Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
File: XP44gfPER3T1HMde5-b5HFVlpgY.cer (raw, json)
Hash identifier: vdkzcjbAx+OzhUJOciFX2AwCtRRQVhNsUm29fLDPTVg=
Subject key identifier: 5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0193496E767141CC26C4F5AB71782530E8FC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 20 Nov 2024 11:56:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 61162
AS: 202681
IP: 185.133.68.0/22
IP: 185.153.56.0/22
IP: 193.104.32.0/24
IP: 2a05:2440::/29
IP: 2a07:8880::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:49:6e:76:71:41:cc:26:c4:f5:ab:71:78:25:30:e8:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 20 11:56:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ae:b9:8b:84:65:89:3d:9c:87:db:26:c3:e0:
14:a6:66:f2:de:45:a3:20:0d:34:28:ee:54:03:21:
d8:8f:1c:00:c1:00:c8:68:17:dd:e9:16:38:e1:78:
b0:5e:18:e5:48:2c:27:e4:7b:ee:d9:88:47:a5:41:
0b:80:07:7e:04:19:4e:53:ca:0a:8a:cb:3a:11:a6:
87:e5:cb:6f:ac:54:da:ff:95:4b:44:61:2d:d0:70:
0a:0f:7a:43:8d:75:28:ac:87:9e:64:db:1b:45:7d:
2b:7a:24:01:10:ad:eb:b2:8e:dc:1b:59:bb:39:c6:
1d:aa:6f:5e:4a:3d:4d:34:28:c9:f1:f0:57:e3:a8:
6e:10:06:1e:16:04:e7:47:10:9f:f3:4e:f2:c5:e6:
9d:53:7d:05:b7:94:c9:af:e1:b7:73:f4:06:4a:29:
45:f7:a5:b8:da:66:26:f8:e5:11:99:f2:4e:07:b9:
e7:14:92:1e:c4:50:21:dc:de:56:15:2e:dc:77:79:
22:48:a8:d6:94:53:42:d0:17:d5:ee:4d:62:ca:57:
f9:97:97:80:0b:ed:dc:61:64:2e:93:26:51:43:90:
52:b6:79:14:aa:54:fb:ea:b5:ea:a5:c8:09:d1:43:
b7:e9:92:37:05:a2:23:06:dc:6f:2b:d1:e0:61:a9:
5d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.68.0/22
185.153.56.0/22
193.104.32.0/24
IPv6:
2a05:2440::/29
2a07:8880::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61162
202681
Signature Algorithm: sha256WithRSAEncryption
9b:b9:95:3b:72:1f:5e:db:7f:ff:0a:1f:7a:90:9b:f2:f9:29:
75:2f:b9:13:bb:d9:0e:a7:c1:58:af:1c:48:39:e7:75:ec:2e:
bb:4b:dc:38:a0:49:04:5d:f4:2b:49:e0:8d:e9:ff:52:bc:a3:
c4:5a:57:9b:63:de:36:c4:80:9e:87:a5:fb:00:f7:19:86:ac:
6f:64:89:86:e5:d0:b3:46:17:ba:ac:f5:10:c0:69:6a:85:19:
27:54:a0:20:e0:36:2e:a8:34:b6:02:6c:13:2d:88:d1:07:10:
e6:a1:48:7c:58:bd:37:dd:44:3f:54:6b:3f:f4:90:00:46:28:
62:27:62:a2:70:0b:64:34:11:ff:83:e5:65:65:96:46:4b:f1:
78:0e:02:48:5a:e5:08:96:c1:b0:50:70:e9:a2:9a:44:6c:f8:
a4:19:46:d5:e4:29:ad:1a:34:cf:73:1e:fc:67:17:e7:24:02:
05:b5:bb:f2:af:f0:ae:5b:f2:c3:eb:4b:a2:09:c8:97:1d:09:
ce:54:36:73:a7:9f:7a:66:40:76:4f:d6:01:c0:1b:75:54:c9:
26:a8:13:50:3e:21:b0:04:80:db:2f:f1:d1:6f:d7:8e:d3:f3:
bd:ec:ad:9a:0b:f6:6a:52:e0:98:34:b9:23:64:10:df:b2:90:
7b:64:45:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:45:11 2024 by rpki-client on console-fra.rpki-client.org