Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Xjp4NTd7noSf58M_n8pFctkCZz8.cer
File: Xjp4NTd7noSf58M_n8pFctkCZz8.cer (raw, json)
Hash identifier: UaY94dqMyxApAzpJMVlYVheaAlO0mVbp0UCvTZcmv6E=
Subject key identifier: 5E:3A:78:35:37:7B:9E:84:9F:E7:C3:3F:9F:CA:45:72:D9:02:67:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8011840ED458EAC99B182297914AADD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 201339
IP: 194.127.204.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:18:40:ed:45:8e:ac:99:b1:82:29:79:14:aa:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e3a7835377b9e849fe7c33f9fca4572d902673f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1c:11:62:3e:3f:20:49:f7:89:bd:bc:94:15:
60:6e:33:53:4d:c3:16:7d:9f:41:a9:4c:cc:c1:b6:
0c:17:73:ab:ea:c4:ad:4d:75:c8:60:46:75:38:ad:
6d:32:8d:71:e4:46:63:0e:cc:55:e9:6b:95:39:2e:
80:db:1c:68:40:46:3a:ae:40:45:1f:a6:9c:96:93:
71:62:bb:c4:d1:90:3e:ac:b6:fc:7d:1a:02:3b:49:
9c:02:b5:cb:81:7c:b1:90:ed:e3:2b:47:21:80:a9:
8f:c3:d3:8e:eb:80:dc:73:fa:d2:49:3d:5f:b6:19:
29:98:97:48:eb:50:ff:da:f1:f6:a3:98:d1:81:6b:
96:5c:b8:dc:98:d9:23:ec:56:c4:2b:9b:1a:71:01:
fd:9b:08:d6:0d:59:80:99:c3:3e:07:45:c9:3f:57:
d2:bc:c3:b0:6c:73:93:c1:86:40:e8:76:3b:68:99:
26:a4:53:7f:71:a5:c4:10:ed:6b:70:fa:6b:f2:50:
cc:ad:e1:de:bf:6e:ec:6c:d5:fb:f7:81:85:c0:5e:
cf:99:a6:ba:01:01:5b:17:b2:b6:aa:7b:c2:5d:0a:
a0:a8:9c:94:45:fd:b0:d4:b5:74:2a:86:b1:65:0b:
6e:bf:3c:24:96:41:ae:0a:a9:45:09:17:45:76:c0:
c1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:3A:78:35:37:7B:9E:84:9F:E7:C3:3F:9F:CA:45:72:D9:02:67:3F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.204.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201339
Signature Algorithm: sha256WithRSAEncryption
80:13:61:f0:1d:1e:2c:25:fd:0b:c7:ce:8b:62:57:56:60:a1:
2a:b8:66:53:e6:39:75:1a:07:94:1b:14:52:6f:25:cd:27:e4:
98:5e:f9:6b:da:2b:be:c3:fe:4f:1d:f3:db:d6:87:25:b6:63:
43:97:3b:61:b1:0d:d1:70:0e:51:a9:1f:2f:1c:da:61:84:1b:
27:7d:50:25:f6:6b:ed:50:7f:61:c6:25:01:0d:f4:d4:b8:9b:
9d:b0:5a:f7:ed:d5:9b:1b:3c:f8:64:92:52:49:fb:6a:eb:e1:
fe:fe:fe:4f:19:3d:ad:a9:59:c3:df:5d:0c:79:d4:ef:2b:2d:
0e:81:d4:9e:c2:11:00:e2:e5:42:c0:9e:e5:ca:97:4a:ce:11:
fc:16:53:26:b9:60:4d:70:9e:ef:51:47:d4:4b:9a:75:b6:68:
a6:8d:73:69:58:69:90:90:78:23:67:6e:04:16:f8:62:ee:16:
e1:cb:b2:26:f3:ec:6c:a8:d3:13:ac:f4:b6:f9:38:81:b2:3b:
79:ef:70:5e:94:c7:d7:2b:9b:dc:4d:f4:ed:42:80:b7:93:56:
75:d1:4b:f7:82:41:b4:25:27:16:a3:4e:9e:5b:15:72:7b:6a:
9b:8d:17:28:23:5a:04:de:7e:db:77:e8:ff:bf:1a:8a:66:51:
ee:fa:01:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:10:41 2024 by rpki-client on console-ams.rpki-client.org