Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer
File: xMAyk16WM9-LGZJd8L0luBxoY7c.cer (raw, json)
Hash identifier: /RSDKxhfBtJx6y7BBZhkveHzqF5iuy+5mN2KWrh09J0=
Subject key identifier: C4:C0:32:93:5E:96:33:DF:8B:19:92:5D:F0:BD:25:B8:1C:68:63:B7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D1A8EC1F0C2CD2DDCF8CA06BF5C81
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 59909
IP: 185.67.108.0/22
IP: 2a05:e40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:1a:8e:c1:f0:c2:cd:2d:dc:f8:ca:06:bf:5c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4c032935e9633df8b19925df0bd25b81c6863b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:28:c7:80:3e:f3:11:a1:19:43:aa:4f:e7:0d:
0f:14:6c:a8:a4:30:5a:f1:cf:70:ef:74:fa:b5:0b:
17:b2:81:a3:9b:63:ea:41:b9:fc:be:55:b1:3e:0a:
ef:88:23:54:e2:b2:af:2d:56:98:f7:89:40:b8:97:
f2:1a:c6:3c:30:af:51:bf:1c:78:b1:94:b6:f8:08:
f5:a7:47:8f:59:a8:4c:ee:d5:c4:a8:2a:3a:a8:e0:
e3:c6:a3:e4:c7:dd:84:d5:1c:a4:2b:e8:7d:05:3d:
7a:54:51:11:4a:6c:c3:24:82:04:c6:38:f7:d5:d2:
82:10:06:65:b1:6c:9c:13:2d:2b:88:1e:19:5c:3f:
a9:0e:d8:2e:e2:6c:e2:7c:ea:84:1f:78:d6:30:bf:
c3:9c:e1:d7:eb:e5:65:3e:54:6e:fc:90:96:44:49:
95:2d:5e:22:bb:48:4f:b4:98:b8:26:94:c1:ff:a1:
56:69:a9:19:d5:c5:9c:94:d5:5b:a2:dc:c5:af:5d:
9e:1e:97:e4:df:9b:0e:e5:4e:1f:05:f9:9e:49:ef:
75:07:5a:f8:6a:80:73:8d:21:83:7b:78:3e:99:8e:
e2:91:9f:d4:e7:f5:f7:3b:b8:31:4c:ab:d5:17:ed:
72:9a:01:71:76:75:c8:0a:05:9c:0b:08:76:71:b0:
9d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C0:32:93:5E:96:33:DF:8B:19:92:5D:F0:BD:25:B8:1C:68:63:B7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.67.108.0/22
IPv6:
2a05:e40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59909
Signature Algorithm: sha256WithRSAEncryption
0b:63:31:5f:ed:53:19:dc:21:c5:10:c9:ad:36:78:ff:86:f1:
d4:d3:6f:8c:4b:9e:09:9f:84:ba:f4:0c:d8:4f:3f:0e:51:bb:
29:a4:1a:52:01:9b:fa:2c:75:b2:5b:dd:00:7a:16:94:73:4e:
7c:8b:37:8d:69:d5:7e:b3:fc:c6:31:03:80:fe:dd:67:de:e5:
2c:54:a5:aa:a6:42:d7:87:43:ac:07:64:42:21:1f:74:f4:b3:
cf:08:a6:5e:1e:73:d4:d3:7e:22:d3:ee:b3:d4:c3:75:6c:8a:
24:97:de:ae:f7:97:72:64:7d:a5:48:ba:31:6b:e7:0c:1b:d4:
05:3f:bf:d2:24:84:20:37:cd:df:22:8b:cc:9d:63:07:a0:f0:
4f:26:40:77:0e:61:a4:bc:54:73:52:50:d5:50:27:7e:9e:08:
67:0c:b0:1a:2f:65:8a:eb:46:bc:e8:b3:58:37:91:ea:dd:09:
13:dd:24:6a:1d:d8:9d:4d:45:f5:4b:77:63:73:07:b5:d3:47:
bc:da:f4:a0:00:7a:f1:a7:c0:86:ec:a3:ab:4e:45:7f:12:96:
2b:09:3e:7f:87:a1:52:8b:b1:72:3d:93:4b:91:a9:36:5f:c3:
c2:ca:39:e3:ec:5f:bd:aa:d2:fc:75:f3:0b:ea:48:1f:e2:b7:
9c:d8:87:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:51:00 2024 by rpki-client on console-fra.rpki-client.org