Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xFyYQwiFYolxMHxZtc8kFoIQI3g.cer
File: xFyYQwiFYolxMHxZtc8kFoIQI3g.cer (raw, json)
Hash identifier: B1KdyFH305z7KOXncNG9A/h8R76+D8FFTxMpeXT6D2s=
Subject key identifier: C4:5C:98:43:08:85:62:89:71:30:7C:59:B5:CF:24:16:82:10:23:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC50091DAC3278D5DF4897A20A6AFD231
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:29:58 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 8774
IP: 109.237.0.0/20
IP: 185.113.208.0/22
IP: 195.135.212.0/22
IP: 2a05:3740::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:91:da:c3:27:8d:5d:f4:89:7a:20:a6:af:d2:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c45c98430885628971307c59b5cf241682102378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b9:79:29:15:02:41:fc:da:3b:31:6e:06:ac:
e0:f0:73:21:a8:1f:1a:bf:a9:dd:e6:2f:80:f7:7d:
63:82:d8:2b:fa:1b:a6:87:42:c6:bf:7f:de:fa:22:
07:16:8b:9e:09:aa:8a:ac:77:94:b5:0d:4f:0f:d3:
3a:3e:8b:2b:a3:5f:45:15:bc:01:ef:6c:e6:51:0f:
25:8b:68:88:48:1e:28:da:cb:87:40:5c:ea:61:14:
39:f4:fb:d3:24:a9:80:85:7c:2e:81:35:0e:a4:b5:
da:e2:6c:31:75:91:5a:8f:98:61:d3:0d:b8:2b:20:
07:40:56:5d:fd:c9:ea:36:e0:47:29:18:0b:31:13:
12:43:f4:8f:9e:96:8f:f4:2b:58:1b:5e:ac:b6:a1:
89:6e:93:1d:3e:7d:8d:e8:8c:fa:21:c5:df:fb:43:
0d:a4:ac:51:d8:bd:b8:8d:35:5e:cc:1d:ba:93:54:
cf:bb:f7:5e:fd:b0:3a:66:8b:42:14:93:49:62:46:
6e:a7:47:1d:7c:62:7d:94:dd:01:25:9c:f8:3b:fe:
90:e0:49:56:09:e7:29:74:a5:3b:f5:b7:fc:86:16:
68:35:76:e9:b4:c1:a9:95:df:06:ab:ff:a6:ae:d3:
5f:85:37:0c:a2:69:97:3a:2a:98:1d:2b:48:f6:dd:
d5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5C:98:43:08:85:62:89:71:30:7C:59:B5:CF:24:16:82:10:23:78
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.237.0.0/20
185.113.208.0/22
195.135.212.0/22
IPv6:
2a05:3740::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8774
Signature Algorithm: sha256WithRSAEncryption
31:e7:5c:e3:5e:b7:08:4a:38:a2:61:8f:73:15:ce:84:a2:60:
0b:5f:f5:0c:81:43:41:e6:ea:b2:76:c5:f8:66:0e:f0:62:81:
4d:16:0b:e8:91:02:e0:b3:de:47:30:b1:99:72:c1:7a:bf:ba:
08:06:c3:fa:be:b2:41:3c:c0:b5:85:ec:10:c7:c9:01:2e:08:
d7:58:1d:15:80:5c:9b:eb:51:c4:0f:ec:0a:bb:3e:81:29:bb:
06:9d:c1:54:ea:0c:7e:c5:01:b3:a4:28:a2:7c:cc:20:cd:60:
77:4c:1d:64:3c:14:24:d5:cd:12:21:6f:16:ee:d4:e8:26:c4:
0b:e6:66:d7:be:49:96:e6:7b:78:e7:c5:c4:39:aa:c8:fd:bb:
4d:44:ef:91:cc:e3:99:94:8f:0a:ba:6f:f8:42:f2:63:bd:0f:
6c:f2:b4:7b:e4:74:f0:3d:28:1b:ba:eb:cf:e7:f2:ff:62:92:
05:28:62:d3:e3:c7:27:b0:ae:bf:1f:44:9c:61:09:63:2f:78:
e3:51:dd:31:72:e9:08:c0:e3:77:e1:8a:ee:e4:26:e1:90:7a:
2c:00:58:d3:40:43:e5:81:5a:26:54:cf:5a:fb:99:ac:09:b4:
fb:b5:20:1d:9f:fe:85:47:f8:4c:a6:37:2f:22:7b:2a:f7:eb:
7a:72:b5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:08:48 2024 by rpki-client on console-fra.rpki-client.org