Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xzic6Ca8jSaGm0UvPNk2kCxVL78.cer
File: xzic6Ca8jSaGm0UvPNk2kCxVL78.cer (raw, json)
Hash identifier: L9wmD9TT8he7NLGE+8Qf/LIjhcHQu2XeViShh36E550=
Subject key identifier: C7:38:9C:E8:26:BC:8D:26:86:9B:45:2F:3C:D9:36:90:2C:55:2F:BF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC802489940D78CE291A8B235C5C7105A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:30:42 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 34563
IP: 91.216.70.0/24
IP: 193.42.222.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:48:99:40:d7:8c:e2:91:a8:b2:35:c5:c7:10:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:30:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7389ce826bc8d26869b452f3cd936902c552fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:56:bd:0e:27:3f:4e:ec:11:68:0a:cd:41:dc:
df:e9:be:16:24:5d:12:19:bf:8c:45:26:8e:b4:f9:
7f:51:2b:6e:72:16:21:84:37:02:64:ee:b8:7b:4d:
2e:e5:f0:b1:b8:42:33:b1:1c:35:94:94:10:fe:44:
17:fc:15:2c:77:08:13:63:63:46:21:a0:3c:6a:65:
ed:03:66:6e:00:07:78:79:8d:e5:36:7d:08:aa:19:
3b:b8:7d:df:2f:15:3f:00:38:22:fb:d6:9b:9b:66:
3f:fc:af:9c:e1:71:bc:b9:cf:9c:0c:86:83:64:91:
8f:34:bb:43:dc:f8:22:c5:f9:9a:cb:60:a9:ec:bd:
93:90:74:f5:a0:66:0c:f0:46:e9:c5:4a:9c:55:e5:
e4:71:6f:94:76:50:77:db:12:0d:86:07:7a:21:51:
d5:d5:a0:b9:8f:47:d1:d8:f0:fa:78:8b:5c:4d:53:
4d:70:4e:d8:8c:b8:84:8e:a7:7b:98:24:52:d4:1a:
4b:34:1d:fb:e0:e0:f6:2e:7f:b5:a4:9b:c9:3d:f6:
29:5f:5f:6a:02:97:58:76:6e:c9:98:c7:37:ca:7d:
f5:cb:8a:e4:b3:7e:2c:bd:0c:44:98:4c:60:b5:f9:
a1:13:26:53:52:20:5e:93:5a:1a:8a:cd:cc:9f:22:
bf:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:38:9C:E8:26:BC:8D:26:86:9B:45:2F:3C:D9:36:90:2C:55:2F:BF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.70.0/24
193.42.222.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34563
Signature Algorithm: sha256WithRSAEncryption
69:92:16:94:4d:6e:af:c2:4e:c1:33:20:a0:04:2e:78:d2:ae:
ff:fc:bd:f3:8d:a5:5f:31:af:dd:c2:7a:3d:85:60:3d:2d:33:
28:2e:f7:63:6c:55:d0:74:d7:06:75:36:a2:ff:cd:44:32:f6:
f8:bd:be:31:f4:40:be:95:29:d0:7e:00:33:b4:6a:1a:c9:f2:
5a:0f:14:b5:81:4b:ed:d4:81:9d:fa:dd:a4:05:6c:d0:c1:62:
a4:94:03:ec:b6:6d:4d:b0:95:cc:10:11:2e:a8:2b:4b:37:e4:
10:b8:d4:34:21:36:b6:13:8c:51:b2:bd:a0:29:fa:5b:c2:2b:
61:ab:92:5a:f9:30:4e:b9:88:e0:79:11:22:65:f2:e4:88:f0:
98:5d:28:20:92:4f:95:e3:cc:44:45:76:df:c4:58:29:42:87:
90:6b:7e:13:06:79:03:fd:87:b1:03:05:91:e2:ef:c4:91:63:
4d:af:a8:39:58:5a:65:17:df:f7:2b:ea:b3:3c:a5:da:46:98:
54:f2:98:51:10:2d:96:0f:4d:11:f2:25:2c:65:53:1a:98:e8:
e6:bc:dd:41:6e:a2:a1:50:89:6b:46:8b:9c:72:60:0a:fb:ee:
6a:4f:4e:cb:c4:c2:a5:57:fd:44:4a:94:88:b1:eb:97:25:6a:
d6:79:33:e1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:23:43 2024 by rpki-client on console-fra.rpki-client.org