Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-F0E5sULqQb5rBHC51vz9dEEKmI.cer
File: 1-F0E5sULqQb5rBHC51vz9dEEKmI.cer (raw, json)
Hash identifier: y+sbPkzvhb7wOiUoNuJTF2X+//J1aIKVq/kg5ZEoadk=
Subject key identifier: F8:5D:04:E6:C5:0B:A9:06:F9:AC:11:C2:E7:5B:F3:F5:D1:04:2A:62
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86FAA4713468396B83EF1BC34E433E8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:30:10 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 43164
IP: 91.198.0.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:aa:47:13:46:83:96:b8:3e:f1:bc:34:e4:33:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f85d04e6c50ba906f9ac11c2e75bf3f5d1042a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0b:e3:a4:8b:2f:b1:ed:f6:00:32:12:e0:03:
1c:58:e8:ec:1d:f3:8c:8f:a3:ba:70:32:f0:5e:8f:
db:1c:74:a6:05:cd:90:b1:a6:e2:51:b4:53:43:0d:
8c:2d:83:9a:66:4f:5c:e3:8a:13:bb:0c:02:c9:07:
28:12:52:bb:29:49:f5:2f:ea:ef:1f:b7:98:cf:05:
6a:f9:70:69:49:9d:a1:b6:a3:2c:d5:c0:4b:02:62:
6e:a5:82:61:81:42:02:cf:47:26:f0:ee:77:14:60:
54:8a:4a:4a:ca:60:41:d3:90:2c:7f:53:b3:e2:12:
0b:53:6a:97:68:31:ae:a5:55:5a:9d:6c:42:8f:a8:
0e:6d:7e:8b:85:8f:ce:1a:05:d4:bf:b8:82:c9:4b:
86:de:65:9b:5e:00:ec:3f:55:f6:7a:24:25:6e:1a:
50:e1:0c:36:fb:06:94:5b:9a:62:98:27:64:46:c5:
36:57:9e:25:e7:b7:a9:da:54:e8:d6:49:30:3d:8a:
af:e3:ca:f2:15:e8:0a:34:16:62:03:5e:00:57:31:
c7:0d:90:52:b2:1d:d0:3f:27:ff:1a:12:6a:e3:ef:
f2:9b:d2:27:01:35:97:09:3a:a1:ef:df:3b:b8:1d:
3d:06:4c:cc:67:fe:5e:11:b5:05:ce:1f:e3:9a:0f:
4b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:5D:04:E6:C5:0B:A9:06:F9:AC:11:C2:E7:5B:F3:F5:D1:04:2A:62
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.0.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43164
Signature Algorithm: sha256WithRSAEncryption
24:98:ea:15:41:27:12:9e:96:4f:ca:80:56:af:01:62:e0:1a:
8e:2e:24:8d:b0:30:a2:e2:dd:0e:e5:59:1a:d2:25:6f:15:ac:
51:d7:a8:a4:bc:e3:dd:8d:b5:ba:1d:dc:77:f9:c9:86:67:56:
42:51:32:4c:88:a0:45:d0:55:92:9b:98:a9:2e:e3:31:7c:eb:
f9:e6:79:f6:d1:56:5a:36:8f:c4:56:28:cf:a0:cc:54:26:23:
73:18:ce:82:cd:f0:05:32:ef:1b:1f:b6:27:e7:6a:96:d2:70:
86:75:17:cf:a7:dd:33:f7:1b:72:8f:6b:48:5a:99:48:f9:51:
0a:0e:a6:c0:b4:df:d5:c1:bf:ae:92:b4:77:14:a9:d8:f0:dd:
9b:42:09:a3:ee:ec:51:46:2f:4a:c1:ef:1e:e5:4e:5e:39:8d:
4e:a2:16:73:f8:6d:79:e9:b3:c2:55:dd:ab:c0:73:28:66:47:
23:2a:d2:83:8a:82:3c:3f:c0:47:3e:26:48:46:b6:9b:3c:a3:
e7:de:df:4d:93:ed:ff:ab:5e:dd:0e:af:6d:f7:74:4b:ac:04:
bd:3d:bc:a0:f4:e1:a6:b3:34:1c:2e:0d:fe:f9:b3:a2:34:10:
bf:cd:c1:dc:eb:91:4a:b4:cf:74:a4:46:a1:16:eb:14:f0:f9:
b0:05:94:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 09:51:51 2024 by rpki-client on console-ams.rpki-client.org