Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer
File: XstMrbut1QD0nKaX1Waidh4Bdgg.cer (raw, json)
Hash identifier: 1oGlespNpFetWl+A1y4wtLlJgrxto+oMHZm5YEbi4rk=
Subject key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01931C5DA8D084A486A02F20EE95270F1184
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 11 Nov 2024 17:55:20 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 80.75.221.0/24
IP: 141.193.228.0/24
IP: 170.62.190.0/24
IP: 213.254.170.0/24
IP: 2a03:e080::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1c:5d:a8:d0:84:a4:86:a0:2f:20:ee:95:27:0f:11:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 11 17:55:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ecb4cadbbadd500f49ca697d566a2761e017608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8e:73:4a:c0:4d:cc:95:cb:b3:28:51:49:5d:
64:17:27:6d:18:08:ed:b9:f9:68:75:54:06:2b:09:
17:bc:72:73:0a:a1:b8:74:af:ed:d2:66:91:9f:ca:
48:71:b0:53:a8:c4:eb:e5:79:e4:15:c5:b9:f1:4a:
8b:7d:a8:38:8e:55:66:b4:b3:e5:dd:8c:b6:fe:6e:
79:01:4a:b8:f9:f3:85:36:74:94:c8:72:c0:eb:11:
fa:0d:cd:5b:48:70:1b:fb:cf:dc:f8:2a:93:52:43:
dd:76:53:38:38:68:6d:3c:5f:59:4c:64:85:d6:be:
48:47:55:a6:7a:2c:37:e7:38:22:ae:56:e5:ba:90:
07:a6:76:69:6c:f1:1a:83:1f:88:ea:c6:3b:a3:d6:
55:80:ac:2b:71:e8:8c:fc:a6:56:3b:f0:12:69:57:
b5:27:64:c4:28:7b:28:e8:12:64:40:c0:14:41:7d:
00:99:ca:a1:86:23:71:ac:b1:5e:12:b6:60:04:09:
ed:10:2b:a6:8c:2b:52:91:c2:9f:a6:09:33:e3:0f:
bd:cb:e4:a8:cd:aa:65:d3:c8:f6:c0:7d:25:76:15:
b0:5c:1a:8c:89:a4:1b:54:c4:cd:e1:55:eb:4f:3b:
df:36:ff:25:9d:77:78:e7:dd:1b:e2:b6:fb:c4:b1:
5c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.221.0/24
141.193.228.0/24
170.62.190.0/24
213.254.170.0/24
IPv6:
2a03:e080::/29
Signature Algorithm: sha256WithRSAEncryption
8e:aa:c8:4d:50:7d:7d:70:9e:7e:ad:ff:3f:c0:4c:9b:ee:a9:
ad:f7:c6:a8:ae:d6:fe:86:c1:dd:33:15:14:18:e8:ae:4b:68:
cd:b7:5f:ff:ab:57:68:82:48:8b:7d:c4:37:1a:d4:fb:fa:b7:
4e:c9:a6:18:97:2e:2c:60:0c:fe:f7:30:39:78:10:8a:1d:95:
ea:f0:73:f1:0b:36:f9:3c:75:05:9a:c9:d1:50:46:5e:bc:1b:
ea:a5:16:8f:de:b5:1f:5e:79:4a:6c:44:7b:96:f6:4f:67:de:
60:55:25:9f:4c:26:55:73:95:1c:7d:36:67:af:cd:4c:6f:a7:
f4:b5:69:54:9a:87:93:39:5d:d5:cb:f3:bd:bc:27:6e:28:1c:
9d:bf:96:d4:1d:8e:95:bb:70:37:0f:67:ff:a4:27:63:db:04:
65:60:6c:23:78:51:46:c5:4e:ca:d8:68:1d:9b:6b:4a:4e:8a:
f6:9e:9f:86:e4:91:9d:e8:b1:9e:cc:7f:ea:b6:e6:9a:5e:a9:
f5:84:f4:51:2e:bc:a1:56:dc:77:14:a8:f4:33:c1:bf:d4:3f:
08:1d:b7:c1:23:9d:1c:87:59:ac:ca:5e:79:31:98:9a:c2:5b:
24:43:1b:18:29:de:0e:32:da:fc:a8:07:90:74:9c:bd:03:97:
11:4a:13:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:02:23 2024 by rpki-client on console-ams.rpki-client.org