Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2ilr0AMdba2mxzBzYI89EeRFzkQ.cer
File: 2ilr0AMdba2mxzBzYI89EeRFzkQ.cer (raw, json)
Hash identifier: 9m9lCxBEgB01TgxMTRVg/a3bHQXRbio5ulZzIbyB+rY=
Subject key identifier: DA:29:6B:D0:03:1D:6D:AD:A6:C7:30:73:60:8F:3D:11:E4:45:CE:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01901287F6C1C2FE277C0C26B0FAB96D6C4F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/1aafa0-0278-4dd6-8807-5726c2b5148d/1/2ilr0AMdba2mxzBzYI89EeRFzkQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/1aafa0-0278-4dd6-8807-5726c2b5148d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 13 Jun 2024 16:56:58 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 57536
IP: 91.232.190.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:12:87:f6:c1:c2:fe:27:7c:0c:26:b0:fa:b9:6d:6c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 13 16:56:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da296bd0031d6dada6c73073608f3d11e445ce44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:11:8d:bb:7f:bb:eb:99:fa:d6:88:ce:1e:4c:
d9:af:f1:a0:34:f0:41:6b:6f:95:91:90:78:f7:a6:
b6:d9:18:60:b9:93:c0:24:d3:be:89:f9:d1:af:91:
11:61:2b:6a:f3:31:61:44:8d:32:7a:8c:25:aa:8b:
f0:e8:31:77:43:bc:c1:f6:5c:08:8d:51:38:f7:1d:
fb:de:da:ce:2e:1e:7a:9c:90:b5:05:c2:f9:da:b4:
cb:e0:8d:72:90:53:a0:b2:87:a3:d5:cc:cb:62:11:
ca:15:ae:c1:08:7c:f3:98:93:2e:61:a3:f8:9c:b2:
59:d2:ba:71:cb:21:8b:95:be:48:7e:86:49:fe:19:
a9:56:dd:ad:71:c5:bc:ab:ca:85:58:95:7b:7c:04:
40:e4:7b:a7:9e:de:ce:d2:82:72:79:db:4b:5c:bc:
29:d6:37:2a:31:af:7d:d3:ff:ff:b4:65:ec:99:ec:
23:f1:f4:ac:05:32:d7:32:8b:1b:ba:6c:71:b9:7a:
73:fd:89:c9:3b:09:27:61:04:6c:71:4c:66:1b:ac:
dc:f8:0c:cc:b2:46:87:f7:0d:28:5c:36:96:35:9e:
8e:6b:71:4a:33:8d:1c:45:de:21:48:11:89:e1:14:
2a:81:91:10:1b:1f:8b:b7:59:99:60:7b:59:e9:69:
d4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:29:6B:D0:03:1D:6D:AD:A6:C7:30:73:60:8F:3D:11:E4:45:CE:44
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/1aafa0-0278-4dd6-8807-5726c2b5148d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/1aafa0-0278-4dd6-8807-5726c2b5148d/1/2ilr0AMdba2mxzBzYI89EeRFzkQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.190.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57536
Signature Algorithm: sha256WithRSAEncryption
8e:0d:72:07:17:a2:67:11:8f:08:d9:db:13:4d:24:93:cd:a8:
68:be:9e:ab:0b:91:f0:43:18:1f:5e:9b:03:61:6a:0e:01:42:
19:ca:12:8b:25:2e:d8:d3:89:3a:56:11:a9:f6:fe:46:74:4b:
96:44:ca:79:50:0d:ba:a8:db:3f:70:78:83:79:ed:be:39:60:
3c:03:d9:98:c0:06:23:59:24:af:82:5a:ab:c2:44:78:94:8e:
94:b9:d6:84:39:f1:93:1a:cb:3f:3e:98:cd:fd:4f:5b:9f:49:
8e:26:95:d0:4d:a7:e6:3f:b3:d6:ae:ad:0d:ff:d8:24:f8:0e:
4f:fc:34:f2:b9:fe:10:16:96:6b:53:c8:90:ed:ed:95:ea:73:
25:14:70:2e:b0:23:9f:9e:21:1b:7d:83:22:f2:18:f7:d1:ba:
30:c0:5c:8f:65:2e:9b:86:6a:a2:40:a8:97:55:d6:b5:81:ec:
76:41:16:59:4f:10:51:ef:b8:e0:8c:ef:6b:25:2f:ac:36:29:
09:a2:65:3b:20:0f:fd:f7:52:73:d0:f0:f2:7e:2c:fc:b2:76:
5f:3e:df:61:12:c7:2c:95:56:e8:fd:76:af:e7:19:c9:e2:80:
e5:f7:3b:d4:ec:b3:c0:61:fe:e5:85:c1:7b:d4:25:15:27:11:
02:0d:3a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:55:08 2024 by rpki-client on console-fra.rpki-client.org