Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer
File: xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer (raw, json)
Hash identifier: G8NTGCdclnQCHZyjF/B5tih8yc6vLuLRjLbzdhnrRDw=
Subject key identifier: C5:B1:18:2D:31:79:6F:A6:3E:C3:C1:D9:B9:7C:B6:AA:AC:34:FD:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC348F7393B2C7276E3D1F778728DCB76
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:48 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 44085
IP: 91.199.23.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:f7:39:3b:2c:72:76:e3:d1:f7:78:72:8d:cb:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c5b1182d31796fa63ec3c1d9b97cb6aaac34fdd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:80:96:23:39:02:7c:95:84:f0:2a:52:8a:8a:
4c:73:2c:a7:b4:2f:4a:a9:5c:58:29:10:94:99:25:
21:40:21:3d:40:bd:b7:76:53:70:63:aa:13:cd:30:
12:d4:1b:72:10:e6:df:9a:55:5f:92:30:39:d9:ab:
d6:d0:ee:00:c9:10:26:cc:6e:77:6a:10:d5:b5:66:
d7:47:77:73:8f:ce:98:c9:11:c7:52:a7:0f:e9:9d:
39:a0:70:e8:e5:92:a7:56:02:2c:a1:cc:52:fc:84:
6d:2a:85:80:14:72:6d:ba:24:f1:e1:bc:e6:22:80:
67:19:21:ee:6a:32:f5:06:b0:b6:01:d4:6e:99:77:
d5:fd:0d:6b:6d:0a:46:75:3e:2e:65:68:ab:3e:f5:
9a:e9:55:5f:4b:a8:61:74:85:a1:95:e2:f0:1e:24:
bf:93:22:33:b0:0d:f0:c2:7e:75:3b:2b:a4:b6:e9:
c8:f9:d3:f3:d3:96:16:ab:7a:cf:1c:a7:16:b9:7f:
5f:84:2b:5d:9a:03:9c:e7:44:80:62:12:a2:97:e2:
14:79:f5:ef:93:4a:f5:7f:e8:1f:cf:57:60:02:eb:
31:74:14:89:1f:46:d5:58:dc:49:69:18:f7:95:ec:
75:9d:bc:76:86:aa:07:c7:19:96:86:df:81:e9:c9:
01:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B1:18:2D:31:79:6F:A6:3E:C3:C1:D9:B9:7C:B6:AA:AC:34:FD:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.23.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44085
Signature Algorithm: sha256WithRSAEncryption
73:85:9d:a8:4f:9d:85:8a:bd:c0:fc:3d:33:40:83:86:25:5f:
be:eb:89:e2:83:80:bf:c7:92:80:47:d7:11:c7:53:64:87:14:
87:4e:95:ca:97:ea:70:a3:2b:48:a1:34:17:23:4e:14:f6:33:
b2:a9:6b:63:d5:54:6d:6a:26:2a:52:64:58:62:57:19:7c:b7:
14:f8:e7:b3:c8:a4:93:e1:9a:d7:fd:70:5f:41:3c:4e:cf:f0:
4c:d9:4c:0a:b5:8c:b0:cc:8e:83:e7:a7:3e:ab:c6:e8:61:34:
eb:8f:ca:84:48:d3:e5:4a:6e:c0:11:c2:04:20:68:d3:d2:e7:
0f:63:6b:de:c9:c5:4a:c7:0b:a5:0c:55:e0:7e:63:59:d4:b5:
f9:44:f6:0a:6f:c9:03:87:e7:28:e7:50:b8:7d:99:6f:26:83:
b9:3f:45:73:5d:23:34:8c:0d:ff:25:ad:cb:62:67:ce:70:7f:
5f:c8:a3:73:a4:d0:8a:07:22:b2:a0:6a:6e:e4:ab:dd:ec:bc:
b6:e9:f5:a1:89:15:ae:78:e1:97:fe:29:db:1a:f3:d5:da:c7:
98:f0:27:f8:fb:81:74:b6:dc:48:b4:f2:5b:df:8a:54:55:23:
28:5e:f6:9c:48:b2:7a:62:37:e8:15:f8:03:9b:20:8e:ec:9d:
59:62:96:09
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYzDSPc5OyxyduPR93hyjct2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDQyOTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNWIxMTgyZDMxNzk2ZmE2M2VjM2MxZDliOTdjYjZhYWFjMzRmZGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYCWIzkCfJWE8CpSiopMcyyntC9K
qVxYKRCUmSUhQCE9QL23dlNwY6oTzTAS1BtyEObfmlVfkjA52avW0O4AyRAmzG53
ahDVtWbXR3dzj86YyRHHUqcP6Z05oHDo5ZKnVgIsocxS/IRtKoWAFHJtuiTx4bzm
IoBnGSHuajL1BrC2AdRumXfV/Q1rbQpGdT4uZWirPvWa6VVfS6hhdIWhleLwHiS/
kyIzsA3wwn51OyuktunI+dPz05YWq3rPHKcWuX9fhCtdmgOc50SAYhKil+IUefXv
k0r1f+gfz1dgAusxdBSJH0bVWNxJaRj3lex1nbx2hqoHxxmWht+B6ckB2QIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFMWxGC0xeW+mPsPB2bl8tqqsNP3ZMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UyLzBkMzAz
Mi1iZGE0LTRjNmItODFjOS05MjQxNjAwNzE1OGUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIvMGQzMDMy
LWJkYTQtNGM2Yi04MWM5LTkyNDE2MDA3MTU4ZS8xL3hiRVlMVEY1YjZZLXc4SFp1
WHkycXF3MF9kay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW8cXMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwCsNTANBgkqhkiG9w0BAQsFAAOCAQEAc4WdqE+dhYq9wPw9M0CDhiVfvuuJ4oOA
v8eSgEfXEcdTZIcUh06VypfqcKMrSKE0FyNOFPYzsqlrY9VUbWomKlJkWGJXGXy3
FPjns8ikk+Ga1/1wX0E8Ts/wTNlMCrWMsMyOg+enPqvG6GE064/KhEjT5UpuwBHC
BCBo09LnD2Nr3snFSscLpQxV4H5jWdS1+UT2Cm/JA4fnKOdQuH2ZbyaDuT9Fc10j
NIwN/yWty2JnznB/X8ijc6TQigcisqBqbuSr3ey8tun1oYkVrnjhl/4p2xrz1drH
mPAn+PuBdLbcSLTyW9+KVFUjKF72nEiyemI36BX4A5sgjuydWWKWCQ==
-----END CERTIFICATE-----
Generated at Fri May 3 11:06:59 2024 by rpki-client on console-fra.rpki-client.org