Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XPUf3FVIGDqKeT56CofZdw5ra4k.cer
File: XPUf3FVIGDqKeT56CofZdw5ra4k.cer (raw, json)
Hash identifier: AVYfFoq99qGmazHT7vPhK8AM6iVfEhWGhXj+fDXld1c=
Subject key identifier: 5C:F5:1F:DC:55:48:18:3A:8A:79:3E:7A:0A:87:D9:77:0E:6B:6B:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC42485BC072ED4F600215D180F714463
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/f0c7ca-f736-42e0-bb66-0c3c3eea75c1/1/XPUf3FVIGDqKeT56CofZdw5ra4k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/f0c7ca-f736-42e0-bb66-0c3c3eea75c1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:37 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 95.215.57.0/24
IP: 2a12:3dc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:85:bc:07:2e:d4:f6:00:21:5d:18:0f:71:44:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5cf51fdc5548183a8a793e7a0a87d9770e6b6b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:83:c9:ac:2b:2e:02:c5:fb:27:9c:6a:9b:c8:
b4:ab:b9:98:10:a1:5f:3b:c5:26:94:be:8b:ea:54:
f3:af:9c:ca:71:ac:21:95:a7:ea:b3:de:1c:4a:e5:
b2:3c:6e:42:91:91:b2:75:1f:9b:a5:eb:63:5c:a8:
83:b6:d7:b6:b2:c9:e0:2d:cf:49:12:b4:51:c5:74:
2a:f6:7f:85:e9:39:eb:5d:ee:e1:d9:10:ac:e4:a6:
1c:fd:08:7c:89:3a:14:27:dc:bd:37:3e:14:e9:82:
c6:3e:7d:08:a7:32:96:58:22:3f:b7:10:86:6b:16:
71:fe:45:7a:60:2e:47:aa:06:13:2f:6b:63:fd:7a:
5c:6b:a5:25:8b:46:22:42:41:f8:a0:32:b7:97:3c:
47:25:c7:d0:ce:03:74:1b:af:c1:f1:df:21:51:49:
ed:94:2c:6d:07:02:6d:be:ac:70:4c:8a:1c:35:ab:
a1:ea:23:34:db:82:f3:59:e3:e9:42:0b:d3:14:10:
70:76:78:1d:81:7a:9f:39:e7:da:bc:00:7a:4e:e0:
7d:c0:8f:43:dd:80:36:57:ee:71:39:fe:89:dd:a1:
58:20:42:77:f6:44:cd:f3:9c:19:53:65:3e:7b:29:
cb:f8:3c:29:96:ee:04:69:32:dc:fe:44:b3:35:69:
87:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F5:1F:DC:55:48:18:3A:8A:79:3E:7A:0A:87:D9:77:0E:6B:6B:89
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/f0c7ca-f736-42e0-bb66-0c3c3eea75c1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/f0c7ca-f736-42e0-bb66-0c3c3eea75c1/1/XPUf3FVIGDqKeT56CofZdw5ra4k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.57.0/24
IPv6:
2a12:3dc0::/29
Signature Algorithm: sha256WithRSAEncryption
36:54:d4:ee:50:9c:0e:5b:79:65:c1:d6:3f:51:21:df:de:7c:
7a:3b:4a:c9:89:dd:1b:33:cd:bc:18:4d:99:20:a0:93:cf:c7:
3c:fa:a0:95:d8:40:71:c3:66:e9:ea:50:6d:32:34:bc:85:5e:
12:37:d0:6f:ad:80:17:bd:b1:6f:cf:a9:56:97:bc:53:26:8d:
e5:b2:f1:41:b3:f3:85:a7:5d:2e:94:14:c4:e4:45:56:42:b2:
ef:e8:a0:d0:67:4d:8d:23:72:3c:7b:30:1a:cd:b3:f2:4a:68:
fe:8b:07:bd:84:93:fe:9f:2e:2c:8b:a0:22:37:6a:58:77:67:
00:9d:54:59:e4:e4:ef:2a:16:40:27:d0:e7:0e:75:c7:e3:d3:
15:15:52:76:f4:69:cf:1d:c8:6a:cd:dd:e5:d2:c5:d9:8c:63:
e8:51:32:00:59:87:6d:d7:ef:50:10:03:d2:9d:c0:82:a3:e2:
f5:59:11:60:03:4d:6e:c3:04:d8:d4:26:30:f9:6e:0a:77:74:
00:37:b4:94:d5:a9:0d:f5:20:76:7e:50:7f:ea:f7:33:46:9a:
18:f6:5d:db:75:d8:f3:fe:e4:33:15:38:5c:f6:b3:f2:c1:c0:
ac:83:d6:8a:f1:a2:ba:2e:5b:12:f9:9e:a9:3e:4e:37:8c:b7:
71:d4:43:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:39:52 2024 by rpki-client on console-fra.rpki-client.org