Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.cer
File: Xmxk_CDOHZcvXjR0MZBIoqxlbfE.cer (raw, json)
Hash identifier: DjgJlT1cVrVYDpt1gMM3JtbxxmseHd1ySQ3qMq0SFFI=
Subject key identifier: 5E:6C:64:FC:20:CE:1D:97:2F:5E:34:74:31:90:48:A2:AC:65:6D:F1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94E4D3C92F439FB0A15A494F0B922D3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:33:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 204566
IP: 185.243.208.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:4d:3c:92:f4:39:fb:0a:15:a4:94:f0:b9:22:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:33:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e6c64fc20ce1d972f5e3474319048a2ac656df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:09:f5:e7:8b:4a:69:92:56:d0:04:0a:af:09:
ed:6d:69:bd:08:88:4e:f0:28:85:f6:6a:56:03:54:
5f:d0:c0:31:c9:45:68:42:a6:32:74:eb:c3:2d:13:
14:69:a5:9c:85:9e:87:ce:b5:1a:c4:22:bc:68:7d:
34:c3:83:79:30:a2:43:03:fd:88:1a:0e:f3:b0:2c:
ee:b7:50:e9:47:c9:9f:c0:22:b2:83:d5:a6:97:52:
a6:17:ae:15:63:f4:01:da:fb:bc:aa:e7:bf:78:50:
9c:04:34:15:53:87:81:b6:75:9f:45:d5:51:81:bc:
95:d8:c0:3c:de:ea:c2:05:c2:b1:b1:7d:3a:59:d4:
95:c9:fb:64:d9:f6:50:29:c2:d5:a2:67:13:43:27:
cc:9e:9b:94:38:a1:19:69:08:fb:98:e2:1a:1a:c4:
ce:64:e7:91:b9:d0:51:6b:29:26:f6:7b:48:d1:9e:
94:ce:f9:c4:40:52:8a:72:c9:be:fc:9d:e8:2e:d5:
ef:b5:a2:99:f9:cf:88:05:71:35:52:f0:99:8d:0f:
e9:cb:2c:a7:4b:5c:d7:e0:36:62:de:d6:87:9b:2f:
fd:ff:7b:2a:14:58:2d:ff:c4:1e:4b:d7:e6:da:9c:
1f:8b:ad:96:a4:50:9d:c9:ff:4c:a2:05:cb:88:94:
44:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:6C:64:FC:20:CE:1D:97:2F:5E:34:74:31:90:48:A2:AC:65:6D:F1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.208.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204566
Signature Algorithm: sha256WithRSAEncryption
9b:0f:73:e4:3b:65:ff:7f:53:4c:7f:1c:e7:76:b2:cc:7a:fd:
39:26:80:25:1b:e3:30:c4:66:94:0e:21:da:47:79:d5:87:e6:
d2:01:80:ed:c0:4a:aa:73:fb:89:31:1c:95:df:9c:44:fb:26:
ba:43:d2:52:8a:d7:ec:a7:3d:44:01:c2:ea:32:2b:37:fd:f0:
0f:d0:b6:c7:ff:c6:56:22:bf:9d:a9:13:9f:9d:75:b9:29:48:
e3:7e:60:b7:98:7d:96:3d:4b:ac:ad:50:21:e2:ef:6a:d4:28:
77:75:2f:c4:3a:26:75:16:95:0f:f9:74:32:7f:d9:45:e5:49:
1d:c1:1a:c9:e4:2e:55:a7:6c:33:ca:1b:b8:f1:7d:ed:44:9f:
ac:bd:a3:79:71:c5:ed:36:94:97:a7:1d:f2:07:9f:20:a6:41:
4f:bf:31:e4:9e:ba:f4:32:29:f9:df:de:63:39:73:c4:71:4d:
8b:91:e1:f9:39:39:59:2c:86:52:6d:a4:a6:28:ea:a6:c0:ca:
e4:bf:6a:a9:6a:c7:fe:9f:47:13:c0:c8:e4:c9:88:36:6a:5e:
86:ae:b0:24:45:3a:39:0a:99:89:9d:95:08:ce:98:82:1f:d8:
bf:6a:66:2c:cb:ae:6b:d2:f6:37:d2:2d:6d:c1:34:88:c3:9c:
cb:d3:11:f2
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYzJTk08kvQ5+woVpJTwuSLTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDgzMzIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZTZjNjRmYzIwY2UxZDk3MmY1ZTM0NzQzMTkwNDhhMmFjNjU2ZGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgn154tKaZJW0AQKrwntbWm9CIhO
8CiF9mpWA1Rf0MAxyUVoQqYydOvDLRMUaaWchZ6HzrUaxCK8aH00w4N5MKJDA/2I
Gg7zsCzut1DpR8mfwCKyg9Wml1KmF64VY/QB2vu8que/eFCcBDQVU4eBtnWfRdVR
gbyV2MA83urCBcKxsX06WdSVyftk2fZQKcLVomcTQyfMnpuUOKEZaQj7mOIaGsTO
ZOeRudBRaykm9ntI0Z6UzvnEQFKKcsm+/J3oLtXvtaKZ+c+IBXE1UvCZjQ/pyyyn
S1zX4DZi3taHmy/9/3sqFFgt/8QeS9fm2pwfi62WpFCdyf9MogXLiJRESwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFF5sZPwgzh2XL140dDGQSKKsZW3xMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM2L2YwOTc4
OC05ODY5LTRmMTItOWYxZS1hYzRkZTE2OWFkY2UvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzYvZjA5Nzg4
LTk4NjktNGYxMi05ZjFlLWFjNGRlMTY5YWRjZS8xL1hteGtfQ0RPSFpjdlhqUjBN
WkJJb3F4bGJmRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCufPQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwMfFjANBgkqhkiG9w0BAQsFAAOCAQEAmw9z5Dtl/39TTH8c53ayzHr9OSaAJRvj
MMRmlA4h2kd51Yfm0gGA7cBKqnP7iTEcld+cRPsmukPSUorX7Kc9RAHC6jIrN/3w
D9C2x//GViK/nakTn511uSlI435gt5h9lj1LrK1QIeLvatQod3UvxDomdRaVD/l0
Mn/ZReVJHcEayeQuVadsM8obuPF97USfrL2jeXHF7TaUl6cd8gefIKZBT78x5J66
9DIp+d/eYzlzxHFNi5Hh+Tk5WSyGUm2kpijqpsDK5L9qqWrH/p9HE8DI5MmINmpe
hq6wJEU6OQqZiZ2VCM6Ygh/Yv2pmLMuua9L2N9ItbcE0iMOcy9MR8g==
-----END CERTIFICATE-----
Generated at Fri May 3 03:04:47 2024 by rpki-client on console-fra.rpki-client.org