Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0QZfT7a2eefxy92ANflnRnAQ6pk.cer
File: 0QZfT7a2eefxy92ANflnRnAQ6pk.cer (raw, json)
Hash identifier: exIeyPxYX2rsbgGt9njD+YMoiV0yfVfJcGn4aCdjlLY=
Subject key identifier: D1:06:5F:4F:B6:B6:79:E7:F1:CB:DD:80:35:F9:67:46:70:10:EA:99
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC425283E9268C1E0E30AF17CF2BD02C1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:18 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 212398
IP: 91.194.7.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 14:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:28:3e:92:68:c1:e0:e3:0a:f1:7c:f2:bd:02:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d1065f4fb6b679e7f1cbdd8035f967467010ea99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:56:bf:31:5d:27:68:d0:fb:42:0d:4c:58:2e:
d8:b5:13:94:e8:b6:b0:b2:f8:a2:8f:2e:c5:38:2b:
44:94:5e:29:7d:f3:53:a4:f5:4e:0a:54:85:5d:6a:
b9:36:e0:00:2b:bf:78:1c:c1:6e:6e:71:3d:86:9b:
ba:c8:3b:c9:5c:a1:2f:0d:c5:c9:1b:c3:ba:c5:6b:
ae:34:32:e2:f1:0b:66:45:c6:e9:45:cc:e8:1d:03:
96:b4:b3:97:51:ee:99:c0:6c:2b:ef:8d:11:46:1b:
5f:0b:e3:71:c2:4c:6e:c5:a1:e1:00:77:24:19:72:
9c:c1:2c:23:b9:50:83:8e:cc:52:67:ac:c9:e5:1d:
56:cd:4b:2a:65:0c:64:64:04:10:c9:b2:67:65:b4:
c5:d5:c8:61:07:27:3a:b3:15:ad:f8:04:42:7c:4b:
54:36:c2:4e:80:d2:10:7f:03:5e:83:f2:7c:7d:db:
2d:49:5c:5f:95:9f:e0:f4:51:47:f3:5a:21:80:44:
b6:64:49:6e:85:ef:07:40:69:fa:31:0d:2d:a1:84:
7e:6a:45:52:f4:93:5a:89:9d:57:46:06:2b:f7:9d:
59:a5:03:0c:ed:57:85:a3:3b:97:09:9a:35:4c:c3:
79:9f:3e:c4:ce:3a:b6:60:04:e5:34:d7:b3:5e:67:
2f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:06:5F:4F:B6:B6:79:E7:F1:CB:DD:80:35:F9:67:46:70:10:EA:99
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.7.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212398
Signature Algorithm: sha256WithRSAEncryption
4f:0c:03:6d:2e:ec:c6:82:be:9d:93:9f:48:dc:f8:d0:df:f0:
b9:0c:f9:a9:8c:96:35:7e:5b:14:0b:2c:9b:43:8d:b0:03:c8:
00:ef:c9:fa:a0:c6:6f:08:38:10:a9:8e:7a:e7:de:ff:a0:a9:
34:cc:d1:75:ad:d9:11:d1:64:45:57:54:d7:aa:ce:ae:37:7f:
26:36:05:3d:b2:72:9f:99:32:32:7c:6e:30:7c:ef:ce:66:0a:
d4:67:6d:e9:ae:80:c9:96:f4:c0:c8:01:d6:28:71:79:19:62:
25:16:c1:a0:7a:5b:70:38:ad:42:da:57:6f:35:f3:ed:b3:69:
64:a2:87:55:82:f2:ae:2c:0a:90:0e:0b:91:11:e7:d2:ad:77:
6c:f1:48:65:8d:7e:93:40:72:fc:c9:14:b9:72:83:0e:72:3b:
3f:77:ea:d3:93:02:d2:a5:d6:21:0a:6e:b8:33:fa:73:d1:53:
d2:b8:9f:9a:d2:44:62:be:de:36:86:2a:c0:83:c5:57:3e:26:
5e:60:c5:62:39:d7:0f:ad:72:9d:b7:cc:36:54:4b:31:c1:5a:
c2:b2:60:2f:06:37:4a:8e:9b:f6:60:a0:f0:eb:73:56:ea:64:
b4:52:ba:6e:e1:f5:f5:18:e5:9d:f4:e8:90:6c:b3:34:5d:ea:
4b:dd:21:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 19:34:45 2024 by rpki-client on console-fra.rpki-client.org