Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xFz9uYA84FcULRh_hrxPVnHX63s.cer
File: xFz9uYA84FcULRh_hrxPVnHX63s.cer (raw, json)
Hash identifier: cCCq/1YlL4arytC0dVTuMdzTYn1SUoR9bW9ubN87pkw=
Subject key identifier: C4:5C:FD:B9:80:3C:E0:57:14:2D:18:7F:86:BC:4F:56:71:D7:EB:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC348F0235EC92B9238A0C467A321BAC2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:46 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 56675
IP: 31.193.40.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:f0:23:5e:c9:2b:92:38:a0:c4:67:a3:21:ba:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c45cfdb9803ce057142d187f86bc4f5671d7eb7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:67:c6:e6:88:1c:f7:1d:a9:82:ad:8d:cf:5d:
e0:e4:d4:f1:06:68:b4:6e:00:70:ab:ed:ca:7c:6f:
83:9d:e1:74:5f:c1:c0:23:f0:89:ee:97:bf:c3:68:
15:8d:c7:69:1f:5c:86:16:19:90:b2:58:70:20:60:
26:9f:31:bd:bc:c9:f9:2a:19:97:5f:cc:a5:ef:fa:
a9:01:b1:e7:63:b6:88:67:fb:bb:d5:a1:1b:1a:ea:
96:1b:25:0d:20:09:ff:fd:53:1e:fd:68:45:01:b1:
09:33:fb:f3:e5:4e:4a:3b:0a:f4:29:59:b6:9f:bb:
1e:b4:e6:0f:86:73:44:8c:99:ad:26:b7:de:2c:43:
b8:79:89:bf:4a:fc:7a:9d:5f:1b:91:5d:9c:61:fa:
88:89:a6:92:43:39:0d:36:69:15:e3:50:96:82:94:
d0:10:fd:e1:a0:cf:39:62:0a:5c:48:1e:30:18:68:
03:ff:75:b6:6d:ad:2a:73:7d:26:7d:c7:82:26:c6:
f6:20:17:b5:fc:18:99:8f:6c:6b:f5:f9:07:81:98:
8a:2f:e8:4f:ce:e2:b7:25:1a:24:41:a7:8d:bb:af:
e8:af:bc:2c:a0:92:1f:1f:ec:85:34:15:3c:36:36:
1a:b7:de:9b:e3:c4:74:dd:aa:8f:cf:0f:f7:44:27:
6e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5C:FD:B9:80:3C:E0:57:14:2D:18:7F:86:BC:4F:56:71:D7:EB:7B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.40.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56675
Signature Algorithm: sha256WithRSAEncryption
4a:f1:0b:6a:e7:2c:32:f7:56:de:3e:fa:9d:1e:b8:6a:0f:31:
6c:1f:e9:5c:0c:43:8d:b8:03:25:ce:40:f5:e4:bb:31:45:04:
2c:74:b3:72:af:f7:e6:bb:f1:cb:c7:e7:72:dc:68:d6:63:fc:
15:8b:fd:85:cf:8d:01:b5:97:04:8c:d3:f9:16:98:4a:b1:8a:
26:fc:4c:44:8e:7f:13:1f:65:82:d8:1d:69:3e:e3:e2:0a:18:
41:68:17:d5:55:19:59:6a:1f:d6:18:9e:20:eb:f7:9c:e3:42:
a9:ad:6b:84:15:41:a8:97:dc:40:f2:e9:29:2f:ce:af:2b:f7:
b0:73:27:38:52:4b:1a:8c:89:b5:84:bd:0b:ec:e3:cd:bf:9f:
cb:7b:76:4f:8f:e2:94:cc:e9:6f:d6:06:09:f7:de:21:78:be:
fe:b9:c3:b1:fb:15:20:b2:dd:ee:75:73:bf:43:b7:6c:47:00:
d9:93:85:18:74:3d:00:11:98:65:58:f5:55:80:aa:a1:5a:c2:
a6:e7:7d:85:f4:22:72:57:a7:2a:90:3e:2a:d3:51:4a:0c:5d:
8a:78:a1:61:33:52:c5:1f:c7:ef:b5:26:d7:37:01:62:50:e8:
28:48:97:59:8e:b5:8b:1e:8f:df:14:95:f5:65:97:60:e0:2d:
86:f9:dc:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:50:57 2024 by rpki-client on console-fra.rpki-client.org