Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
File: xalo7bcsFfX5Vn_TQme4dIXvNtE.cer (raw, json)
Hash identifier: wnXtmjdnnMhmcJcHLjhIWpA52MzGP7WC6TTur5DDU8s=
Subject key identifier: C5:A9:68:ED:B7:2C:15:F5:F9:56:7F:D3:42:67:B8:74:85:EF:36:D1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC726EE8B2A19D2BCE8BA9463B6EB46A0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:06 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 12941
AS: 203700
AS: 211660
IP: 185.1.201.0/24
IP: 185.101.132.0/22
IP: 185.101.184.0/22
IP: 213.135.0.0/19
IP: 2001:7f8:10d::/48
IP: 2a02:430::/32
IP: 2a06:1e40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:ee:8b:2a:19:d2:bc:e8:ba:94:63:b6:eb:46:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c5a968edb72c15f5f9567fd34267b87485ef36d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:62:49:3b:99:87:94:23:88:bd:51:9e:81:af:
4b:81:f7:95:97:6c:2b:75:e1:53:3e:37:75:01:29:
84:ea:92:7c:80:db:8b:3d:e6:f8:ca:a7:e2:b7:23:
06:f8:1f:cb:fe:02:57:76:59:29:f2:0a:fa:40:27:
9b:4d:5d:ea:7f:32:59:f8:60:ff:c3:b1:44:04:25:
79:f6:20:50:82:9c:2c:22:90:21:a2:33:44:b8:49:
51:1b:9c:e8:84:a8:0b:e8:76:0c:b7:47:da:eb:9c:
61:09:87:a9:58:22:61:ce:69:ac:c9:f0:46:d2:49:
5d:fc:39:2a:61:b8:18:08:d8:5b:79:74:1b:99:61:
4e:eb:e3:c6:2a:98:f2:21:a5:58:d7:1d:4b:cc:3f:
37:e6:e0:a1:d9:c2:36:19:b0:d3:d9:c2:f0:4a:b6:
58:95:f9:aa:99:90:81:07:bd:d2:bd:9b:c2:b9:43:
3e:b5:79:b5:09:9d:41:5f:c7:1b:f6:20:e8:58:de:
59:5b:3b:22:7f:18:09:51:0a:0d:cf:a8:ca:8c:f5:
37:cd:ca:c0:af:79:16:98:9b:60:86:cd:b4:78:9b:
6d:73:0f:63:63:b1:c8:e0:24:d6:aa:66:68:15:58:
8c:ae:67:e2:05:3d:a4:85:eb:fc:6e:24:a7:03:20:
61:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A9:68:ED:B7:2C:15:F5:F9:56:7F:D3:42:67:B8:74:85:EF:36:D1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.201.0/24
185.101.132.0/22
185.101.184.0/22
213.135.0.0/19
IPv6:
2001:7f8:10d::/48
2a02:430::/32
2a06:1e40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12941
203700
211660
Signature Algorithm: sha256WithRSAEncryption
49:d6:49:ca:56:70:4b:6a:d2:dc:f0:35:7b:5d:47:52:8a:7c:
fe:eb:d1:94:c8:89:26:f8:18:02:f0:04:38:45:2d:89:3a:18:
2c:1c:e8:eb:10:1d:3e:70:18:38:ee:77:4d:61:dd:ee:e4:df:
97:bc:cd:ce:0e:d4:c3:b1:11:a3:95:5d:58:a4:72:b5:da:d2:
d1:c9:d0:a1:b9:7b:71:44:93:52:c0:89:bf:89:5b:16:93:16:
51:33:02:6d:02:eb:2c:dd:7b:da:00:7e:15:ba:af:c5:38:b3:
91:8f:5c:22:49:bd:c1:dd:19:0e:9f:1f:ad:85:7d:91:67:14:
a3:f6:45:14:88:76:69:78:21:de:c9:c5:22:f2:ae:3a:13:e4:
08:bb:47:a2:f2:49:74:84:05:be:86:4d:79:a1:ac:3a:a2:a8:
6f:ab:46:42:df:cd:a9:31:10:4b:e0:58:2a:d5:b9:c2:01:32:
07:db:1b:cf:41:d5:31:98:d0:4b:b3:e1:d5:40:80:c4:4c:32:
ba:06:e8:e1:dd:6d:f7:c0:7f:08:27:eb:91:c8:79:85:f4:c0:
d9:c5:f0:2d:90:64:b5:cf:22:cb:23:ce:8f:1d:5c:14:a8:95:
f9:9f:fa:84:35:e1:4e:92:df:74:be:d4:d0:80:8d:82:6f:e1:
0b:f5:dc:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:26:17 2024 by rpki-client on console-fra.rpki-client.org