Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xN29nyMJGTIb9WcG8QaTd5JhGfk.cer
File: xN29nyMJGTIb9WcG8QaTd5JhGfk.cer (raw, json)
Hash identifier: 8TmwG+Rv+xwpVeFQRx325Ks+GKi2hct0xM3PSkKhuIE=
Subject key identifier: C4:DD:BD:9F:23:09:19:32:1B:F5:67:06:F1:06:93:77:92:61:19:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B8CDBE8414C3583EAC012924CE34A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/e9c8fe-a687-4952-9d88-bfac928bf658/1/xN29nyMJGTIb9WcG8QaTd5JhGfk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/e9c8fe-a687-4952-9d88-bfac928bf658/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:31:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 199041
IP: 193.32.65.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:8c:db:e8:41:4c:35:83:ea:c0:12:92:4c:e3:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4ddbd9f230919321bf56706f1069377926119f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2a:f5:dc:08:8a:f3:59:77:a1:9d:96:89:6c:
74:2e:2a:ae:6d:0c:02:bf:7f:29:ea:15:b4:24:04:
b9:9b:cc:8b:5d:d8:5d:5f:ff:90:13:f6:ae:a4:87:
b9:a5:0a:e6:3e:de:30:b6:c5:23:b1:6b:7c:60:77:
1b:6c:e1:15:3d:75:35:5b:71:a8:c6:e2:97:79:7a:
a1:d5:f7:aa:1c:b7:87:a1:aa:b5:96:ad:d9:35:6a:
79:b8:d8:30:76:67:94:95:0f:01:8e:c9:44:93:07:
24:75:b6:5e:11:b6:b7:69:ad:9d:3c:65:ec:24:06:
da:7a:52:12:78:f6:dc:a6:11:b1:4b:f8:ca:c6:38:
72:4c:84:dc:3b:fd:3a:65:9c:59:89:dd:f0:69:fa:
a6:fd:fe:4a:31:64:46:af:c4:ca:da:b9:dd:ff:03:
c3:4b:bb:5c:5b:d4:28:d4:14:70:e4:02:22:36:2f:
38:d1:44:5c:dd:c2:86:eb:50:bb:15:84:6a:20:2d:
bc:02:78:6c:46:b8:3f:59:00:d9:3f:36:a5:62:17:
d4:82:e4:f0:46:81:e9:9e:88:09:20:e6:7d:a7:48:
0c:bf:41:22:c5:b8:ae:f7:49:9b:e4:ea:e4:53:c5:
a8:97:f1:c7:ab:9a:c9:b1:fe:11:0f:3c:8a:1a:ec:
57:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:DD:BD:9F:23:09:19:32:1B:F5:67:06:F1:06:93:77:92:61:19:F9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e9c8fe-a687-4952-9d88-bfac928bf658/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e9c8fe-a687-4952-9d88-bfac928bf658/1/xN29nyMJGTIb9WcG8QaTd5JhGfk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.65.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199041
Signature Algorithm: sha256WithRSAEncryption
20:3f:36:1f:cf:7f:b4:d1:8e:d4:6f:43:6e:87:f6:d0:63:39:
c0:bc:10:2d:84:db:3d:3a:e4:99:11:3d:8c:44:82:5f:da:fa:
46:e2:88:da:ac:c7:84:06:ee:93:ba:3f:f4:36:64:c9:a0:6e:
46:5e:7c:b2:a1:d5:ed:c6:71:f9:57:51:cd:66:4b:f8:03:20:
f6:b3:c4:e1:58:08:ed:82:c0:fe:0b:1d:2d:4f:0f:e1:7c:34:
1a:fb:cb:c3:79:2f:d3:d9:df:6a:ea:bd:81:ca:af:ac:c9:bf:
cc:b4:8e:8e:91:3e:34:6d:00:38:18:b6:01:f3:79:49:6a:67:
e4:86:7c:8e:59:ad:fe:6b:bc:e1:91:9b:28:d1:8d:97:0d:9f:
52:8f:c1:ab:6b:58:7a:f3:97:c9:7c:46:46:84:c9:e8:65:c5:
75:0e:cd:b7:23:3d:c1:da:f4:37:45:25:0b:69:b8:cf:b9:00:
c0:92:c0:df:b2:52:51:08:8f:6b:06:d6:e5:51:0a:1e:6c:a9:
98:aa:01:e2:f1:d4:fa:9d:c4:99:52:6c:5a:21:32:37:f9:c9:
de:d0:02:cc:76:80:ef:59:ad:66:a3:e2:a9:fa:ed:90:51:56:
55:20:34:fb:69:ef:f5:d3:f9:c5:15:56:71:f0:57:86:1e:62:
0d:cb:b2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:32:12 2024 by rpki-client on console-ams.rpki-client.org