Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xRCtRomJb7hQznkP3-NE1MAnpa4.cer
File: xRCtRomJb7hQznkP3-NE1MAnpa4.cer (raw, json)
Hash identifier: qnObTjurxYJGgybJsNrgwGgueDAXcPSrrxdN0w+bqpg=
Subject key identifier: C5:10:AD:46:89:89:6F:B8:50:CE:79:0F:DF:E3:44:D4:C0:27:A5:AE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC801717EF7B1F69FF03B25673D754ABD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/65f954-3f88-4357-9642-9a16d9c0caf7/1/xRCtRomJb7hQznkP3-NE1MAnpa4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/65f954-3f88-4357-9642-9a16d9c0caf7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:46 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208557
IP: 45.129.72.0/22
IP: 2a0e:45c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:71:7e:f7:b1:f6:9f:f0:3b:25:67:3d:75:4a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c510ad4689896fb850ce790fdfe344d4c027a5ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:15:31:6e:1d:74:4f:ea:fb:c1:cc:ec:bf:00:
2f:dc:98:bf:f5:41:f9:d1:da:b4:c9:80:ac:64:a8:
6e:17:38:22:08:62:06:7e:4a:d2:ac:d6:10:f3:7f:
ee:29:f0:7d:98:e5:a1:7f:48:ce:06:f7:b8:dc:db:
ff:30:33:8d:44:cd:55:c0:ed:04:98:1e:c4:45:cb:
b7:df:65:76:f9:95:3a:c1:fb:53:80:66:25:c6:bf:
d0:9f:c1:71:3c:ea:0d:f0:8f:84:a4:fd:cc:98:37:
f9:00:58:8d:c7:10:8f:57:35:62:ac:e9:76:19:48:
96:97:2a:bf:71:22:72:f3:e6:38:e1:38:52:18:13:
d9:93:63:c9:e5:91:82:9b:b0:92:c0:9b:e6:95:35:
b7:1e:ea:32:af:18:98:70:2b:a1:7c:ab:16:85:d1:
8f:25:36:46:35:ae:7d:25:54:b3:c3:14:86:4f:5d:
e2:f2:29:29:f7:c6:88:cc:60:59:82:09:e8:cd:13:
8e:1c:d5:5c:05:33:d3:bd:1b:ba:a1:b7:a9:a6:9f:
07:94:ae:c6:13:9e:ae:64:4a:bc:8b:13:96:1e:ed:
a5:3f:b4:3a:d8:92:9c:96:a7:6f:d5:9f:ce:18:1c:
b5:eb:cf:1a:54:ce:a0:44:04:75:8d:71:1e:4c:06:
95:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:10:AD:46:89:89:6F:B8:50:CE:79:0F:DF:E3:44:D4:C0:27:A5:AE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/65f954-3f88-4357-9642-9a16d9c0caf7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/65f954-3f88-4357-9642-9a16d9c0caf7/1/xRCtRomJb7hQznkP3-NE1MAnpa4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.72.0/22
IPv6:
2a0e:45c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208557
Signature Algorithm: sha256WithRSAEncryption
1c:2c:77:9b:f6:ec:e1:72:b5:14:17:65:8d:cb:f1:32:93:65:
71:25:92:ae:45:9a:2c:70:19:1b:d3:5d:09:d7:20:6a:3c:42:
28:49:34:88:b4:aa:76:4c:49:2d:90:a6:25:b2:35:c5:a8:be:
3c:76:1c:fc:b9:30:74:3d:35:43:cc:e3:45:23:18:0a:d1:6b:
2c:c7:15:fd:89:ae:f1:46:4a:43:01:27:76:7c:ca:5a:b0:85:
96:26:2b:cb:ed:b5:9f:9b:5d:b6:8c:a6:9b:31:62:fd:b2:7e:
4e:d1:46:f3:9d:8d:99:5c:bf:b1:65:d7:2a:ff:19:8b:98:72:
4a:ec:c4:f7:42:91:ec:c4:7f:16:6e:77:71:62:82:95:7f:60:
db:37:64:c9:c4:b3:a4:8b:54:82:9f:1c:29:51:5e:76:1e:6e:
bb:5c:9c:e8:db:4a:9e:91:20:4f:60:d2:fc:b3:78:a7:03:0a:
72:95:3a:7d:1d:f3:26:69:e6:d9:91:2b:ca:f5:56:ee:fd:24:
48:d9:79:56:f5:c5:92:51:57:9d:70:f3:6b:35:e6:43:4b:cb:
a0:31:df:e9:7b:fe:85:0f:06:b4:52:c8:6e:f0:69:84:f7:eb:
5d:ac:d5:f2:e4:8b:03:12:d8:94:90:40:91:2b:2f:c3:2d:70:
76:e8:2e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:51:02 2024 by rpki-client on console-fra.rpki-client.org