Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Fob3vpuhccMnRqtO0gvogr0wQ1Y.cer
File: Fob3vpuhccMnRqtO0gvogr0wQ1Y.cer (raw, json)
Hash identifier: tGbsXSIvYux/7/rl5I3xL+JqjZqDxp1Ck0qbYDFLXdw=
Subject key identifier: 16:86:F7:BE:9B:A1:71:C3:27:46:AB:4E:D2:0B:E8:82:BD:30:43:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01916990E7FACE48A313F0A015AF6C4443E5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/7ca808-c795-40ef-8a49-74a98cb66fff/1/Fob3vpuhccMnRqtO0gvogr0wQ1Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/7ca808-c795-40ef-8a49-74a98cb66fff/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 19 Aug 2024 07:36:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 207570
IP: 91.212.6.0/24
IP: 2a0a:740::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:69:90:e7:fa:ce:48:a3:13:f0:a0:15:af:6c:44:43:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 19 07:36:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1686f7be9ba171c32746ab4ed20be882bd304356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:35:21:7e:fd:89:c1:68:6e:0b:13:46:2a:eb:
3c:91:fc:a3:a9:8a:82:8f:43:98:8a:b0:bc:41:86:
0d:01:28:cf:4f:52:3b:55:d9:45:34:05:c3:aa:26:
fa:65:c0:ec:3c:2a:03:40:2a:8e:c8:ab:6d:85:8c:
43:06:de:12:53:4a:2f:37:cc:2d:2a:02:4e:c1:1e:
cc:89:ac:d3:4b:10:31:14:90:49:92:25:7a:64:93:
e2:c7:0b:22:77:12:56:65:1e:19:0c:a4:fb:cc:2f:
b5:b8:c5:61:79:e9:ab:21:43:bc:3b:9c:0a:1a:bd:
27:20:a2:04:d2:54:35:29:37:a7:bf:64:71:e6:a4:
3d:07:a0:fb:f8:fc:3d:a1:55:b0:27:4b:5d:c2:f4:
d7:a4:c7:a7:f4:f3:80:95:d9:2c:26:01:bc:a8:a5:
cd:84:60:0e:d4:2e:d4:25:ad:1e:39:63:ff:6e:7f:
b4:88:65:1f:9c:ba:91:bd:66:ff:2d:09:9e:9b:36:
d2:f6:43:df:2b:ec:94:9b:70:62:c8:29:78:04:7e:
17:9e:79:07:21:04:ce:f8:c1:bc:a2:ba:9c:89:a2:
c0:76:cf:c8:50:c8:25:6f:7b:45:db:6a:08:1b:9e:
2d:bc:72:39:32:d3:f7:32:72:12:47:87:d9:fe:36:
32:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:86:F7:BE:9B:A1:71:C3:27:46:AB:4E:D2:0B:E8:82:BD:30:43:56
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7ca808-c795-40ef-8a49-74a98cb66fff/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7ca808-c795-40ef-8a49-74a98cb66fff/1/Fob3vpuhccMnRqtO0gvogr0wQ1Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.6.0/24
IPv6:
2a0a:740::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207570
Signature Algorithm: sha256WithRSAEncryption
59:dc:b3:bd:45:e1:8b:e7:7a:35:cf:0a:75:eb:28:6f:8b:87:
70:a2:df:f3:4c:14:69:82:b9:d5:25:d7:8f:5c:da:2b:a7:86:
08:db:7d:9f:d7:3a:09:be:8d:e3:d2:8f:ae:ea:06:61:11:76:
7d:53:32:41:af:79:05:3e:4c:b7:2c:24:c2:82:40:b2:6d:b5:
13:b5:40:b9:d8:98:05:1b:12:bc:06:06:48:3c:be:d6:ee:a1:
cc:26:05:0b:67:b6:7a:55:aa:a9:68:86:c3:a2:f8:92:c2:5a:
9d:16:80:7a:d4:1d:11:a7:26:32:02:08:65:49:7e:b7:e7:86:
27:02:34:7d:77:97:cb:f1:75:34:b4:05:aa:64:13:be:0b:0d:
fd:75:06:80:92:83:6e:cf:02:23:f0:eb:bf:5f:f0:0c:42:ad:
30:67:87:5f:bb:5f:9a:af:6b:aa:7b:01:69:cd:56:4f:79:fe:
17:32:26:59:b8:c4:a7:a2:ef:79:ab:f0:e5:b2:14:ba:94:fb:
84:20:15:4c:4a:c4:f8:7c:d0:f7:90:8a:f4:ef:af:e5:aa:e5:
36:7e:27:db:39:77:e3:f8:36:f9:c3:a6:53:7a:04:03:34:33:
4e:5e:a4:14:e8:b8:d6:8f:77:96:1c:2c:d3:65:f3:91:88:cf:
de:0d:90:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 16:08:38 2024 by rpki-client on console-fra.rpki-client.org