Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
File: xVa8y9yfLkutwKBX6gj3x0gYix8.cer (raw, json)
Hash identifier: DTOEUDfXrweKbS/7+IY01SZ6IgsG3eH63kDGNVLx80I=
Subject key identifier: C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7275CCEE4576B563489B43A565EF33A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.203.84.0/22
IP: 2a0a:e4c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:5c:ce:e4:57:6b:56:34:89:b4:3a:56:5e:f3:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:95:9e:27:5c:56:f7:b8:ef:eb:3b:5c:24:17:
06:9f:35:cb:b5:1f:e3:61:b3:c9:d8:83:61:43:b4:
98:ed:75:93:a7:0b:f4:a1:d8:07:b4:e9:e7:28:6e:
21:2f:5f:60:2e:83:2b:61:b0:02:f4:03:d4:ea:bd:
0a:67:4d:58:3f:dc:9d:19:c4:70:e4:eb:14:74:34:
d4:a5:ee:44:f3:09:36:31:75:a0:14:a3:2c:98:bc:
25:47:32:37:32:4e:b0:9c:f9:c8:19:92:02:c9:94:
b5:bf:5b:7b:ae:a8:49:3c:47:10:05:ad:ab:7c:d1:
7d:cb:56:a7:a4:89:50:8b:a7:ef:d2:d9:d9:fb:b6:
a8:b2:ae:b0:fe:40:39:96:b4:cf:f4:48:3f:66:0e:
4f:4e:73:81:58:f2:ec:93:65:d8:5a:63:77:aa:7d:
25:9e:00:fc:0c:ae:d7:7c:54:3b:e4:02:2e:32:13:
d9:ff:f6:a2:2a:c5:33:4b:a0:27:95:8f:a2:fc:a4:
8a:ac:1a:19:f1:0d:f2:c6:a9:ae:dd:69:d4:81:45:
10:d3:b2:7c:f5:df:fb:2b:a6:c5:2d:71:6d:a7:c8:
bc:a6:52:31:5b:28:c8:9c:44:40:cc:43:fe:1b:c7:
6e:8b:88:9d:69:88:1a:7e:12:13:64:ea:d3:d5:1e:
f9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.84.0/22
IPv6:
2a0a:e4c0::/29
Signature Algorithm: sha256WithRSAEncryption
07:13:28:c2:fa:dc:3e:f9:3a:db:76:2b:c9:67:17:8f:1a:a3:
f7:ea:df:dc:f7:92:a4:d6:43:f5:cb:1e:3d:41:a3:97:13:77:
b4:17:b7:78:dc:e3:d2:62:d9:2a:aa:9d:56:09:0e:b3:51:0f:
b5:6f:3b:94:78:71:aa:61:38:8a:ea:28:1f:03:35:71:a1:24:
cb:a7:fb:5d:49:46:a2:ef:cd:14:5b:91:a0:c2:df:ec:d1:d5:
2c:87:93:7e:0a:ef:df:03:2f:b4:36:10:1b:2b:4f:04:5a:19:
b1:30:ef:ba:05:64:42:47:da:f5:8a:01:2a:58:d6:60:0e:0d:
51:a6:92:0c:39:ad:c8:e6:55:7e:e9:9b:63:5e:12:3a:d7:87:
dc:fc:39:1c:48:80:f2:29:a4:8b:35:31:61:01:1e:37:fc:e0:
ff:5e:e6:76:94:eb:e0:81:2c:f3:61:1e:4d:bc:71:8c:44:fd:
4d:f7:e4:81:6d:31:73:84:9c:f9:61:94:cb:35:0a:72:e5:4d:
95:2a:74:3e:24:f5:4e:40:2a:bd:fd:4c:3d:bc:b1:7f:c3:b7:
3a:b8:af:ea:86:ab:b2:e0:20:47:76:49:70:17:b0:d6:b7:80:
41:b1:64:4b:82:86:29:c8:72:3d:b8:41:c7:f4:06:ca:be:de:
c6:e7:7a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:19:44 2024 by rpki-client on console-ams.rpki-client.org