Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kXWIXPl40u9mE3YhRTC57WjFtFg.cer
File: kXWIXPl40u9mE3YhRTC57WjFtFg.cer (raw, json)
Hash identifier: Rpr7Itb6oIPtoDH3ydIixBykGFASE1wrZ3kHSMPjHPc=
Subject key identifier: 91:75:88:5C:F9:78:D2:EF:66:13:76:21:45:30:B9:ED:68:C5:B4:58
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BC58D6B76597FAB6F7FB17153BAD53
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 16065
AS: 48376
IP: 185.196.88.0/22
IP: 193.200.92.0/23
IP: 2a02:f0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:58:d6:b7:65:97:fa:b6:f7:fb:17:15:3b:ad:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9175885cf978d2ef661376214530b9ed68c5b458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:86:dc:d9:ab:85:73:0c:91:1d:ea:bf:4c:6b:
e9:4c:44:5d:9e:85:be:ab:db:b8:c3:e6:26:6d:d4:
ff:fd:1b:05:e6:24:ce:a0:2d:d9:1a:33:9d:c7:38:
a2:8b:77:64:3e:5d:ef:bf:b6:a1:a9:ef:16:d4:81:
c2:8a:bb:b7:3b:cd:26:90:f3:93:56:87:53:f6:b1:
d6:a0:37:e8:c2:94:36:20:5d:1b:a4:97:20:75:0e:
84:59:be:94:2d:d0:fb:30:c9:b3:19:d3:f6:b0:13:
89:ed:80:2b:3c:19:f2:7d:82:54:f3:bc:52:3d:36:
f0:1f:69:d9:ae:ca:05:e4:18:07:ab:28:d5:9d:4a:
b4:55:4e:20:31:b3:86:10:7e:3f:37:fc:06:8a:cd:
8a:e5:2e:13:12:1e:c3:9f:73:fb:b5:b0:bc:95:d4:
b2:91:54:80:28:d7:5d:e1:ec:7b:21:f9:6a:29:e7:
f8:76:71:96:48:5a:cf:e0:b6:fe:e7:5d:9c:56:e8:
9b:26:60:01:b9:4e:4a:7c:78:05:09:f4:65:19:15:
e7:8f:7f:be:c8:16:0b:ea:00:6e:df:92:cd:c3:7d:
1d:1a:d1:e2:a8:0f:54:34:fa:35:e6:8a:50:bb:7b:
5f:44:22:56:93:69:3b:2a:aa:44:3a:18:3e:23:85:
35:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:75:88:5C:F9:78:D2:EF:66:13:76:21:45:30:B9:ED:68:C5:B4:58
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.88.0/22
193.200.92.0/23
IPv6:
2a02:f0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
16065
48376
Signature Algorithm: sha256WithRSAEncryption
71:ec:10:4e:f1:de:44:0c:af:a9:1e:b0:e6:06:5a:10:46:65:
31:70:6b:68:42:cd:03:d0:18:9a:90:65:32:a5:2c:41:4d:21:
43:56:8c:a1:07:ba:49:d8:b1:37:71:aa:6a:aa:1f:31:f1:21:
83:b6:9e:11:ae:7c:94:6d:34:c7:b4:b6:36:31:ad:5d:de:13:
5c:85:82:76:74:95:6a:6c:5b:59:e4:35:1e:ec:26:12:60:b3:
23:33:1c:2e:f1:92:86:61:0b:9e:8f:d4:30:55:60:98:f0:19:
c0:a1:cd:b8:2c:9f:05:59:6b:fb:68:51:3a:20:6e:0f:b0:ad:
e1:23:b1:02:c4:94:8f:40:e7:30:62:c7:1f:ea:b3:e2:f4:9c:
42:14:7b:84:82:58:33:6b:7b:11:8e:ef:8d:85:7a:e2:3d:40:
82:07:71:bb:3e:5d:4c:a1:7f:ce:9a:d9:ab:43:71:e1:6f:2f:
2d:56:e0:45:9d:79:4b:ac:b7:8a:ba:45:b6:7c:a7:fe:cd:05:
ec:3f:d5:61:cc:83:ce:ec:fa:b8:98:35:0b:01:89:61:ad:8b:
fd:38:b9:7e:8d:f2:dd:b9:9f:61:ba:f6:19:74:69:1d:bc:60:
7d:f4:9c:cd:c5:08:e1:e8:39:20:19:cb:aa:75:19:12:ca:40:
5a:9d:c4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:00:14 2024 by rpki-client on console-ams.rpki-client.org