Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
File: _x9hW5GDn1HtOltTdTsnsCx22pU.cer (raw, json)
Hash identifier: tmrbhFB9TO3Jswvn0l6lJUADgvixwYNNlEvozEoNoa0=
Subject key identifier: FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B78C01DF35E812F32092D9DF11AE85
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:29:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 56567
IP: 185.114.148.0/22
IP: 185.220.192.0/22
IP: 2a06:7000::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:8c:01:df:35:e8:12:f3:20:92:d9:df:11:ae:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff1f615b91839f51ed3a5b53753b27b02c76da95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d0:d8:13:25:f0:18:4b:9b:f3:c1:61:9a:98:
79:f0:a9:5b:df:31:3b:ec:30:4d:00:d0:d3:7a:70:
18:2c:1a:18:64:bd:07:d0:06:c7:de:bf:0e:5a:3c:
e1:f8:b9:cc:8b:62:13:ea:b7:03:2a:eb:af:a9:08:
55:f1:fe:0d:d2:64:56:79:f0:69:ee:43:6f:fa:83:
e6:c5:8e:b2:12:65:9d:2e:1d:ba:a1:04:74:4a:7f:
21:9f:4c:4f:10:ee:e3:81:01:a8:f4:3b:2a:0a:a0:
ca:ea:30:a9:bc:a4:b8:9d:7e:5b:7a:ae:50:d3:2d:
e9:97:37:c3:9e:aa:71:35:14:72:52:13:21:fa:93:
8d:a1:de:7b:1d:bd:ad:74:9f:6e:e3:fe:62:85:f4:
0b:f7:88:af:d2:36:72:22:7d:04:a5:5c:94:8f:13:
82:df:7f:af:84:b9:d2:37:6f:98:e3:d3:b6:ed:a6:
79:ec:60:38:78:ae:8f:11:6f:cf:c7:b2:7f:8e:03:
5c:10:60:d7:53:40:a2:2f:f1:0b:7f:71:37:08:7e:
55:d1:4e:14:00:d7:fe:1c:d8:97:75:3a:83:31:fd:
b7:cb:43:8f:21:01:00:ff:e2:f3:be:47:5c:3e:70:
2e:24:1e:cd:bf:7a:a4:ef:e4:83:7c:c8:5d:30:e3:
5e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.148.0/22
185.220.192.0/22
IPv6:
2a06:7000::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56567
Signature Algorithm: sha256WithRSAEncryption
ad:e8:7e:5f:ed:e8:df:89:4b:06:38:08:53:6a:67:d3:1b:a6:
fb:1b:14:19:b1:1a:a6:30:4c:5b:e4:51:25:9f:b7:2e:61:13:
68:ad:27:f0:95:5a:54:6c:32:3c:77:c8:10:3b:0c:c4:52:56:
6e:d3:f9:6c:23:fc:a6:ca:bd:69:15:b3:32:db:ed:bd:bf:92:
83:81:b6:33:58:80:45:56:18:f4:e2:a1:b3:8b:c4:a1:a4:47:
2c:6f:2d:8c:01:a2:b7:cf:5d:08:d4:60:4c:45:e7:0c:6f:34:
6d:c8:a1:19:2f:f8:7e:02:1f:5c:95:92:84:78:a8:77:f8:65:
80:73:61:7b:f0:58:01:27:c6:97:cb:0c:9b:be:c6:f7:31:9f:
89:97:32:90:b2:16:2f:af:71:62:da:0e:1b:a9:15:6a:4e:08:
bf:70:67:bb:e6:f1:72:a5:bb:74:ee:a9:c6:e9:dd:bf:85:74:
67:48:35:22:2d:94:b7:d5:85:35:27:c4:9b:f4:53:a1:e0:b6:
5d:f7:fd:e6:4f:d1:64:03:57:31:70:55:51:a1:af:8f:3a:62:
86:b3:0e:06:fc:90:57:49:f5:b6:b0:b3:f8:c2:ab:63:1e:61:
78:58:6d:01:b8:d4:e4:b1:b6:a0:5e:cb:35:86:ea:8f:2c:e1:
49:3d:3a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:50:21 2024 by rpki-client on console-ams.rpki-client.org