Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
File: xFvSa8XYHu6cjhotDXjRDarggZU.cer (raw, json)
Hash identifier: J0gXr8HCmf1y5yljxT8plN/SA0vWKVqEHO+C0j7WnS8=
Subject key identifier: C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB1040588FA8A9CB852BA40265D98D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:45 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 51168
IP: 91.216.4.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:10:40:58:8f:a8:a9:cb:85:2b:a4:02:65:d9:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ce:76:28:9b:32:b1:ed:ea:d7:6d:64:b1:7b:
b7:1f:5c:50:fb:36:b3:a0:3a:02:f0:28:3c:02:6e:
76:b4:7f:5d:d3:7c:c8:7a:98:a7:8f:79:f7:63:b1:
5a:5a:25:e9:6e:c3:0d:a4:19:a9:99:43:75:cc:e0:
f9:c4:92:a1:c9:f2:e9:df:45:0e:59:e1:60:db:64:
cb:8c:fc:f5:a3:ee:0a:e6:49:ab:87:f1:ff:ca:ae:
6a:3c:35:38:8e:1c:97:b3:c6:0a:1f:67:c8:06:a2:
76:59:4b:f6:c8:50:22:f0:46:ce:ed:ec:fe:91:1e:
78:de:88:0b:ef:40:4d:71:0a:a4:4f:fd:41:34:5e:
c3:f3:18:66:ee:da:43:6c:1f:57:b5:21:8a:0d:32:
aa:7b:93:b1:ee:8f:05:8b:ca:a6:8f:d7:0e:41:69:
28:8b:df:43:98:6a:86:9f:b9:35:74:e0:e0:99:95:
ac:63:be:79:ce:2d:27:0d:7e:6f:88:b7:16:86:ca:
95:aa:68:a4:0e:2b:8d:8a:c4:13:1a:0f:4b:d8:0b:
e6:05:5e:77:bf:18:ab:89:15:6c:e9:94:2a:8b:fe:
ab:a3:92:2f:75:fa:a0:69:8a:1f:e3:bc:25:cb:49:
8c:27:68:30:d1:f9:3d:17:bb:29:cd:34:a5:af:42:
9f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.4.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51168
Signature Algorithm: sha256WithRSAEncryption
17:11:cc:b2:0d:c3:7e:94:f2:04:bf:10:25:49:22:f0:bf:f4:
25:76:15:c4:17:72:24:c3:76:93:0d:e3:40:7e:27:2c:d3:de:
22:b2:d3:7f:66:61:85:82:70:67:64:43:08:64:1d:00:30:03:
0d:09:40:f7:fe:d4:5c:e6:60:f4:51:ec:8c:56:27:07:5a:55:
ee:90:2d:0f:41:f4:d0:af:e4:14:bb:35:4e:c1:cc:e8:49:5d:
a8:24:dd:a3:36:f1:6d:13:e2:be:e9:9e:39:4a:66:85:08:1f:
6f:82:29:d2:ee:a9:b4:e7:21:42:de:b6:13:4f:be:7a:9a:84:
31:c7:df:25:0a:c6:34:ae:58:b4:78:75:37:00:e0:1c:04:52:
47:45:67:a7:ce:ef:3c:05:1a:34:7a:4a:b8:95:67:64:89:9f:
31:c9:f5:b7:f3:7f:34:12:3b:f4:c3:f6:6c:15:fd:b4:34:09:
16:38:4f:26:c9:38:ac:8f:c3:e5:99:32:72:c8:e9:09:35:a6:
b6:55:70:5c:b6:1b:e2:5a:1e:e1:b7:fb:41:54:f7:03:83:6c:
9d:d9:c8:2a:ce:4a:1a:40:03:f2:8e:84:09:d6:77:04:2a:24:
09:03:cd:9b:fa:e2:ce:1d:1f:f2:c2:c6:2c:ca:c6:14:bc:e2:
c9:8b:c0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:25:56 2024 by rpki-client on console-fra.rpki-client.org