Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xhNeSs-WE5zl_yz92V9VqBdtcyQ.cer
File: xhNeSs-WE5zl_yz92V9VqBdtcyQ.cer (raw, json)
Hash identifier: yzp/KxocGdCJsqFzKCALwycDfOtkXYfmGnn1YYxNttQ=
Subject key identifier: C6:13:5E:4A:CF:96:13:9C:E5:FF:2C:FD:D9:5F:55:A8:17:6D:73:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC3C14BD58E2027E3C1608C63DC3B5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:54 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 31.24.216.0/21
IP: 91.209.144.0/24
IP: 185.4.240.0/22
IP: 2a02:7140::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:3c:14:bd:58:e2:02:7e:3c:16:08:c6:3d:c3:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6135e4acf96139ce5ff2cfdd95f55a8176d7324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5d:f6:7f:ec:68:85:c1:5f:e1:d6:8d:58:4a:
42:0c:32:b2:62:50:79:7e:74:18:b7:8f:76:f2:0d:
dd:ca:4e:18:23:fb:42:a5:21:76:ba:1b:00:cf:a4:
6f:60:10:1d:96:d1:6c:35:a5:58:7a:58:1f:dd:a7:
37:65:62:cc:f5:31:4d:16:3a:bb:7e:bd:c0:cb:33:
85:f6:49:bf:a0:b1:a0:82:82:06:ea:27:f1:c3:99:
ff:4e:7d:e6:64:03:65:2f:cd:7a:db:2c:e4:d6:68:
18:27:86:a2:8e:e0:b8:95:e6:f6:4d:c0:32:15:54:
5b:ec:c2:86:f2:98:bd:33:c0:95:9b:43:ec:5b:da:
c0:a5:2b:a0:8a:90:a3:99:5d:5a:82:00:c3:89:89:
06:7f:ec:13:4b:cb:59:60:3c:86:80:79:5c:5d:9e:
89:a2:7e:fa:3f:34:c7:68:9d:9f:bf:9a:82:38:65:
07:ee:ca:10:be:61:f2:fa:e2:aa:a3:93:b0:80:f2:
53:57:92:35:01:7b:af:64:79:b3:ca:88:5c:e2:2d:
5e:7e:c9:d0:0d:a3:12:a4:65:ff:74:f4:00:6d:48:
18:1e:fa:a9:ef:55:53:25:3f:e8:e4:76:50:ba:f9:
ce:46:c1:9d:03:83:02:6e:dd:4d:a3:68:b2:6c:74:
26:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:13:5E:4A:CF:96:13:9C:E5:FF:2C:FD:D9:5F:55:A8:17:6D:73:24
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.216.0/21
91.209.144.0/24
185.4.240.0/22
IPv6:
2a02:7140::/32
Signature Algorithm: sha256WithRSAEncryption
84:03:fe:f7:16:a9:ca:be:c0:20:30:a3:81:8b:cb:73:2e:15:
40:c7:03:7e:71:0a:86:00:fd:cf:35:1a:be:5d:ad:94:b9:b2:
e3:b7:72:56:78:dd:c3:e4:52:f7:51:15:c2:91:ea:22:23:48:
48:10:91:b7:82:ea:38:b4:d0:1e:dd:dd:58:e6:39:1d:ec:a7:
60:53:08:a7:63:a2:29:bc:cf:d9:25:98:01:ea:66:e1:d6:7f:
fb:d4:13:4a:aa:73:3d:3d:e8:89:b2:d9:9f:e3:5e:15:9b:2c:
83:e5:32:4c:9c:d6:4e:fa:98:f1:23:c2:a1:ca:18:0b:20:ff:
b9:dc:a6:40:e1:55:77:9c:1e:d2:27:1f:1d:58:b3:2e:ac:36:
d4:93:eb:fe:43:4e:a2:7e:4f:6d:ea:c1:5e:1e:12:17:c6:46:
dd:3e:44:64:4a:08:02:17:d8:a8:de:5c:2c:02:24:de:d0:d6:
7d:c1:76:5d:e4:55:0b:fa:62:fb:25:0a:83:df:78:26:41:da:
f3:b4:8e:e1:1b:ca:1f:13:05:47:03:af:29:f3:53:4c:94:f4:
eb:6f:ef:92:57:a6:0e:ad:4a:10:58:d1:ce:1f:f9:8b:1b:3f:
b5:5c:8e:21:c8:07:d3:a7:f1:dc:7e:40:c0:6b:95:88:49:e7:
35:d7:35:ec
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgISAYzF3DwUvVjiAn48FgjGPcO1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTYyOTU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjEzNWU0YWNmOTYxMzljZTVmZjJjZmRkOTVmNTVhODE3NmQ3MzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmV32f+xohcFf4daNWEpCDDKyYlB5
fnQYt4928g3dyk4YI/tCpSF2uhsAz6RvYBAdltFsNaVYelgf3ac3ZWLM9TFNFjq7
fr3AyzOF9km/oLGggoIG6ifxw5n/Tn3mZANlL8162yzk1mgYJ4aijuC4leb2TcAy
FVRb7MKG8pi9M8CVm0PsW9rApSugipCjmV1aggDDiYkGf+wTS8tZYDyGgHlcXZ6J
on76PzTHaJ2fv5qCOGUH7soQvmHy+uKqo5OwgPJTV5I1AXuvZHmzyohc4i1efsnQ
DaMSpGX/dPQAbUgYHvqp71VTJT/o5HZQuvnORsGdA4MCbt1No2iybHQmiwIDAQAB
o4ICnzCCApswHQYDVR0OBBYEFMYTXkrPlhOc5f8s/dlfVagXbXMkMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc5LzZmNmYw
ZC1lNmRmLTRmMmItODBkZi00NjZiMGNkOGI3NWEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzkvNmY2ZjBk
LWU2ZGYtNGYyYi04MGRmLTQ2NmIwY2Q4Yjc1YS8xL3hoTmVTcy1XRTV6bF95ejky
VjlWcUJkdGN5US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF
BwEHAQH/BCswKTAYBAIAATASAwQDHxjYAwQAW9GQAwQCuQTwMA0EAgACMAcDBQAq
AnFAMA0GCSqGSIb3DQEBCwUAA4IBAQCEA/73FqnKvsAgMKOBi8tzLhVAxwN+cQqG
AP3PNRq+Xa2UubLjt3JWeN3D5FL3URXCkeoiI0hIEJG3guo4tNAe3d1Y5jkd7Kdg
UwinY6IpvM/ZJZgB6mbh1n/71BNKqnM9PeiJstmf414VmyyD5TJMnNZO+pjxI8Kh
yhgLIP+53KZA4VV3nB7SJx8dWLMurDbUk+v+Q06ifk9t6sFeHhIXxkbdPkRkSggC
F9io3lwsAiTe0NZ9wXZd5FUL+mL7JQqD33gmQdrztI7hG8ofEwVHA68p81NMlPTr
b++SV6YOrUoQWNHOH/mLGz+1XI4hyAfTp/HcfkDAa5WISec11zXs
-----END CERTIFICATE-----
Generated at Fri May 3 07:35:22 2024 by rpki-client on console-ams.rpki-client.org