Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
File: xP8jscNxNS85tz05pOB_jKmMzWc.cer (raw, json)
Hash identifier: DVcGlyHbgkbCTMkqKv1HdTzP2eq2oPoTimFaHlWjNtw=
Subject key identifier: C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B922870E8EF6E5BD60825BF66839F7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:31:10 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 21110
AS: 47448
AS: 56775
AS: 196775
AS: 205772
IP: 2.58.8.0/22
IP: 31.222.48.0/20
IP: 91.235.119.0/24
IP: 93.191.192.0/21
IP: 147.189.164.0/22
IP: 193.169.30.0/24
IP: 2a10:cec0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 14:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:22:87:0e:8e:f6:e5:bd:60:82:5b:f6:68:39:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:31:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2a:bd:6a:23:f4:37:5a:45:81:f6:d8:b5:ca:
04:8e:5c:fc:dd:f3:91:b1:2e:c7:19:88:11:b1:79:
b1:19:a3:c7:2b:45:2b:61:a2:47:37:2a:c4:f6:05:
d6:21:de:0e:c5:8b:08:17:ed:5c:65:e3:76:92:8f:
34:3b:cc:2a:6e:d8:21:80:ae:8c:cf:0c:c1:11:38:
b0:55:32:56:a2:f3:60:77:55:88:6a:7e:60:e2:be:
7d:fd:a7:32:29:aa:85:97:b6:8e:66:46:52:75:b0:
3b:db:e8:35:81:b3:52:83:29:36:53:ae:f6:13:5b:
4a:59:c9:e7:e5:23:4e:03:32:ce:91:e6:14:06:56:
79:03:b3:5d:b1:bd:42:f4:f1:39:c5:6c:95:95:cd:
f9:61:ad:58:95:10:b3:4d:eb:0f:b0:4f:c4:eb:cc:
04:67:36:7a:19:b4:38:62:54:e4:78:a8:f0:d8:c9:
c7:40:4f:75:46:06:7d:8c:d3:bf:d7:79:ad:c1:86:
91:f5:6c:8a:3f:a1:36:4d:f6:5a:7c:66:5a:9a:aa:
c8:c6:7d:62:a6:95:0d:48:ec:9f:b8:94:54:16:95:
e6:30:97:72:28:c8:44:df:c2:bc:b0:24:82:0b:76:
8e:90:bd:4e:53:58:b1:3b:40:69:c5:e8:8e:69:1e:
fb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.8.0/22
31.222.48.0/20
91.235.119.0/24
93.191.192.0/21
147.189.164.0/22
193.169.30.0/24
IPv6:
2a10:cec0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21110
47448
56775
196775
205772
Signature Algorithm: sha256WithRSAEncryption
7b:98:a7:a5:4d:e3:3a:5d:77:91:4e:bf:4b:3c:48:95:21:bc:
36:2d:20:a4:66:52:5e:13:07:24:8c:a9:2c:15:b7:e5:14:e3:
bd:10:ab:72:64:4f:8c:99:49:e5:85:db:19:2a:d5:ea:f8:2d:
84:2d:fb:0b:1d:5d:1b:99:f3:c7:82:78:42:f4:dd:9e:49:e1:
11:03:bb:39:6d:c7:18:0c:af:6e:04:af:65:6f:4b:ef:16:fb:
b5:08:41:5b:42:22:41:39:f7:73:22:38:a9:b8:23:e2:df:62:
2f:42:47:f6:1f:50:5e:d2:3a:fd:96:70:ae:3f:a1:21:ce:0e:
db:11:32:18:20:1a:33:ac:22:6c:25:c5:f3:15:85:5d:c1:03:
00:78:07:e3:04:09:fa:8d:b0:8e:e2:7a:0d:5e:95:06:fb:5a:
2a:7c:d3:90:37:77:61:91:59:b5:4c:97:87:da:cc:0f:a0:2e:
ef:dc:9c:06:d4:e0:73:09:2a:20:83:73:1d:d2:fc:a4:46:83:
55:e3:33:93:f3:18:ff:30:27:79:41:fb:dc:a7:29:b7:2e:07:
78:f1:bf:7d:36:cb:01:a7:00:da:8d:68:cc:2c:61:ad:d7:99:
29:ce:37:64:c5:77:d6:5e:2d:81:78:72:fd:cf:23:5f:79:9a:
0b:15:4e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 00:22:05 2024 by rpki-client on console-fra.rpki-client.org