Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.cer
File: kXwzx1lhMY2O48sTRkqQ0Aq4vS0.cer (raw, json)
Hash identifier: sQqbz6eIcEM8a+XuETngV8LDZrDdv9WbljJZJD714Zk=
Subject key identifier: 91:7C:33:C7:59:61:31:8D:8E:E3:CB:13:46:4A:90:D0:0A:B8:BD:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DF5302825DAE98B169FB55E111DD2E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:32:08 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 56962
IP: 91.242.235.0/24
IP: 212.24.121.0/24
IP: 2a11:2740::/29
IP: 2a11:ad40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:53:02:82:5d:ae:98:b1:69:fb:55:e1:11:dd:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:32:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=917c33c75961318d8ee3cb13464a90d00ab8bd2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fb:04:2a:52:c9:6c:3f:50:cb:8c:eb:95:59:
88:c4:49:96:91:da:07:03:f5:8a:13:3b:00:fd:d0:
5a:f6:93:fa:13:7a:36:98:8c:29:1b:e1:7a:f1:d1:
22:cc:b2:fd:5a:19:a1:10:59:d0:3f:e9:1f:da:5c:
c1:a7:5b:07:6f:c4:a3:6a:24:9d:fc:16:6e:f9:b4:
cc:26:f1:ff:ad:8a:5b:91:4a:6d:4e:36:26:9b:2a:
0c:0d:88:fe:cc:53:6a:f2:18:69:78:f0:f0:73:47:
e4:60:e6:1c:44:52:59:e8:40:46:7b:52:18:ec:37:
f2:a6:b4:c7:bf:d9:61:90:9b:4a:04:d0:fa:38:d6:
9f:30:02:02:3b:e4:aa:92:f6:df:a2:8e:ac:df:ec:
43:1f:69:28:9b:47:85:2c:d0:a6:69:b0:c7:e9:7b:
dd:cb:27:93:40:62:bb:71:ba:79:e2:ac:f8:bf:fc:
4b:fd:30:6e:23:74:36:a6:c5:76:68:7e:29:3b:3a:
3e:83:73:8b:ce:b6:d9:7a:72:af:a8:69:db:3f:eb:
92:7a:20:7c:c4:aa:5c:11:ba:55:c4:2f:8f:e1:ec:
47:0a:9e:9b:7f:be:83:64:fa:ac:42:1f:af:a7:91:
e0:1a:ac:52:e9:d4:00:9f:d1:2e:6a:5b:b7:9f:1b:
c3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:7C:33:C7:59:61:31:8D:8E:E3:CB:13:46:4A:90:D0:0A:B8:BD:2D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.235.0/24
212.24.121.0/24
IPv6:
2a11:2740::/29
2a11:ad40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56962
Signature Algorithm: sha256WithRSAEncryption
ae:91:f2:de:a8:71:cc:ba:2a:b9:76:82:34:ef:a5:83:55:b6:
f5:cd:a3:c7:ac:f4:de:37:5b:bf:25:49:e1:20:03:0e:ef:c7:
a2:dc:99:4a:da:67:6c:30:84:2d:45:77:0e:ea:2c:51:4e:82:
26:6d:69:91:2b:b1:a6:06:34:22:03:00:20:d2:fb:02:56:c3:
d0:a9:f6:ca:d6:19:3d:d5:f7:e5:5d:17:ee:9c:3d:8d:f1:87:
22:7d:9c:3b:c5:6e:83:55:0e:80:1f:cb:cc:a6:8e:05:e7:bb:
40:ed:88:79:de:7e:03:58:8b:f4:9f:89:61:4d:a4:9d:00:30:
ab:4e:b5:dc:c3:be:6d:96:7c:14:1e:6b:97:e3:2b:2c:43:e1:
85:50:bb:30:05:4a:2a:1c:fc:e4:15:3e:ec:0f:b4:bc:c5:6d:
ce:27:94:96:fb:06:49:22:60:b7:33:cf:29:7b:f8:ba:fb:9e:
a6:79:d1:d0:f7:75:6c:1a:30:15:7c:e5:16:44:99:af:b3:15:
23:00:90:ed:e3:81:22:45:28:8c:c0:b1:47:32:63:90:8c:d3:
a1:9c:c6:63:90:6a:c3:00:8c:df:bc:65:5b:d7:be:9c:0a:b4:
40:52:ff:45:a5:57:26:d5:a9:b8:92:7e:7e:9d:da:e2:09:57:
fb:53:35:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:11:45 2024 by rpki-client on console-ams.rpki-client.org