Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
File: XTJb79i36F40cQQgbYwKuKbg-04.cer (raw, json)
Hash identifier: wsyvVZyoPpAV6O6o7CzuXKD2HgSfhmbIN0xiHWZJIds=
Subject key identifier: 5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BCD2949B45411A6219AB76DB0F5BE6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:34:04 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.199.198.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:d2:94:9b:45:41:1a:62:19:ab:76:db:0f:5b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:34:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d3:4a:f5:d3:18:5f:03:17:89:23:1f:0a:bd:
08:eb:0f:25:97:88:e4:aa:e5:78:2c:53:f0:68:55:
98:2a:ca:77:9c:68:61:77:47:59:e1:f7:21:75:ab:
29:5d:f1:2b:9c:62:9e:08:df:1e:69:e1:5b:7c:ae:
43:c3:fb:bd:ac:21:d0:40:18:76:f8:da:06:8d:e4:
5f:62:07:f3:02:c1:09:b7:09:ec:d9:c9:d6:87:47:
36:f4:72:42:ea:24:2d:82:d7:ce:57:e3:0b:c5:d2:
d7:c2:04:89:2b:66:31:4d:df:1d:9f:8e:df:24:08:
f4:3e:83:77:8d:e6:f1:23:04:61:c0:49:3f:fb:96:
c7:2f:99:b6:be:af:4d:e4:30:37:1c:ee:ec:67:06:
8e:bb:91:1d:fb:17:be:18:bb:84:87:66:89:e0:fb:
7f:fb:46:66:f3:35:c7:66:17:74:b6:08:28:56:f1:
3c:6c:fe:e0:26:6e:fd:03:25:0f:ab:99:8a:5a:76:
cb:ee:37:29:96:f2:7c:77:75:36:6b:f7:6d:c0:19:
b9:34:13:0c:a9:7e:46:72:cd:13:c9:e5:81:07:b4:
9b:77:b3:d5:50:c2:6e:8b:2e:89:f1:04:e7:7b:0d:
24:37:bc:19:e5:ca:8d:5f:2e:47:3e:ff:59:b3:42:
af:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.198.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:f6:83:6d:1a:de:3c:af:8d:69:1e:9b:7f:66:7c:00:4e:d7:
08:7e:30:5f:9e:66:c9:06:59:c2:19:85:9a:95:d1:7b:e6:bc:
53:1d:4a:52:79:42:71:e1:15:4a:e4:5c:80:74:93:28:ec:fd:
71:2c:2f:61:02:b9:2c:59:b4:dd:ed:e2:38:00:63:40:47:ec:
29:64:2d:c5:b1:7d:13:57:11:30:14:aa:9f:cb:70:e2:f2:3e:
9c:14:7e:89:cf:b1:fb:3f:36:5a:de:1a:df:a1:20:c5:a4:4f:
57:57:1f:6e:76:b4:32:ca:a8:aa:f8:0e:6c:ab:a1:7e:6e:35:
63:99:3d:c5:f5:ed:07:f3:51:96:e4:05:e3:68:4f:4e:15:48:
59:a6:f7:cb:6c:20:f0:63:ab:d3:50:f7:24:98:b6:1d:f8:d0:
ab:ce:2b:2f:8f:ed:81:73:2f:ec:a7:36:6e:c6:02:6f:7f:d6:
ad:82:91:d8:e4:cb:a3:db:74:52:3a:55:2b:e5:0c:19:00:13:
84:b7:4a:0d:50:45:dd:79:f9:11:d2:3b:e1:91:38:6b:2e:c5:
0c:dd:21:d2:fb:6c:c4:be:aa:3c:a4:5d:54:a8:28:07:4a:53:
91:19:6c:33:9b:6e:62:42:ea:e1:6d:bf:1a:a2:f8:85:c5:c8:
44:54:16:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:04:27 2024 by rpki-client on console-fra.rpki-client.org