Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer
File: Xjy32YLH-e28k9TLQrlPoCnDgt8.cer (raw, json)
Hash identifier: lGlC6ONGpfLJV53O+x3RrmNNkqTtgSBS2uJvwNU6nWQ=
Subject key identifier: 5E:3C:B7:D9:82:C7:F9:ED:BC:93:D4:CB:42:B9:4F:A0:29:C3:82:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC801090F1289F2CFA9708052D46B9313
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:20 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.167.217.0/24
IP: 2a0d:cd00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:09:0f:12:89:f2:cf:a9:70:80:52:d4:6b:93:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e3cb7d982c7f9edbc93d4cb42b94fa029c382df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:17:89:66:5e:0e:e8:24:c5:82:60:e1:62:11:
82:88:d1:37:0f:16:a1:dc:5d:73:a8:81:fc:f0:03:
cb:e2:9e:d8:34:7e:ad:da:11:73:36:a0:cb:75:3b:
2e:64:94:44:ee:2a:45:fd:b3:30:47:46:26:ca:85:
1f:4d:16:41:04:c9:9c:78:28:91:49:67:6a:8a:11:
79:96:e5:70:05:61:f5:df:20:2a:f9:8a:75:7f:ef:
5c:51:46:9a:9f:68:b2:43:af:a6:07:ab:48:d4:82:
2e:67:a1:28:3b:4f:f4:be:47:f6:31:fb:4e:73:35:
0e:ae:52:8a:0a:e4:73:4e:27:68:bb:8f:bd:28:72:
4f:08:4c:2c:6e:62:ba:94:13:84:1e:d0:05:d2:a3:
01:e7:50:85:56:70:d8:ab:4e:29:4f:31:f8:dd:79:
e8:f1:0b:1a:4d:4e:bc:86:77:02:68:51:61:a2:ff:
82:a5:9e:8f:7e:83:9e:22:b6:5d:d7:a9:99:cd:98:
79:dc:67:8a:6e:5c:59:5d:ed:b9:90:b4:c8:18:49:
ab:5a:e1:8b:57:2f:bb:28:4c:a4:c6:61:87:cf:6c:
3a:c2:4e:28:75:6b:9d:6d:ce:df:eb:1a:ad:cc:e2:
88:99:a6:eb:b6:27:67:08:01:79:c6:66:73:ee:3b:
45:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:3C:B7:D9:82:C7:F9:ED:BC:93:D4:CB:42:B9:4F:A0:29:C3:82:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.217.0/24
IPv6:
2a0d:cd00::/29
Signature Algorithm: sha256WithRSAEncryption
1a:45:54:60:00:50:78:fb:17:5e:0b:de:e5:2e:20:42:c2:26:
16:cf:32:b1:73:82:50:75:8c:07:fc:3e:de:fc:68:13:77:07:
8e:16:7d:3f:11:f8:6b:ca:36:63:5c:48:e7:ad:6b:07:9f:45:
8b:64:09:9e:3e:c6:0b:76:23:50:fd:f5:e2:99:4b:3d:d2:09:
e5:95:f8:e3:33:99:d6:a5:e8:a2:f1:67:c0:f5:d9:64:57:32:
93:dc:5e:64:96:6d:0f:73:46:d9:7d:ff:65:69:35:d2:c0:b2:
70:c4:5d:1e:21:da:cf:c6:29:06:da:d6:dd:8f:db:1e:e1:d4:
01:4f:ee:97:5a:b9:f5:2f:de:45:98:0c:c0:e8:26:1f:2a:38:
5f:5a:0c:a3:e6:41:5d:b0:c7:b7:05:30:f2:68:33:44:6d:9d:
6e:ce:dc:61:ee:a8:26:9d:75:13:b2:52:ab:da:fa:15:36:a7:
5f:48:91:ef:c2:fe:e6:af:de:c8:4e:41:be:20:5b:2a:d8:8a:
30:fb:3d:c1:fd:26:62:b3:89:9b:53:30:ef:ce:13:31:02:bc:
3d:96:63:4e:93:84:52:98:1f:c2:a5:80:aa:a9:81:62:f3:56:
1d:7c:27:78:9d:7a:5f:ec:a3:ff:f8:dc:9d:a1:49:6b:dc:2e:
b1:77:0c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:20:41 2024 by rpki-client on console-fra.rpki-client.org