00 2024 by rpki-client on console-ams.rpki-client.org