Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
File: xtEbZP_hjvpC9DpsdlY53uONAn4.cer (raw, json)
Hash identifier: X8CjcSqmQpSNUdsLZEZhb2lk7xohlo+3rRxECVY5fBU=
Subject key identifier: C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC50102B41307FC95F540FC088EC47DCF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.73.113.0 -- 193.73.114.255
IP: 193.135.254.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:02:b4:13:07:fc:95:f5:40:fc:08:8e:c4:7d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6d11b64ffe18efa42f43a6c765639dee38d027e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6c:12:42:36:36:bb:44:99:5f:61:2b:18:f4:
c0:e4:a0:72:8e:da:63:ed:74:05:4a:7e:f8:47:46:
c7:79:31:00:79:b3:31:31:69:58:8e:97:53:1c:6a:
16:21:33:6c:c4:ab:8a:00:70:8e:8a:33:93:2d:d3:
dc:f7:dd:f2:71:13:19:8d:5d:43:5a:7f:e3:95:4c:
73:a7:2f:3f:31:1b:37:68:3e:5a:e2:00:ed:52:a2:
75:02:eb:9b:e8:43:a0:34:8c:2b:66:4b:12:3b:41:
5c:88:1a:41:62:5f:24:da:ac:3f:63:2f:c7:4d:32:
9d:3b:f2:16:0e:fe:47:5e:b8:31:ad:4a:5d:51:23:
5a:1a:8e:6b:71:31:2a:fc:a0:ea:56:8f:bc:47:fa:
39:8e:fe:2d:4c:c2:bb:ae:99:e5:5a:2d:81:af:d1:
5b:36:c8:c2:12:a4:f0:61:6f:55:45:a7:98:4c:54:
b4:cc:dc:65:ce:3b:8d:0b:22:a4:bc:f6:66:4a:a8:
99:97:69:36:fb:15:e3:e4:14:82:08:a5:15:ad:6c:
e5:0e:29:ef:5a:a1:a0:ce:0f:6d:08:70:65:c2:be:
21:bf:5d:d4:9f:5d:6b:7f:57:8f:60:0d:c6:ae:bc:
3f:66:76:d2:c6:d4:c9:c3:76:b9:35:4f:2b:5b:fb:
1b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.73.113.0-193.73.114.255
193.135.254.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:83:e7:c3:2c:df:40:c8:b0:25:2a:60:4b:b5:0a:53:6b:44:
81:7b:6c:df:34:ec:cc:6a:a4:20:9b:71:8e:fc:f3:fd:22:92:
e2:c7:0e:a2:38:f3:08:e9:7a:12:22:a2:f5:dc:3a:c8:88:2d:
85:58:8a:1d:08:3f:6c:0d:5d:9a:76:23:89:af:30:cc:1f:46:
bb:d5:1d:9e:c1:1d:3f:07:59:67:69:01:e6:2a:83:77:52:75:
f9:24:e7:e3:00:e6:a4:ce:af:ed:16:e8:cd:6f:32:dd:d2:8e:
95:dd:1d:12:63:34:16:be:6f:a5:a5:fe:27:c0:cf:a9:f7:cc:
9d:d8:e1:d4:22:ea:16:1a:97:a3:16:84:70:17:d7:be:a3:70:
17:5e:70:c2:ad:20:36:f2:0a:dd:43:ed:aa:a4:c8:85:e7:58:
b8:d8:4e:cd:63:19:13:c1:ee:b0:b2:17:d0:95:1c:9e:30:76:
fb:6a:10:39:d3:5f:80:0f:51:3e:6c:e3:8c:d8:35:f1:e1:74:
3d:f7:f7:3b:b7:0f:21:d3:b5:4a:ce:49:dd:e7:64:54:34:2f:
b1:8d:91:4b:56:b7:70:c1:b3:80:22:d9:3c:2e:7e:b6:c1:7f:
c3:f4:fd:8f:be:c8:d7:2b:56:26:a4:9a:ef:e6:e0:07:45:9b:
04:16:87:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:42:35 2024 by rpki-client on console-ams.rpki-client.org