Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.cer
File: XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.cer (raw, json)
Hash identifier: gTtCLtfClEPDGIq36Exc+zGkGYwyf2DKi6ydRIvV7NU=
Subject key identifier: 5D:16:DC:CF:B2:E2:C8:8C:F0:9F:48:7C:42:1F:C8:AF:7B:BD:35:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA99D4442465EA2A972792CDD2A74A19
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 14:35:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 200931
IP: 185.91.4.0/22
IP: 2a03:8860::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:d4:44:24:65:ea:2a:97:27:92:cd:d2:a7:4a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 14:35:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d16dccfb2e2c88cf09f487c421fc8af7bbd3574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:96:7a:a9:a6:55:e8:59:c9:24:b3:60:b3:66:
86:94:a2:65:32:da:98:e8:76:97:b6:d8:d9:f4:2d:
84:17:31:b1:34:9d:37:61:f9:3c:84:f6:65:f0:93:
8d:95:36:e4:7a:41:d5:cc:48:2f:73:e2:90:75:50:
d6:91:5f:97:2c:a0:a0:c6:90:73:78:35:5d:de:98:
56:ee:bc:db:6d:2f:22:30:85:6b:7b:fd:86:50:60:
65:d6:d3:3e:0b:d2:de:e9:a1:58:4e:89:b2:0a:df:
12:86:1b:7e:88:85:2c:11:9d:89:5c:5e:fd:1c:46:
4e:c3:fa:7f:83:65:ce:3b:f4:16:ae:2f:b9:df:71:
1f:3c:90:4a:2f:86:d4:c6:12:bc:bc:60:2b:e8:df:
03:f7:1d:3f:83:a3:87:e3:93:cf:3c:52:a3:70:e3:
75:e0:49:c0:cf:78:78:bd:cc:e8:f3:d2:45:12:43:
d5:01:26:8c:3e:b4:4f:4b:ad:36:fb:88:ce:e6:a5:
98:89:ec:07:34:10:6f:fd:52:55:2c:d6:c8:de:d2:
0d:05:6f:f4:5c:e8:97:93:b3:83:67:f3:62:32:ec:
7e:d8:04:da:bd:17:f3:b2:36:40:15:68:bf:8a:1d:
03:72:7a:8e:b1:e8:71:b9:42:cf:30:f0:74:6d:9d:
0f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:16:DC:CF:B2:E2:C8:8C:F0:9F:48:7C:42:1F:C8:AF:7B:BD:35:74
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.91.4.0/22
IPv6:
2a03:8860::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200931
Signature Algorithm: sha256WithRSAEncryption
8f:16:56:f9:00:11:51:0e:44:96:c0:7f:01:a3:50:cb:99:d6:
d7:c8:25:60:cb:be:72:b2:a1:b8:87:20:32:4e:a3:0d:29:26:
2f:7d:e8:df:c6:5e:db:10:ac:ae:04:cc:4d:73:14:ca:ef:9c:
7c:be:69:a4:d8:69:bf:a6:8d:53:11:35:4b:d5:89:94:7e:16:
ba:64:93:d4:b8:b6:d2:d7:0a:ee:e6:40:80:84:cb:72:9f:0e:
a4:c4:ec:88:ee:4a:28:af:87:48:17:6b:13:a1:b0:e4:20:00:
ea:68:da:2c:6e:2b:1c:dd:2d:96:c4:50:42:e3:bd:62:4e:b3:
d5:1a:f4:eb:47:3b:5f:74:d5:a9:de:ba:c0:cb:d7:6b:bb:6d:
cc:fa:ce:d7:c1:3d:fc:ca:e2:d2:83:3e:bc:97:92:91:e5:a9:
6f:30:ba:c2:7d:09:05:fa:d6:26:b9:62:ea:fa:61:b3:f9:c8:
3a:26:2f:1b:88:c2:cf:98:9a:5a:fe:bd:a4:9c:59:01:80:d7:
3a:d4:6a:8c:4c:b9:84:0b:ec:d4:05:60:26:b8:fc:d7:90:2c:
2b:f8:df:a4:e5:bb:e5:c5:8e:e3:de:bb:2f:bd:62:c3:15:cc:
ce:75:1d:b3:25:1a:b7:de:2e:21:d2:2c:e1:0f:6a:e2:de:ff:
61:52:2b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:51:38 2024 by rpki-client on console-ams.rpki-client.org