Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer
File: xCKHxoRY-YDKm3w21h9q9YZGSyg.cer (raw, json)
Hash identifier: PbAaIsmbtibCEVektYe4Xbj/xMElIdB9uIJtGutxD04=
Subject key identifier: C4:22:87:C6:84:58:F9:80:CA:9B:7C:36:D6:1F:6A:F5:86:46:4B:28
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DAD474FCAB1C8B28FE6497ECDE387E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.72.20.0/22
IP: 2a05:3d80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:d4:74:fc:ab:1c:8b:28:fe:64:97:ec:de:38:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c42287c68458f980ca9b7c36d61f6af586464b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5a:62:a9:29:a4:61:36:4d:1f:08:10:4f:6c:
1c:96:c8:d7:81:c6:7a:76:98:13:66:e2:c8:04:4d:
9d:18:ba:68:ef:c9:83:3a:54:41:bb:09:cb:20:2f:
0d:06:51:95:ad:77:74:35:5a:71:ed:eb:8b:49:1f:
ef:80:c3:79:7f:c9:88:8d:8b:66:80:81:45:e1:2d:
0e:10:94:cb:eb:87:01:5c:ae:e3:0f:22:ad:76:d8:
ec:8b:00:d6:5e:1b:16:bb:ab:37:14:c9:c1:a7:f1:
dc:79:1f:30:b8:93:a0:e8:02:fc:1b:1d:50:2b:de:
45:fe:68:37:54:0e:97:49:75:55:f5:12:07:92:c5:
17:73:1a:27:ab:80:73:61:7d:01:56:5e:0f:40:84:
00:06:b8:45:44:1d:fa:26:68:fd:87:bf:a2:e7:65:
fe:f1:ef:d3:70:e3:0d:bd:07:04:4c:fc:3c:9a:bd:
5b:88:3a:7a:af:dd:89:9a:bc:ad:2c:5d:0e:32:fc:
2f:8a:ec:c8:4f:87:56:f9:3c:9c:bb:50:6d:9b:22:
e1:f0:d2:2b:56:92:3b:e2:b8:8d:45:03:71:08:02:
34:b9:0f:15:72:f7:3f:09:70:04:c8:71:a7:a4:53:
a4:8b:31:83:ef:da:00:88:df:7b:d3:e7:2d:74:ff:
92:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:22:87:C6:84:58:F9:80:CA:9B:7C:36:D6:1F:6A:F5:86:46:4B:28
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.20.0/22
IPv6:
2a05:3d80::/29
Signature Algorithm: sha256WithRSAEncryption
96:5a:1c:a6:26:30:72:37:52:5e:fe:7d:10:b7:23:ca:3c:32:
c4:e0:70:de:d0:c1:59:36:9e:cb:4e:3a:85:8e:56:53:fd:62:
89:d6:79:6d:19:6d:8b:57:5a:c9:7e:1a:89:80:a6:00:9f:ba:
f4:9e:73:15:ac:96:5b:56:fa:b5:f7:03:9f:7d:11:90:06:e2:
27:88:0c:5b:39:ab:e8:0c:7c:2d:dd:a4:ec:e2:b6:26:14:4e:
91:fd:f5:98:f5:cc:07:67:65:f1:18:dc:27:c8:1b:ae:e9:1a:
29:5f:db:ad:7e:33:08:0e:31:9a:e3:5f:d9:58:3d:20:50:70:
cf:99:55:e0:3c:4b:34:cb:3a:24:3f:5d:99:80:71:7a:96:f7:
e3:b8:8e:ff:2b:81:ea:79:90:5d:59:69:41:b8:85:a1:49:58:
92:c2:a7:ff:dc:60:f2:e7:5d:a5:cc:31:28:65:3e:65:3a:ef:
2a:b4:c8:7e:a6:cb:e0:29:61:fd:cf:75:be:0b:b5:76:1b:25:
66:63:21:b6:23:01:be:7a:a9:12:fc:c7:08:54:b3:78:17:13:
db:f7:cb:78:10:27:1f:d0:07:bb:68:0f:69:00:9f:f1:db:8d:
6f:1e:29:de:5a:66:6e:a0:77:9a:1e:46:e4:05:d9:62:aa:1c:
95:73:f0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:35:02 2024 by rpki-client on console-ams.rpki-client.org