Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
File: xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer (raw, json)
Hash identifier: xgwmA/w5Zt1dw3bmpyEUIA5b2SnYib6hMigs1x9qZos=
Subject key identifier: C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0192C9DDE63575528306F48195034865999A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/xfn1DKHDSjvmEASNE4rzwHU6-Ss.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 26 Oct 2024 17:26:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.209.179.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c9:dd:e6:35:75:52:83:06:f4:81:95:03:48:65:99:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 26 17:26:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:fe:ce:5c:64:75:e7:14:80:f8:2f:4e:d0:a1:
2f:0f:df:1c:a8:6e:0c:a4:d8:bc:d7:3b:83:db:b5:
07:08:3f:0d:0d:88:41:71:80:aa:6f:47:f5:fd:81:
21:ab:04:8c:fa:61:9d:53:72:79:ff:40:4d:e3:22:
19:28:b5:cf:bd:3a:b3:16:ce:76:a1:d9:c4:32:4d:
44:b4:f0:1e:41:93:39:08:0f:20:4a:49:20:d8:51:
33:73:a7:a9:ac:be:99:f6:7c:fb:c5:93:dc:7b:76:
24:ef:65:77:ff:f6:69:21:4c:ec:e5:cd:d5:64:a9:
dc:92:9a:5c:a6:69:84:75:e3:e5:cb:46:31:e1:62:
9c:6a:4d:26:01:5f:3e:e6:0f:ed:01:86:01:ad:c5:
42:86:f8:52:36:c3:f1:94:86:25:59:29:8c:b8:64:
1b:a4:4d:39:46:72:ba:34:9a:49:cc:7b:05:53:a7:
d2:a1:c0:6a:a2:19:7d:24:30:30:25:5a:aa:3a:4c:
1a:c0:42:18:d2:a0:b1:9c:ea:c0:45:c0:d8:b9:5e:
2c:d0:b0:5c:cb:72:8b:0f:10:e7:08:3c:2c:aa:7f:
a8:f7:9a:aa:a6:fd:55:f3:fb:4d:c5:ee:a7:34:c3:
08:19:77:16:28:fd:1e:50:90:8e:7b:5e:7e:e2:75:
29:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/xfn1DKHDSjvmEASNE4rzwHU6-Ss.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.179.0/24
Signature Algorithm: sha256WithRSAEncryption
26:36:5b:82:ea:52:8b:15:79:9d:3d:91:f0:d9:21:c1:50:ea:
5f:c1:00:ba:dd:3f:6a:1a:ca:aa:b5:aa:b1:76:7a:a2:f6:be:
c6:fb:5c:8c:8e:e5:26:58:46:5d:be:3d:a6:4b:45:0d:a4:91:
f5:12:87:54:24:43:4d:60:c7:4c:c5:f1:12:b7:29:15:ef:fd:
29:fa:49:15:31:7b:b0:63:4f:3a:62:59:b3:db:ef:61:d0:be:
68:db:4a:c7:a5:9e:80:75:a1:e1:27:f8:81:b6:d4:06:04:43:
04:3b:9a:52:ad:98:36:93:f9:5d:64:a3:af:8f:d4:1b:95:14:
1f:9c:aa:4d:08:d6:47:64:a3:51:48:4c:c4:2b:e6:f8:bc:df:
e3:d6:7d:d1:d6:7b:6a:25:de:ed:2a:80:f4:b9:15:9b:27:28:
ad:e8:2d:ed:dd:e9:bc:cd:a2:d1:77:87:41:ed:6e:a7:d9:f8:
43:0c:cc:e5:3b:84:0f:0e:0c:d2:d0:2b:5c:b9:19:7f:97:76:
ba:f3:bb:37:9f:c9:9e:b3:a6:74:5b:02:3f:29:0a:c2:85:78:
95:1d:29:a9:8e:fb:8f:8a:40:69:a6:6b:3b:c1:14:91:a3:46:
c0:6c:16:d7:e7:ec:fc:06:43:30:eb:74:5f:79:26:bd:09:cf:
e9:ba:fb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:32:15 2024 by rpki-client on console-ams.rpki-client.org