Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XQwn-FWB4ue94MmPvVS-HUlnBRc.cer
File: XQwn-FWB4ue94MmPvVS-HUlnBRc.cer (raw, json)
Hash identifier: Yc6ohbDkP+pnDcchuNeQqK8LRl0h9pCs2R12LWwyCYs=
Subject key identifier: 5D:0C:27:F8:55:81:E2:E7:BD:E0:C9:8F:BD:54:BE:1D:49:67:05:17
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B521D9E58BFD372611FD8971358C8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:31:14 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 48159
AS: 49666
AS: 50722
AS: 50992
IP: 31.193.112.0/21
IP: 178.251.208.0/21
IP: 185.1.77.0/24
IP: 185.11.88.0/22
IP: 2001:7f8:a8::/48
IP: 2a03:57c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:52:1d:9e:58:bf:d3:72:61:1f:d8:97:13:58:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d0c27f85581e2e7bde0c98fbd54be1d49670517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5b:e1:bf:6f:3c:8e:b4:3a:36:d9:5d:1f:de:
83:00:36:5f:91:3d:c3:a9:16:e0:ce:3b:af:75:fb:
d7:ba:60:95:dc:31:db:a1:1f:61:0f:7d:ab:0f:3f:
50:7e:93:08:62:10:68:8b:34:19:90:27:5a:43:a5:
45:a1:94:18:9d:f1:cc:83:c3:aa:5f:07:0b:dd:fb:
29:2d:94:f4:cf:f4:03:52:e0:4a:1a:4d:65:37:ed:
7e:2c:24:5a:b3:2a:73:c7:be:3d:98:86:16:8c:b9:
92:17:c2:da:88:28:23:c1:17:92:80:31:bf:49:3b:
06:a9:6b:a9:ed:52:23:63:10:1b:dc:04:77:77:9f:
6d:bc:20:b7:55:c2:94:08:f2:33:0e:83:35:6b:0a:
c6:7c:73:7b:6a:eb:84:0d:d6:68:53:2a:8c:0e:4d:
4a:34:c4:cd:c1:ed:6e:f0:54:a1:8e:e1:7a:61:78:
df:0b:1c:f4:96:ef:e8:60:23:d5:14:9f:61:ec:8c:
36:21:55:ad:17:c9:6b:90:eb:16:c0:75:3b:e9:52:
b9:1f:1a:36:98:43:f4:dd:ff:40:c8:83:e5:d1:64:
45:9d:f0:3b:52:bd:6c:00:3b:8c:d3:73:9e:06:16:
0f:f0:b3:9a:db:36:eb:ad:c4:01:95:58:86:83:3b:
0d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:0C:27:F8:55:81:E2:E7:BD:E0:C9:8F:BD:54:BE:1D:49:67:05:17
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.112.0/21
178.251.208.0/21
185.1.77.0/24
185.11.88.0/22
IPv6:
2001:7f8:a8::/48
2a03:57c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48159
49666
50722
50992
Signature Algorithm: sha256WithRSAEncryption
75:c6:62:79:72:7a:a0:c2:f7:17:1c:6e:0a:3d:8d:25:85:97:
0a:dc:c9:9d:e8:a7:a0:92:a9:6b:90:66:ce:8a:94:1c:cf:51:
8c:92:32:96:c7:16:a1:6b:27:20:1a:8b:e2:b6:c8:b5:28:c6:
0c:40:15:51:50:74:d2:a2:06:25:a2:98:61:e1:b2:e7:ad:0c:
e4:0a:d8:7f:8e:ca:e7:89:fb:6c:93:70:7e:45:eb:a3:90:2a:
2d:ab:2e:58:1c:b8:12:a5:d0:53:76:df:82:1f:58:24:f6:f5:
4e:6c:59:be:b5:86:4f:ce:e0:29:5d:a1:17:e1:f8:c6:61:63:
c5:99:c1:7c:66:0d:a5:7c:0f:c8:e9:c4:13:bf:11:f3:4d:0e:
fa:65:44:db:28:3c:19:d1:d5:46:f9:8f:ed:ce:f3:08:0c:7f:
86:1d:a9:fd:61:1c:59:a6:12:05:7d:98:bf:62:5d:df:cd:7f:
11:33:e0:07:ac:47:b1:43:18:68:68:d4:f3:af:67:37:d6:98:
fa:62:88:86:7e:9b:44:68:eb:f0:25:a4:b0:e5:fc:7a:4e:30:
76:be:86:24:7d:a0:3b:8c:60:f6:ff:4a:e1:f2:89:7f:7f:a3:
23:d8:04:76:4b:0f:c4:e6:1d:61:2e:23:21:f6:3c:21:cb:45:
79:d8:26:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:04:26 2024 by rpki-client on console-fra.rpki-client.org