Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
File: xPvoQiQycn04dLFWS66sioBVey0.cer (raw, json)
Hash identifier: ZjGMYrP5+QzMMEhdk8S0HibEGbyv5nfNmm5xeMGdKOE=
Subject key identifier: C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B1D2A6F2A196B86F0DFF1074EEAEE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:31:00 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 42201
IP: 45.130.84.0/22
IP: 45.148.4.0/22
IP: 91.240.64.0/22
IP: 193.104.211.0/24
IP: 193.104.222.0/24
IP: 2a10:a000::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:1d:2a:6f:2a:19:6b:86:f0:df:f1:07:4e:ea:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:31:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c5:19:c0:53:e0:09:05:99:8c:31:5b:e2:8e:
5e:90:15:b6:43:46:77:fc:7d:57:2a:ba:c0:b2:75:
01:a5:c7:5c:09:bd:24:98:01:3d:74:c0:3a:c4:75:
8d:16:f7:c4:6e:97:92:fa:b8:00:e5:95:91:2d:87:
97:13:a0:34:c3:c1:9e:ed:7f:8d:c0:60:36:13:16:
60:54:41:c9:d1:e3:c8:6d:d6:9a:86:44:2b:2b:fd:
22:25:22:f4:17:b2:36:ce:ab:98:01:b2:99:a9:f0:
c8:07:11:a7:c5:b8:a0:e1:38:19:4f:c4:60:7a:1f:
a0:b3:4a:af:4d:25:f4:7d:78:6c:7a:78:69:c9:43:
58:46:77:dc:3b:be:2d:bc:6b:0e:95:58:a3:0b:ae:
31:70:ea:1c:18:4e:9e:55:97:bd:9d:fb:9e:69:d0:
8f:6b:a7:e0:75:f2:60:18:64:d7:fe:6e:43:b0:07:
ab:c1:42:3e:2b:f5:52:a1:04:78:e8:de:ed:e6:6e:
a3:d2:05:39:38:4e:0a:3a:10:f0:4a:31:4e:af:ce:
8b:68:19:7f:55:fc:5b:f8:2c:d4:8c:4e:b2:8f:e7:
56:f9:ed:f8:11:6c:d9:78:5e:1e:30:95:a6:82:c0:
0b:6d:8f:8f:7f:64:70:f0:ab:39:b3:32:cf:b8:25:
24:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.84.0/22
45.148.4.0/22
91.240.64.0/22
193.104.211.0/24
193.104.222.0/24
IPv6:
2a10:a000::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42201
Signature Algorithm: sha256WithRSAEncryption
0c:29:2d:ba:93:82:df:1e:7d:78:6e:99:87:9a:8b:c8:f7:9a:
1a:70:e1:22:7c:fc:1b:d2:62:8f:8f:d9:4d:18:c5:e6:d7:7e:
2e:a2:c3:70:a0:53:1b:64:a7:ff:41:4f:e1:c8:20:5e:c9:cd:
01:8f:0b:ad:26:8f:19:f6:6e:3e:58:49:6f:49:84:82:ea:d1:
58:1b:93:b5:77:26:69:b7:0d:ff:b5:f8:51:09:48:e1:d3:0b:
7c:4c:1f:a5:0c:cd:c0:22:d9:a7:14:8f:ef:ae:95:d4:b8:f6:
60:3c:6a:e4:fd:89:97:94:cf:ab:74:e9:59:eb:05:e9:c9:f5:
48:12:4f:42:08:45:3c:f8:de:78:29:01:ae:a3:6c:37:1a:cb:
4f:b2:82:67:8f:36:10:61:1e:e8:f6:db:c5:f6:a6:70:9c:38:
64:fa:4b:f3:24:a3:c7:ba:17:72:2b:2d:f5:6c:29:db:8f:33:
81:64:92:1d:40:c0:0f:9f:ae:a5:78:f0:07:49:69:af:4f:29:
3f:81:b8:0c:7a:f9:28:91:8f:73:a8:1f:66:66:09:78:ba:9a:
b1:6f:9d:9d:e7:22:8d:e5:17:10:60:c8:61:c5:62:9c:77:70:
fa:47:21:eb:84:39:f5:bd:71:e8:3c:fb:3f:af:d9:cc:e0:fe:
16:e3:13:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:26:04 2024 by rpki-client on console-fra.rpki-client.org