Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
File: xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer (raw, json)
Hash identifier: wu0RUeQJwynQddpv+HxFG+weXN/U00hTEPs73n/DwNI=
Subject key identifier: C6:18:50:17:3C:8D:28:D5:AF:BF:91:09:1C:A6:3E:5D:A3:C7:5E:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4936F1F303EA03138FB99A944A288FA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:45 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 207661
IP: 194.32.161.0/24
IP: 194.32.163.0/24
IP: 194.32.165.0/24
IP: 194.32.203.0/24
IP: 2a05:5100::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:6f:1f:30:3e:a0:31:38:fb:99:a9:44:a2:88:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c61850173c8d28d5afbf91091ca63e5da3c75ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:80:58:2b:1d:41:24:12:3a:95:9d:5b:92:25:
80:aa:5c:04:6d:80:df:e3:28:11:1b:aa:a0:e7:28:
4d:1a:fe:af:58:43:8a:78:d7:4a:53:eb:7d:a4:7e:
91:c2:e3:e8:fc:6b:34:8c:d4:a5:96:5c:9b:8e:bb:
9b:d5:64:50:3b:c9:c1:4e:84:a1:f6:f9:e9:68:42:
6a:22:9f:ab:65:ee:b3:bb:a3:b3:cc:d6:95:7d:3c:
fa:7b:98:22:b6:b1:44:96:3c:f5:9b:ce:a8:a4:c3:
f5:f1:21:55:b1:af:25:cc:75:47:c8:da:27:42:f6:
be:07:5d:12:f7:6d:47:8b:b8:1f:d9:7d:e7:a2:e6:
fb:7c:29:95:b5:b9:9a:5b:17:a3:46:44:25:72:eb:
f3:ef:24:01:1e:e7:ad:27:70:c2:92:3b:c1:23:e5:
4d:10:20:4c:76:51:48:c8:c9:f1:90:2a:f8:d6:7c:
2e:b7:47:7c:fd:7f:cd:69:42:d1:3b:b1:39:11:ee:
6b:db:de:42:cb:a0:21:f2:a4:09:a0:a6:11:ec:ad:
f1:28:b5:5d:b4:4a:6b:61:14:14:4d:62:62:1a:d6:
36:c5:27:83:bf:af:2e:68:6e:da:44:79:2e:5f:fc:
9b:a0:bf:35:b8:2b:2a:cb:8d:ca:b7:5d:2d:3a:81:
f8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:18:50:17:3C:8D:28:D5:AF:BF:91:09:1C:A6:3E:5D:A3:C7:5E:D4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.161.0/24
194.32.163.0/24
194.32.165.0/24
194.32.203.0/24
IPv6:
2a05:5100::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207661
Signature Algorithm: sha256WithRSAEncryption
55:6d:a3:86:9a:78:ac:1a:3e:aa:ec:e5:05:a1:d4:2e:de:12:
87:35:0b:98:6a:6f:4d:42:ee:b3:ac:e3:5e:98:b8:cf:11:e8:
3c:a3:f4:79:5c:20:7b:ac:76:e7:93:09:c2:33:4f:c4:44:1a:
b2:02:db:fd:5b:6f:e0:34:ab:63:d0:b1:3e:7d:c0:a5:be:51:
9b:f4:c7:d1:cf:1c:ab:fc:09:6a:b9:8b:cb:bf:fd:26:cd:60:
32:54:d5:83:98:5d:3f:77:a3:4b:6d:4e:1a:db:f2:3d:ad:18:
18:38:64:41:df:17:c4:56:16:8b:39:22:8c:c8:f3:65:69:e1:
09:8d:42:fe:89:1c:49:04:db:56:42:4f:76:e3:79:66:b3:df:
b8:11:71:be:42:54:85:5f:2c:c5:52:cc:1f:6d:3a:92:04:2d:
63:c8:ca:bd:77:e8:c8:0a:46:7a:82:cd:e3:17:48:0a:fd:80:
d5:bf:64:5a:53:27:5d:14:77:28:89:69:1a:7b:34:00:6c:2b:
c1:f0:53:3a:98:40:42:ab:84:50:2f:c2:fa:3e:f3:87:ef:71:
b7:99:d4:c4:c2:1f:ae:0c:65:4f:6d:ec:a0:55:47:95:bb:5f:
08:25:0c:2a:37:71:45:13:57:9c:37:0f:b0:af:47:8d:f4:16:
f5:43:8c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:19:52 2024 by rpki-client on console-ams.rpki-client.org