Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XfJyIcGPyv50iSvA6Xv17nw0T6c.cer
File: XfJyIcGPyv50iSvA6Xv17nw0T6c.cer (raw, json)
Hash identifier: s0DAxMAL+2h2zOdCZUcJAasjiz5BfXM1u5EcEGiap84=
Subject key identifier: 5D:F2:72:21:C1:8F:CA:FE:74:89:2B:C0:E9:7B:F5:EE:7C:34:4F:A7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B6FC0136536264614AE757D9AB1E49
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:58 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211394
IP: 193.56.9.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:fc:01:36:53:62:64:61:4a:e7:57:d9:ab:1e:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5df27221c18fcafe74892bc0e97bf5ee7c344fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5a:fe:fa:f5:a9:2d:a2:55:fe:ea:1f:2c:e9:
19:9f:92:ea:60:8b:dd:fe:06:0b:cc:b1:c1:b3:1a:
3f:59:86:c8:86:e4:83:19:68:74:1c:b6:a3:5e:01:
dc:75:2c:92:6d:1d:45:63:56:2b:a4:97:ae:60:91:
15:87:e9:5b:04:b8:b0:fb:0e:fe:07:26:a7:7e:d2:
d1:08:4a:3a:99:1e:be:02:4b:2b:6e:63:24:08:fe:
2c:2a:af:2c:ce:2c:24:8c:40:07:c1:86:47:0e:0e:
38:0b:17:3a:31:a9:f8:61:b8:aa:7b:b8:45:8c:50:
77:25:1d:d8:e7:b7:86:3e:5a:58:cc:39:4d:05:ef:
21:4f:aa:cf:ae:9c:e2:2c:59:b4:f2:b9:4d:6a:28:
23:03:34:31:5d:59:54:c5:41:6d:4f:4a:b7:3a:69:
f5:70:d6:45:9a:bc:34:b3:07:d1:8a:d6:b9:b7:5e:
8f:9a:8c:5e:1e:6e:1b:00:a2:cb:d1:fb:17:c2:36:
78:0a:dc:99:75:2f:59:21:c5:ce:f5:d0:51:ca:84:
45:83:9e:d9:01:c2:4c:b6:df:67:03:fc:8e:83:a5:
d3:17:12:c5:dc:2e:27:74:7a:f7:04:ba:0c:af:ea:
95:ae:80:90:2b:a8:eb:f4:49:ed:c3:d3:a3:65:09:
79:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F2:72:21:C1:8F:CA:FE:74:89:2B:C0:E9:7B:F5:EE:7C:34:4F:A7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.9.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211394
Signature Algorithm: sha256WithRSAEncryption
8e:e8:41:6d:74:9a:a8:b7:71:93:1f:ee:fa:59:99:e5:c9:7c:
83:46:f5:66:a1:42:e1:0e:c5:23:cf:b5:ad:2d:6a:de:2d:da:
ce:1d:3e:f1:42:42:ef:c2:ab:43:21:08:c9:07:ae:e3:37:2d:
9d:e5:92:fb:1c:af:47:d7:ba:91:1d:e3:17:9a:cc:f4:07:94:
e2:a6:f8:f3:c7:4b:c2:9f:85:fc:75:50:ba:b2:bf:c4:78:21:
c4:93:71:41:83:04:05:5f:ce:50:97:64:a9:76:62:b4:97:05:
dd:9c:86:14:d8:8f:ee:6e:d2:e9:e6:58:59:45:86:4e:f0:64:
f8:33:36:a8:ea:eb:ca:b9:1a:a5:1a:b2:59:ed:bf:a3:65:c6:
af:55:3c:4d:32:58:e9:2d:45:71:f9:ca:84:25:e2:c4:b3:7f:
54:de:bb:79:4e:89:a5:ac:cd:55:46:5f:56:64:48:6c:d0:4b:
c6:71:15:89:4d:e7:03:24:1e:a0:58:c8:27:a4:2d:17:80:57:
e2:b4:78:56:f5:ec:d8:ec:45:07:57:5e:6c:75:ee:d0:b1:0d:
e9:3f:5f:84:f6:53:ba:39:ae:dd:19:f5:42:96:15:7b:74:a5:
7e:1f:c5:56:5b:1b:36:21:86:58:73:01:16:2c:82:bf:ab:92:
a0:8c:8b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:48:22 2024 by rpki-client on console-ams.rpki-client.org