Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XatFagUdSpN4i-9PrA0HvcDJ8M8.cer
File: XatFagUdSpN4i-9PrA0HvcDJ8M8.cer (raw, json)
Hash identifier: lfYCUqcmdH63zDSqIkCxmX+Xpex+8jLDtACnKvsd6eE=
Subject key identifier: 5D:AB:45:6A:05:1D:4A:93:78:8B:EF:4F:AC:0D:07:BD:C0:C9:F0:CF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC500CF44C5CDA8835A39D62F98C2962E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:13 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 60502
IP: 185.221.224.0/22
IP: 2a0c:5000::/30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:cf:44:c5:cd:a8:83:5a:39:d6:2f:98:c2:96:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5dab456a051d4a93788bef4fac0d07bdc0c9f0cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:be:1b:1b:97:8c:ab:0f:4b:d1:79:2b:5d:ba:
23:4e:78:b3:37:4f:c9:67:d4:76:5d:e0:cf:08:5e:
81:1b:6d:bf:ca:1c:1b:a5:cc:42:a0:1c:dc:5c:96:
df:2f:64:ec:1c:4c:c9:f4:ad:c5:c2:92:6d:7d:a7:
5a:67:8c:8f:62:bb:57:c7:60:ba:26:25:c1:3f:18:
ca:51:6f:9b:ce:77:83:84:a1:70:80:b3:57:66:ad:
64:aa:72:69:8e:c4:0d:99:b7:f3:1a:a7:a1:d2:25:
ce:d1:3a:ef:04:7f:a1:01:af:f4:af:05:18:cc:21:
d4:39:1d:c3:4e:68:6e:e3:2a:a3:5a:d4:6c:bb:86:
d5:f6:b7:c2:fb:c6:10:30:a4:28:33:f8:f6:9e:b8:
39:8e:88:74:fb:54:82:53:85:df:b5:ae:31:fa:a2:
a3:29:be:81:67:d8:10:95:67:88:29:5b:b0:9a:18:
e4:da:a6:e2:1d:bf:d6:6b:04:fe:83:c4:4e:39:35:
2b:bb:4a:9c:96:56:9e:02:95:ff:f5:5f:d8:a8:94:
db:dd:b1:44:41:8d:27:6c:e6:ed:3e:31:63:c3:15:
eb:82:3b:b1:af:22:4c:de:38:32:4a:4a:ce:d8:47:
c5:46:98:31:f2:12:1b:b4:34:2f:fa:a1:38:64:5a:
e8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:AB:45:6A:05:1D:4A:93:78:8B:EF:4F:AC:0D:07:BD:C0:C9:F0:CF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.224.0/22
IPv6:
2a0c:5000::/30
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60502
Signature Algorithm: sha256WithRSAEncryption
94:08:0e:fe:e4:35:18:96:07:34:a2:82:24:1b:a0:a9:7d:38:
ef:a0:2c:43:0a:ee:24:76:60:02:e6:ed:30:dd:e3:f6:ce:e2:
4f:c1:37:02:bb:ff:85:62:1a:be:c9:7d:7b:e4:f9:dd:32:ce:
86:81:e4:b9:4d:23:cd:86:91:de:0d:db:63:ec:f2:32:6c:59:
ab:58:6f:30:d7:c3:72:5a:7f:c3:8c:13:0c:57:7f:d9:97:01:
b9:b5:71:fa:d0:e5:e5:e6:9a:0e:07:77:ce:8c:a4:1a:a6:5f:
0a:5c:31:4a:a7:b6:a2:43:f3:e2:05:31:f4:b8:fd:22:0a:a0:
e3:0b:d2:48:b1:7f:fc:e8:bc:33:e0:a2:7c:89:a1:0f:80:2b:
2c:6d:8a:d3:21:72:71:83:33:0a:82:eb:79:46:ec:66:ea:88:
06:7f:74:a9:27:c7:f5:73:09:a3:79:7b:5e:f8:7c:3a:1b:28:
4a:e1:97:5d:3d:ba:64:7a:76:b5:be:e1:e3:d7:f6:69:9e:f3:
92:66:ff:a5:7a:ec:95:b3:9c:2d:e1:4f:30:1b:e5:d8:fd:67:
1a:b1:35:f5:e9:18:06:9c:46:f0:56:d7:49:9d:67:58:d1:a5:
18:41:b0:e5:ba:6f:68:6c:73:ab:88:21:8d:d0:9d:ae:40:7d:
62:a6:40:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:48:20 2024 by rpki-client on console-ams.rpki-client.org