Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xU3YgoUsxFhrH-40wFAdXbfWDws.cer
File: xU3YgoUsxFhrH-40wFAdXbfWDws.cer (raw, json)
Hash identifier: DVRiVe5Ke9xF+Sj5VcDFxXp0NZecrNJLvG4mISbVEs0=
Subject key identifier: C5:4D:D8:82:85:2C:C4:58:6B:1F:EE:34:C0:50:1D:5D:B7:D6:0F:0B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC649D3AC2F689EE3FC404CE5E896705D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:29:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 204572
IP: 185.246.144.0/22
IP: 2a0d:8580::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:d3:ac:2f:68:9e:e3:fc:40:4c:e5:e8:96:70:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c54dd882852cc4586b1fee34c0501d5db7d60f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9f:8d:50:1c:dc:9a:70:2e:ff:6c:72:f5:7b:
f2:16:f2:1a:75:f8:41:0c:84:8b:c4:4e:b7:ab:a5:
3b:b7:ad:47:9e:ef:ab:63:01:bc:2a:ae:8b:8d:58:
9d:2f:ac:4e:df:bd:a7:d8:f5:0b:c2:29:65:c4:cc:
57:be:2f:d5:fe:32:b2:2a:77:5d:2b:d1:4e:5c:3f:
48:25:78:72:5e:1a:2b:f4:41:89:af:d7:62:3b:77:
94:28:f7:f3:f0:fd:7b:fd:ae:4c:b3:4a:09:6c:44:
2c:37:b8:cc:50:d2:96:41:4b:9b:77:ca:e5:b9:21:
4d:4d:d4:71:fb:c9:14:a9:f4:6b:7a:47:04:39:72:
70:bc:9a:5d:26:b1:4a:1d:d9:14:31:94:aa:b7:b0:
31:d8:e9:24:70:43:01:22:89:74:e0:39:82:8c:a6:
42:cb:2f:60:aa:99:f6:07:64:58:63:78:e2:78:94:
f0:1f:16:fa:ca:fb:d0:36:d1:5f:79:ed:9d:09:c0:
96:5c:07:42:c8:d5:c7:9e:63:80:a1:d9:17:0a:bc:
50:a7:0a:fd:48:1b:24:fa:2a:5e:c7:1a:59:dc:5c:
fc:4a:4a:4e:71:75:92:f5:ef:2b:1f:bb:b0:de:4e:
83:0d:3f:12:71:c0:6e:52:bd:d5:a0:18:af:04:00:
c4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4D:D8:82:85:2C:C4:58:6B:1F:EE:34:C0:50:1D:5D:B7:D6:0F:0B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.144.0/22
IPv6:
2a0d:8580::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204572
Signature Algorithm: sha256WithRSAEncryption
9e:68:30:2f:88:82:50:f3:5c:cf:fd:da:27:f4:ea:1d:bb:70:
dd:b7:b7:f3:2f:f0:c8:6b:7b:57:cf:f9:a5:fe:77:30:f9:41:
58:09:b9:69:66:81:b8:29:83:9c:64:87:6d:74:84:23:2f:5f:
b4:9e:0a:f7:8e:3e:56:1c:4e:b4:5c:0c:49:d1:4e:66:59:d1:
2c:dc:1e:b0:dc:d2:5e:51:81:dc:46:7b:88:18:ec:e2:b2:85:
76:a6:88:c9:69:c0:7e:79:57:09:b9:a8:c7:6c:ee:21:20:e2:
6c:f8:ab:0a:b2:a6:8b:e3:ab:18:57:0c:c4:29:0d:14:27:01:
a5:27:90:e7:dc:33:2b:6b:bb:66:61:91:43:94:ab:98:a5:d3:
73:c1:a2:0a:4b:e0:de:b0:10:2c:42:b9:66:1b:58:a5:4f:2a:
e0:7d:d4:1d:be:84:28:62:71:f6:b3:47:11:20:53:db:30:ec:
34:f5:65:ef:5c:d0:f7:d7:f8:3b:50:bd:23:40:9f:c8:2f:9e:
a2:27:52:61:01:5e:52:c2:28:ac:69:91:51:c9:be:29:7c:ab:
62:ee:93:ef:ae:45:3a:49:dd:b8:ed:8b:7e:92:9f:1c:71:86:
dd:d5:b6:11:56:69:1f:e5:56:2a:bb:88:da:ab:0a:83:4f:e5:
9a:92:cb:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:19:43 2024 by rpki-client on console-ams.rpki-client.org