Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
File: xoxl5pm1dqsROnm-iCiUjx5swmA.cer (raw, json)
Hash identifier: OtXK7H1sw13gqx6LmsfHUHoLGwmhKweDiIx4Jm/jUZ8=
Subject key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7270D6D721B44311F06A0ECC7337A36
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:14 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 50395
AS: 62075
AS: 209419
IP: 45.140.208.0/22
IP: 82.115.216.0/22
IP: 2001:67c:1b0::/48
IP: 2001:67c:18d4::/48
IP: 2a0d:2d40::/29
IP: 2a0e:c6c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:0d:6d:72:1b:44:31:1f:06:a0:ec:c7:33:7a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c68c65e699b576ab113a79be8828948f1e6cc260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:aa:9b:66:6b:43:8c:5c:3e:1c:b6:4c:59:2a:
d2:7b:1f:72:52:ed:e1:39:5c:6b:19:c1:37:8e:18:
04:71:c4:69:fb:93:05:1d:55:3c:57:4d:4a:68:5d:
67:a6:46:0d:0c:9c:ef:4b:15:4e:91:ab:3c:4c:03:
96:c6:ee:ed:c5:36:a7:ce:ea:68:06:06:79:58:d8:
0a:3a:52:dc:9a:d7:dd:f7:19:d1:05:af:94:ba:75:
05:5c:ed:7f:db:ab:eb:ac:32:54:93:94:1b:44:1e:
99:b5:fb:da:5c:4b:11:77:87:7a:c5:26:dc:6c:7c:
e9:71:96:05:c0:38:65:4c:e0:a6:a5:72:3e:80:3b:
7d:f3:5b:bb:30:6c:f1:f3:cf:05:76:96:d0:a4:b5:
da:b2:7e:12:b4:01:4d:14:2a:a7:54:9a:89:27:b1:
bc:e9:bb:8b:be:f5:4d:24:3b:22:08:98:af:34:49:
55:68:43:91:ca:47:23:ce:b7:2f:4b:8a:99:ad:e8:
c2:93:5f:37:31:a9:fd:b1:16:1c:55:14:76:41:b4:
7e:57:02:28:b3:62:43:c8:eb:0c:37:f9:9c:1c:a0:
a1:88:ee:42:24:0d:6a:b2:67:af:b8:04:bd:bb:54:
c5:0c:74:bc:bd:1f:0f:82:26:53:7a:9e:8e:a6:d1:
34:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.208.0/22
82.115.216.0/22
IPv6:
2001:67c:1b0::/48
2001:67c:18d4::/48
2a0d:2d40::/29
2a0e:c6c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50395
62075
209419
Signature Algorithm: sha256WithRSAEncryption
27:91:2a:2e:ce:6d:ad:33:78:8c:c9:d0:1e:bb:06:6d:de:34:
4e:32:c9:6e:dc:a3:c9:e7:a8:34:de:0f:ee:67:91:7d:9b:f2:
a8:4f:59:3d:12:c6:38:6b:70:ee:3a:4e:aa:90:0c:9e:7b:37:
a1:ee:86:a4:ae:fc:b6:1c:cf:e0:da:24:86:87:e0:33:97:f7:
ee:15:df:90:48:5d:00:c7:88:18:62:e4:94:c4:ea:f2:ab:e8:
74:8c:6d:fe:28:a5:09:6b:81:0c:19:50:ea:b0:c0:8e:21:85:
0d:9f:80:47:30:5b:b9:7c:0f:9a:f4:4f:7c:0e:50:26:17:eb:
c5:a2:f6:6e:c8:33:ab:52:46:a4:04:b0:29:d4:f4:8d:7d:04:
e7:bb:17:74:10:b8:08:a0:eb:f7:91:94:13:86:2a:56:98:e6:
ba:a1:37:6e:c0:23:c8:fe:46:56:fa:27:f4:b2:df:fa:e6:01:
97:ae:9a:f3:b1:57:35:6e:22:df:b8:63:58:06:16:76:c3:be:
3f:08:ba:20:42:35:e3:d0:d6:db:93:62:b1:d1:df:a6:4c:ec:
6c:9e:3e:3c:71:e5:d0:d8:76:23:be:49:45:b6:1c:05:77:44:
16:53:69:a9:ab:d3:e8:d2:71:1e:4e:67:79:40:bb:73:d5:75:
21:86:b7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 10:51:20 2024 by rpki-client on console-fra.rpki-client.org