Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer
File: XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer (raw, json)
Hash identifier: vTKD2A31A8T5bErWl23GW1hu0ixK8lh35yV+3yZ0SPc=
Subject key identifier: 5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DC1DD2C41A1A994A0FD302D151A385628
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 19 Feb 2024 14:55:13 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 21350
IP: 80.244.160.0/20
IP: 95.175.32.0/19
IP: 185.106.128.0/22
IP: 2a00:dc20::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c1:dd:2c:41:a1:a9:94:a0:fd:30:2d:15:1a:38:56:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 19 14:55:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:31:f8:b9:7b:88:fd:2b:14:45:32:04:6a:bb:
23:de:31:97:11:5a:3b:ce:64:2e:b9:60:e6:68:de:
bd:dc:d6:90:3b:5c:cc:89:e2:3d:91:7d:65:74:e9:
69:97:32:8d:a5:51:cd:86:47:1a:eb:c3:ce:d2:e4:
2f:3b:f7:29:14:d0:be:1b:7e:82:b7:7c:81:c8:04:
6f:b9:12:45:3e:a9:59:68:93:b2:00:87:64:fe:27:
2a:63:c4:8b:ce:6c:b9:1e:19:44:c6:c2:70:00:75:
67:2e:d0:06:33:db:2f:7e:f3:a0:2c:9b:b8:80:6d:
b9:8b:48:ae:a4:89:14:06:4c:91:ed:64:c0:62:4c:
14:f8:2a:25:1e:cc:9d:46:99:70:b4:b8:97:a2:83:
d9:f7:00:ba:fc:be:c9:62:c8:68:79:3e:0b:37:3b:
bd:2f:f1:13:f5:3e:3e:3a:6c:dd:dc:a6:cb:4b:e9:
3d:7b:27:ae:78:75:e3:87:a0:38:ee:91:06:83:81:
d3:fd:5f:57:92:f2:17:33:ab:18:8f:35:da:5c:5a:
c5:e5:e5:9a:76:21:fe:be:04:93:37:3c:01:88:e4:
d0:c7:79:60:3f:82:eb:3c:b7:e3:93:6e:43:d1:9d:
ae:18:4a:d1:b6:65:08:b0:67:13:90:df:b9:05:ec:
ab:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.244.160.0/20
95.175.32.0/19
185.106.128.0/22
IPv6:
2a00:dc20::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21350
Signature Algorithm: sha256WithRSAEncryption
4a:b9:c3:39:80:36:2a:b8:76:97:1a:6a:93:ad:68:5a:49:ba:
40:43:f7:2d:ea:c6:ab:68:bf:36:99:f0:e3:23:ec:a6:cc:e7:
6c:f9:ff:e6:1d:2f:2c:38:80:b7:55:67:24:c0:cc:11:f7:56:
a0:49:df:21:44:50:cb:24:78:58:70:78:ad:3e:65:46:87:78:
ea:81:cf:44:3b:15:0b:5e:4e:d2:e5:40:3a:68:d7:c9:5a:f3:
96:65:f2:52:4f:6f:a0:43:90:e9:93:f0:e1:57:75:52:85:03:
04:8a:88:c3:c7:22:a8:81:54:d5:06:a8:31:5c:51:98:2c:ca:
ff:85:64:5e:f4:67:08:3a:99:8c:34:58:e5:7e:ec:37:aa:1d:
5e:78:21:7a:de:9c:86:98:ac:c1:e4:ea:c6:32:e8:90:61:5d:
70:49:78:7c:75:82:25:b7:27:fa:5c:ed:de:e1:bb:d8:e9:0d:
4d:41:ec:7c:b5:18:46:f3:3b:d2:f7:aa:2a:ad:40:9b:06:e9:
fd:36:93:df:fe:cc:a0:fc:3c:f5:2d:c8:a0:10:07:47:d6:cb:
ff:5e:37:e9:b9:4f:fb:6a:e7:1c:51:4f:c7:e6:a0:0f:96:47:
d6:67:d2:31:ec:a2:ab:31:3a:d4:0b:e8:1d:06:6e:1d:d8:9c:
ff:c1:82:1f
-----BEGIN CERTIFICATE-----
MIIFrjCCBJagAwIBAgISAY3B3SxBoamUoP0wLRUaOFYoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMjE5MTQ1NTEzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZTk1ZmRmZDI4Y2RjMDNkODlkMjE0ZTRhZDNhNmM1ZmIzZWJhY2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjH4uXuI/SsURTIEarsj3jGXEVo7
zmQuuWDmaN693NaQO1zMieI9kX1ldOlplzKNpVHNhkca68PO0uQvO/cpFNC+G36C
t3yByARvuRJFPqlZaJOyAIdk/icqY8SLzmy5HhlExsJwAHVnLtAGM9svfvOgLJu4
gG25i0iupIkUBkyR7WTAYkwU+ColHsydRplwtLiXooPZ9wC6/L7JYshoeT4LNzu9
L/ET9T4+Omzd3KbLS+k9eyeueHXjh6A47pEGg4HT/V9XkvIXM6sYjzXaXFrF5eWa
diH+vgSTNzwBiOTQx3lgP4LrPLfjk25D0Z2uGErRtmUIsGcTkN+5Beyr+wIDAQAB
o4ICujCCArYwHQYDVR0OBBYEFF6V/f0ozcA9idIU5K06bF+z66y/MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU2LzdiZmYz
ZS0wM2FhLTRlMGEtYjJmYy00YTdkZGYyZDg2YmQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTYvN2JmZjNl
LTAzYWEtNGUwYS1iMmZjLTRhN2RkZjJkODZiZC8xL1hwWDlfU2pOd0QySjBoVGty
VHBzWDdQcnJMOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF
BwEHAQH/BCswKTAYBAIAATASAwQEUPSgAwQFX68gAwQCuWqAMA0EAgACMAcDBQAq
ANwgMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAlNmMA0GCSqGSIb3DQEBCwUAA4IB
AQBKucM5gDYquHaXGmqTrWhaSbpAQ/ct6saraL82mfDjI+ymzOds+f/mHS8sOIC3
VWckwMwR91agSd8hRFDLJHhYcHitPmVGh3jqgc9EOxULXk7S5UA6aNfJWvOWZfJS
T2+gQ5Dpk/DhV3VShQMEiojDxyKogVTVBqgxXFGYLMr/hWRe9GcIOpmMNFjlfuw3
qh1eeCF63pyGmKzB5OrGMuiQYV1wSXh8dYIltyf6XO3e4bvY6Q1NQex8tRhG8zvS
96oqrUCbBun9NpPf/syg/Dz1LcigEAdH1sv/XjfpuU/7auccUU/H5qAPlkfWZ9Ix
7KKrMTrUC+gdBm4d2Jz/wYIf
-----END CERTIFICATE-----
Generated at Fri May 3 07:40:19 2024 by rpki-client on console-fra.rpki-client.org