Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1FRz0ejN9J49mPjXcKrBSNLyiyM.cer
File: 1FRz0ejN9J49mPjXcKrBSNLyiyM.cer (raw, json)
Hash identifier: i8UqqWgdVGrin7VB0fY+txl7PG1VOMyho88gd5jzz2M=
Subject key identifier: D4:54:73:D1:E8:CD:F4:9E:3D:98:F8:D7:70:AA:C1:48:D2:F2:8B:23
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC348BEE7591ADB8DA78EFC7AC9953046
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/1FRz0ejN9J49mPjXcKrBSNLyiyM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 48189
IP: 91.209.27.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:be:e7:59:1a:db:8d:a7:8e:fc:7a:c9:95:30:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d45473d1e8cdf49e3d98f8d770aac148d2f28b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:35:ec:91:ca:fe:0f:6a:7d:6b:26:37:38:94:
96:a5:91:42:6e:5d:bd:44:c3:c9:29:40:81:20:b2:
20:a8:fd:5a:92:b2:f0:b1:38:a0:39:e2:ae:27:38:
37:1e:14:bb:f6:1b:19:df:16:73:1a:8b:56:29:f5:
14:6b:91:f0:11:77:2e:d9:53:b7:da:e1:98:7b:a8:
2d:ae:2b:e5:fc:97:41:62:fd:48:2c:e2:24:a1:72:
6b:a0:f9:27:45:fb:31:85:6f:2e:db:11:83:0e:da:
b4:7b:83:6c:d3:88:3c:0f:6b:b3:50:1b:9b:ec:cc:
d3:b1:29:cf:ca:cc:1b:11:55:97:d2:1d:fd:e8:04:
2b:7e:dc:df:72:64:27:51:ce:9a:ec:66:63:b1:d8:
5a:78:fe:dc:39:d6:57:c5:b3:de:97:fe:59:17:d7:
3e:5f:9f:e2:2d:56:af:03:8c:8a:2a:d5:06:b2:64:
97:82:6c:a3:34:5a:2b:30:90:74:25:de:33:69:68:
ca:8c:02:75:45:1c:25:ad:9d:51:66:d8:1e:81:c3:
90:05:63:f9:51:67:34:83:45:fb:9e:8f:fd:f8:39:
fc:30:2e:06:26:31:ec:7f:a1:38:19:ae:fa:8a:84:
93:fa:d3:f7:af:7b:da:7a:54:05:a2:c8:46:b4:86:
43:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:54:73:D1:E8:CD:F4:9E:3D:98:F8:D7:70:AA:C1:48:D2:F2:8B:23
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/1FRz0ejN9J49mPjXcKrBSNLyiyM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.27.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48189
Signature Algorithm: sha256WithRSAEncryption
02:4f:67:2a:a4:5b:f7:05:9f:7c:eb:57:93:55:b3:54:1a:fb:
05:30:17:59:84:1b:e5:43:5c:9e:a2:e3:e2:32:e2:4b:ed:16:
48:65:26:78:b5:b6:1e:d8:ff:4c:e2:d2:82:f1:43:b4:4c:38:
b1:f1:55:ed:d8:ff:ea:84:d2:ba:81:7e:94:d3:c1:68:e2:df:
0f:f8:36:61:08:69:11:de:e4:4e:f4:e5:ed:86:75:89:73:25:
63:2d:ae:fe:30:6e:61:50:69:96:f8:a1:19:4e:a9:70:00:d3:
f0:2b:59:1d:ae:0e:e6:fc:5f:bc:89:a8:21:b0:52:d2:08:bd:
55:6b:f7:de:2a:b2:51:b9:cf:1b:0c:45:f7:57:80:ce:81:91:
6c:44:84:67:eb:0f:b8:80:a4:a1:35:d9:48:fb:dc:18:d8:f8:
65:71:98:cb:1e:52:d3:1c:e6:a2:c1:9f:97:50:2c:d3:93:36:
8b:91:96:ff:f6:be:2a:8b:e6:1f:8a:c3:8b:79:15:02:9a:24:
02:7d:76:e1:91:6a:e7:8e:62:d6:96:c0:7e:8a:99:38:6a:8b:
f8:3e:28:02:0d:29:34:2e:29:1e:31:bc:76:c1:fa:d4:ab:fe:
cc:a3:21:39:c1:67:57:aa:24:2a:53:4f:e5:a6:5b:1a:b4:8e:
13:26:9c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:24:22 2024 by rpki-client on console-ams.rpki-client.org