Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
File: Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer (raw, json)
Hash identifier: RcaRifO2jB9HYcI1GBqX6vC2E6iyVzJiLFAgKBgJzm8=
Subject key identifier: 1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8025437F6E7258AD202D3F1F0806B02
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:30:45 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 207066
IP: 91.199.86.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:54:37:f6:e7:25:8a:d2:02:d3:f1:f0:80:6b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6c:e8:de:4f:b8:03:2f:0c:ad:61:fa:6a:8f:
97:77:91:f2:36:a8:1c:eb:ba:6c:ce:d0:36:52:37:
53:91:91:ef:4f:03:8d:0e:5b:32:b3:ad:a5:66:1f:
45:e5:5c:23:dc:95:3c:de:7f:29:ff:23:f7:60:8d:
d1:23:1c:ff:85:47:43:40:60:bf:ff:e4:e8:42:a6:
0f:7a:aa:3d:88:7f:73:c9:2f:34:aa:70:7b:fb:2a:
e6:c9:39:e0:65:8a:46:00:8e:67:2f:b2:91:72:e2:
8e:25:18:5f:51:91:d3:22:9a:56:e9:b1:cd:0a:48:
51:37:95:b6:bc:d2:3f:f3:93:e2:08:43:25:11:02:
6c:c8:93:a1:a1:0d:57:fa:78:ca:3d:56:b2:58:d8:
20:f2:37:a2:6d:84:fe:cf:44:4a:67:70:2c:51:f7:
a9:d3:3a:a8:00:41:05:72:5b:2c:07:98:7e:4c:b4:
f6:4d:fd:ea:fe:9e:41:85:59:2f:12:13:3b:de:47:
ed:a7:f8:b0:3c:4b:ff:dc:b0:d8:d2:91:d0:c6:13:
86:34:27:c9:53:03:87:dd:2b:f7:6d:c3:d6:79:c8:
34:51:20:cc:e2:9e:35:f9:38:7e:ee:73:51:ab:4f:
ed:20:9f:94:ac:64:11:6e:a7:de:57:ff:62:04:e9:
8d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.86.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207066
Signature Algorithm: sha256WithRSAEncryption
5c:24:98:d0:8b:01:d4:73:26:48:7e:a7:1d:2f:f3:2a:a2:8e:
63:ef:22:f1:99:f0:30:62:ab:8b:ca:ce:44:4c:84:b2:91:41:
29:d2:7f:0f:26:db:37:35:63:3f:08:37:26:5a:fc:09:fc:28:
e8:3f:e8:f0:5b:a1:23:a7:62:6d:d2:b2:d8:de:cb:c1:20:59:
1e:12:7d:d4:da:63:2f:9f:7b:55:51:f7:f2:07:e8:cb:70:97:
01:8f:10:47:36:d9:aa:e1:26:50:c2:b9:e2:ee:45:a9:ff:84:
43:08:f7:15:c0:f7:ba:bc:f1:25:a2:6c:af:52:48:ec:59:de:
35:ba:11:5a:36:fa:0b:45:36:25:49:d9:bd:d6:18:14:9d:20:
66:e0:0d:5d:8c:7d:ca:ec:42:85:c6:eb:21:23:a8:8f:10:f5:
d8:2a:e9:75:9f:03:9f:3d:13:d0:00:33:df:3d:8c:2a:bb:f3:
30:11:39:12:b7:ef:3e:5e:f3:44:39:41:ae:55:05:b0:56:bc:
b8:90:22:26:cb:c5:07:c7:1e:60:62:a8:dd:d3:41:a4:bf:83:
1f:07:66:4b:3b:d3:e3:c8:09:15:aa:44:96:b4:27:dd:c5:78:
59:de:74:b2:7b:82:54:d0:99:60:39:33:86:a4:ca:6c:51:e8:
0e:bc:39:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 00:16:07 2024 by rpki-client on console-fra.rpki-client.org