Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer
File: XS8h5aT74BUgX2zviK-uGc0GphI.cer (raw, json)
Hash identifier: uFrjobPDp34sJlFiJoyTsvG1duzu2HFIAd78nillirA=
Subject key identifier: 5D:2F:21:E5:A4:FB:E0:15:20:5F:6C:EF:88:AF:AE:19:CD:06:A6:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC1A4BC1B9FFCAA3D6976AC0A4B139
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:45 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.29.228.0/24
IP: 194.113.115.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:1a:4b:c1:b9:ff:ca:a3:d6:97:6a:c0:a4:b1:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d2f21e5a4fbe015205f6cef88afae19cd06a612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8d:45:1d:55:d9:f5:dd:bd:64:21:6f:17:5a:
f8:72:78:39:a6:cc:c2:06:70:4c:f4:bc:54:ea:ac:
df:5a:e4:46:f9:d2:5d:fa:2c:6c:fe:1a:0e:38:2e:
ec:c1:0f:28:2a:78:a4:12:f9:e1:3d:5b:0e:3e:92:
38:80:45:b9:45:29:48:b4:74:6c:f9:43:60:58:59:
8c:96:17:7f:f4:0c:bc:01:62:f7:fa:57:73:c8:33:
70:9a:26:d1:79:cd:72:18:c5:8b:a0:f5:01:a8:67:
0b:fe:72:42:d4:83:22:83:85:c7:13:56:3e:88:2e:
d1:02:45:16:f5:25:9e:8e:6a:24:87:72:10:af:a0:
60:eb:9e:e6:3d:14:63:9e:20:81:3f:60:ef:31:eb:
95:85:8e:a8:35:a2:9e:ea:44:cb:ae:1f:fe:23:35:
2a:3c:82:fa:fc:f8:4f:58:70:e2:4d:7d:34:50:91:
9a:86:05:3e:76:27:c6:a0:39:55:ed:81:62:34:0a:
7b:ba:54:d4:43:44:b2:b2:c3:e7:ec:b9:87:f5:1c:
f9:b5:32:22:50:7e:fa:a8:65:8a:60:e3:f7:2f:c5:
a3:83:a5:4a:68:5a:fe:29:8e:f3:9f:ef:d4:34:d0:
4c:64:91:33:12:50:e6:30:4a:5e:1e:31:cb:36:6a:
b4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:2F:21:E5:A4:FB:E0:15:20:5F:6C:EF:88:AF:AE:19:CD:06:A6:12
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.228.0/24
194.113.115.0/24
Signature Algorithm: sha256WithRSAEncryption
15:09:ef:02:26:4a:32:fb:70:d1:f8:21:dc:4c:6d:ae:48:90:
a4:03:1c:e3:06:32:e9:2f:ce:45:f1:4b:22:93:a0:86:2d:e8:
51:d5:45:8e:bc:fd:11:81:c8:8f:49:c4:cf:14:4f:f1:26:2d:
8c:06:43:f1:18:a0:8b:09:33:8f:2f:9f:4e:39:db:9e:a5:40:
c5:19:06:22:13:7d:32:e6:56:25:88:7a:e9:75:93:9e:0b:b4:
62:5d:73:e9:83:81:56:fd:de:c5:c2:26:be:0d:70:f8:65:fd:
1f:1d:71:1d:36:bd:cb:24:a3:2b:ce:9c:bd:53:69:90:71:3c:
4e:95:39:27:34:f3:45:89:50:ae:6a:d1:1c:a5:5c:05:cf:83:
ed:c1:f3:53:44:78:c2:4a:af:78:bd:16:ad:6e:8f:3d:ce:61:
fe:5a:03:41:72:34:14:88:2d:0d:62:57:d6:22:8b:7b:43:e7:
87:d7:1b:35:73:b8:0c:81:96:8e:53:8b:46:e6:98:ad:e2:25:
6b:52:66:3a:88:d3:52:16:06:fa:e4:be:32:d7:7b:3d:f4:f1:
5f:3b:e7:7d:af:f8:1f:fa:9e:20:ef:44:19:21:5c:41:b4:f4:
57:0c:9d:f2:bb:17:9b:2a:a9:69:77:73:94:40:c0:8b:57:47:
64:8a:1e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:48:14 2024 by rpki-client on console-ams.rpki-client.org