Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer
File: Xw3wyOXRsjU4vrXszDqxKGXffqo.cer (raw, json)
Hash identifier: /OoHKPaWrpIqRUIJo/6eYP4O/qwBzulZFHG/jOW4i+4=
Subject key identifier: 5F:0D:F0:C8:E5:D1:B2:35:38:BE:B5:EC:CC:3A:B1:28:65:DF:7E:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56EC5B7A12EE6D30BC3C558F7E39473
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:20 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 199641
IP: 45.143.124.0/22
IP: 2a0e:e3c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:c5:b7:a1:2e:e6:d3:0b:c3:c5:58:f7:e3:94:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f0df0c8e5d1b23538beb5eccc3ab12865df7eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:82:13:36:00:29:a4:b3:08:f3:40:9c:a1:93:
37:b5:50:65:b2:81:1e:ca:8d:dd:19:ac:b1:37:e0:
34:9a:bb:b0:75:dc:8c:00:0b:5e:7a:ee:5c:9d:17:
20:f8:53:10:6a:8f:de:0e:3a:c0:32:f2:3e:5e:a3:
fa:65:2e:f9:0d:45:d2:73:b6:a5:80:5e:5c:6f:b1:
1e:69:e7:44:79:ea:6b:00:37:96:32:75:f0:21:bd:
e4:70:9d:7e:8a:ae:ac:16:26:b2:c1:85:ae:27:e7:
39:6f:60:e5:4c:94:43:84:1f:d2:11:3d:87:1a:3b:
d0:62:55:1e:c7:84:c2:bc:62:ce:5b:2a:4b:46:e2:
69:fa:e4:ad:c4:bf:de:65:4f:11:14:9b:4f:23:a4:
87:ba:4e:c1:9c:3f:53:53:42:32:ba:e7:29:b0:31:
ac:e9:dc:84:ff:0a:fc:82:cc:99:9f:8a:e1:35:37:
15:df:41:38:90:41:9c:98:73:24:49:d4:f7:b0:af:
55:1a:77:28:5b:e9:73:fb:24:97:c6:af:5e:e9:e1:
83:9e:e5:f9:d7:fc:05:f5:41:57:fa:38:2c:31:21:
50:42:ab:2e:d6:d8:cc:ab:1c:97:b3:2f:3f:ad:20:
2b:a5:03:b2:f6:6f:c4:84:aa:4f:eb:87:36:d8:cc:
7d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:0D:F0:C8:E5:D1:B2:35:38:BE:B5:EC:CC:3A:B1:28:65:DF:7E:AA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.124.0/22
IPv6:
2a0e:e3c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199641
Signature Algorithm: sha256WithRSAEncryption
09:f9:54:e4:f0:84:f9:9a:37:df:f7:a0:a1:11:57:18:9b:74:
5b:60:59:0a:1d:2d:58:1c:4d:2e:0d:f6:e9:df:fa:c5:d0:49:
78:c1:74:c8:59:36:46:02:86:af:6e:25:4c:3f:22:30:14:33:
a1:4c:1a:3b:0f:e8:07:c2:7f:57:6e:06:43:b0:39:f9:2b:19:
e5:7b:4a:f1:39:51:df:e8:32:fb:6d:92:c2:f3:c2:73:5d:7f:
98:57:b3:a6:57:ba:bc:83:01:04:06:0b:68:d5:f3:10:e1:e3:
8b:4d:f7:b2:ec:bf:b3:8d:2c:a7:99:7d:34:9a:3b:31:95:72:
91:5a:60:2c:6a:24:69:9f:7a:c2:e8:75:34:90:ed:6a:03:57:
11:6d:66:a9:9b:bd:a0:c4:f0:cd:2c:64:e2:70:9a:63:8a:ac:
86:f3:74:a8:83:d8:74:68:ba:e4:97:9d:18:c4:93:63:7d:f5:
4d:33:a8:06:f9:d9:a7:48:2d:9c:da:5c:9c:10:a7:47:93:e4:
b9:9c:d8:c2:9a:0a:c3:e9:e7:2b:ce:f6:e9:99:97:90:95:79:
eb:22:bf:e2:fd:cd:e8:f2:70:19:2f:49:bd:d2:f3:11:ff:0c:
a7:5a:13:42:0d:c2:a8:9f:e3:cd:8b:d6:05:78:b5:2c:f3:b7:
0a:a2:24:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:04:15 2024 by rpki-client on console-ams.rpki-client.org