Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xVOGkxZ6_UxarlHep-Xz-ZumW-k.cer
File: xVOGkxZ6_UxarlHep-Xz-ZumW-k.cer (raw, json)
Hash identifier: qldFvryKFB/7dMy1+F9S6vK9d/6gsCFpDFxExBm53zw=
Subject key identifier: C5:53:86:93:16:7A:FD:4C:5A:AE:51:DE:A7:E5:F3:F9:9B:A6:5B:E9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DD523C71E75A056B97443F69CD4746B54
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 23 Feb 2024 08:45:08 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 207275
IP: 91.226.33.0/24
IP: 2a10:3180::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d5:23:c7:1e:75:a0:56:b9:74:43:f6:9c:d4:74:6b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 23 08:45:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c5538693167afd4c5aae51dea7e5f3f99ba65be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:18:25:8e:e6:83:5c:23:a6:c2:db:4d:e2:a6:
4d:fa:89:96:e9:b3:a4:60:99:76:70:fa:71:82:2c:
91:53:27:da:43:30:1b:5a:f2:de:ee:6f:ee:c2:02:
c9:d9:f1:00:c6:d5:49:80:f7:8f:44:15:ef:01:5f:
3d:ea:03:16:6e:fb:b9:22:47:2a:94:a6:74:ac:70:
22:9c:b2:ac:f0:82:b2:64:43:0d:2d:8a:0d:ea:71:
04:0d:34:fb:b2:f8:02:5a:96:67:97:10:87:29:4c:
d8:8d:5d:a7:dc:22:0f:1b:66:20:5d:c9:6b:cf:30:
1c:fd:39:28:67:a2:18:df:44:f5:45:ab:3d:82:ee:
7b:4c:90:1d:42:91:d5:82:66:ac:56:c0:b6:7b:b4:
e9:98:19:92:3f:8f:de:90:62:07:05:90:29:5b:0e:
62:a2:e4:53:8a:06:d5:f0:78:2f:d3:c3:5a:a7:4a:
c1:98:4a:43:32:4f:9d:2c:53:b2:a0:04:13:7d:11:
d3:56:01:28:e3:9e:ce:86:53:c8:7f:f5:2e:a9:fe:
e7:20:a9:a6:54:07:67:c2:de:13:67:60:47:f4:1b:
e7:74:59:d5:80:2e:1d:16:ce:09:a6:08:ae:58:d2:
d6:e8:06:96:ee:78:ed:16:1c:79:a7:8e:b4:32:3d:
ad:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:53:86:93:16:7A:FD:4C:5A:AE:51:DE:A7:E5:F3:F9:9B:A6:5B:E9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.33.0/24
IPv6:
2a10:3180::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207275
Signature Algorithm: sha256WithRSAEncryption
ab:a8:6e:29:60:01:7b:51:51:b9:15:22:b7:8a:02:ed:7b:6d:
df:db:67:08:cb:a7:6f:f5:8c:cf:b5:ab:75:5c:2e:79:d1:17:
2d:5d:42:d2:2d:79:4e:10:82:6c:0c:2d:04:c7:d9:d0:0e:31:
fc:e6:c8:85:9f:c3:6e:c3:0d:ca:9a:83:79:4f:7c:71:92:9a:
64:9e:57:37:56:13:81:08:08:a5:fa:db:1f:1c:29:11:91:4d:
36:34:94:48:5d:fc:48:21:c2:99:8e:79:08:b2:92:e2:8e:aa:
f9:21:cc:6e:95:12:a1:19:85:e1:87:9a:2b:9e:57:19:b0:9b:
c7:9f:60:bf:8e:9f:91:14:d2:7a:a6:e4:48:e4:74:59:e0:78:
a8:68:66:ca:d8:f0:65:d4:29:15:47:ae:e3:60:ae:46:86:cc:
61:f8:4f:1d:4b:c2:e7:09:06:25:ba:dc:0e:3a:e2:ad:f8:5b:
9c:6c:ad:f3:9d:b8:7b:5f:f5:bf:a8:17:4a:33:c7:00:60:3e:
38:3c:f6:fd:75:85:26:77:ed:8a:c0:80:56:3a:1a:3b:a9:53:
3e:7b:d7:5a:48:75:c7:ec:80:7f:5d:62:b4:d8:7d:a0:a4:3b:
27:d3:07:bf:73:a9:8c:f2:70:fa:fc:44:6e:d0:5e:0c:bb:35:
15:ba:53:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:51:05 2024 by rpki-client on console-fra.rpki-client.org