Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
File: XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer (raw, json)
Hash identifier: 758j+nZFDdYBtdut6Tm5vdc0LsFevV3+1tuKbHeiWLs=
Subject key identifier: 5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DAB8A42A54218F72E043B77A37514D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 57860
IP: 185.129.60.0/22
IP: 2a06:d380::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:b8:a4:2a:54:21:8f:72:e0:43:b7:7a:37:51:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:98:29:e3:e5:50:6d:c0:cc:5e:c8:97:c2:be:
3b:7a:02:fc:67:15:22:90:00:6f:b1:d3:d7:7c:17:
5a:b1:c9:6f:67:e1:e0:77:79:4a:5c:27:01:99:17:
1f:20:a4:de:b7:27:0d:7c:99:1c:90:3b:ab:7d:91:
10:c5:8f:03:37:a6:47:16:52:d4:12:88:61:78:e0:
6f:89:37:e3:66:72:4a:25:4d:c8:76:1c:01:06:b3:
2e:66:1a:98:aa:3b:f4:15:fb:09:1e:62:68:65:b9:
06:c7:e9:0a:f0:0a:f8:ba:86:72:20:e1:4c:18:86:
5c:c7:c3:81:b6:40:be:fb:2e:be:b9:ea:27:70:b7:
31:88:1e:9c:dc:db:b1:00:53:40:d1:09:85:4d:4e:
9b:a1:e3:47:31:42:83:3c:c3:37:84:91:b8:bb:42:
13:fa:50:41:44:91:ef:d7:bf:d9:8f:35:1f:3f:20:
82:86:f3:7e:f1:49:08:ca:ff:03:e0:40:f8:6f:77:
fb:87:1b:6d:21:ce:06:9d:c3:0e:ca:3b:da:9a:f6:
d0:ff:4a:a7:0f:81:e9:64:b2:b1:c6:39:0d:19:aa:
58:3c:1d:e9:d3:1c:ce:36:87:06:3a:21:14:2f:e4:
73:6d:20:98:0f:11:07:b1:e6:6a:e2:95:70:0f:70:
48:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.60.0/22
IPv6:
2a06:d380::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57860
Signature Algorithm: sha256WithRSAEncryption
5c:7a:14:10:ef:99:91:e9:5c:6d:25:10:ad:46:97:48:44:29:
57:fd:f0:cb:5d:5c:56:fd:2a:c0:5c:c1:d0:57:47:7c:0c:64:
01:b1:4e:30:96:aa:36:cd:01:df:d1:90:ac:9d:a6:99:b4:af:
95:c5:c0:09:30:f5:34:31:9d:df:84:d5:e1:d3:ac:c2:31:76:
46:e4:4b:79:96:9b:17:da:ee:fa:7f:34:c4:4b:5d:f4:1b:b1:
07:ea:6d:2c:2f:26:55:5a:0c:e4:34:12:1a:bb:ad:55:7f:9c:
15:54:dd:3d:fa:12:9a:b4:d7:a4:8d:56:09:96:6a:8b:0d:00:
7f:ec:36:b9:92:b6:a5:34:a9:b6:2b:27:46:3c:81:f6:74:c7:
78:26:70:28:91:c1:ab:a4:42:fa:5f:6f:4a:8f:49:4b:58:e0:
8c:1d:71:29:ea:ed:3b:0e:99:1f:90:25:49:89:ec:4d:e2:85:
a6:23:66:49:c7:7d:80:fc:14:9e:8b:19:a7:2f:19:d1:d6:22:
f8:25:e2:fa:a4:0e:ee:bd:4f:eb:9e:ee:23:2e:39:17:e1:da:
f1:cd:34:39:6f:f4:1a:82:93:45:c4:13:6b:41:db:c3:27:db:
ca:32:31:e7:97:3f:db:52:8f:fe:25:51:3f:37:86:f3:19:6e:
c1:f8:34:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:04:37 2024 by rpki-client on console-fra.rpki-client.org