Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer
File: 7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer (raw, json)
Hash identifier: l0HrjlaX5IABKf8vBYBR+qwGHV/NaDlE+5vCvJuAoeA=
Subject key identifier: EE:BF:5B:51:99:96:37:C8:0B:F9:3C:8A:90:3D:16:C3:AE:C2:53:41
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC348C9A20D7D91EBC76199A73763EE29
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 35490
IP: 91.236.223.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:c9:a2:0d:7d:91:eb:c7:61:99:a7:37:63:ee:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eebf5b51999637c80bf93c8a903d16c3aec25341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:49:54:11:68:a0:68:c4:4d:78:15:99:ac:47:
58:55:61:25:10:75:b9:c2:b1:b3:95:01:93:cb:ba:
1f:a6:58:de:c2:f4:fe:50:47:93:1d:ac:87:40:79:
79:f4:43:dc:48:b8:f5:5c:c7:5f:f8:30:fc:97:89:
80:30:48:26:fe:ec:33:75:3a:68:bb:98:d9:b4:61:
c2:dd:e2:44:c1:53:95:c1:b0:84:4a:55:08:be:ff:
a1:8c:48:81:12:a5:f1:ac:71:56:47:10:48:31:ec:
08:d5:44:ee:22:f7:2b:88:43:e4:c2:57:6e:0e:40:
fa:fc:f2:c4:64:61:45:40:35:da:ef:81:91:60:87:
f4:6f:89:49:2c:15:1e:a8:8a:bd:62:42:d0:9d:ad:
8b:9f:77:88:a4:a8:59:b3:09:37:d4:b3:b7:f0:e5:
af:07:9f:f5:ed:a8:2e:8b:47:8b:82:a3:e4:a0:bb:
14:86:20:11:73:eb:b7:ce:c5:67:b3:18:d4:c1:bd:
17:32:76:58:5d:46:19:49:97:5a:72:1d:95:27:5f:
cf:dd:a4:d3:ea:4c:16:d2:3c:89:13:be:ea:de:42:
b7:8e:7f:05:d8:f4:a8:f6:b7:07:6b:f5:68:34:2f:
cb:24:13:62:1c:fa:07:d2:fa:04:1a:94:3d:d1:fd:
1f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:BF:5B:51:99:96:37:C8:0B:F9:3C:8A:90:3D:16:C3:AE:C2:53:41
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.223.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35490
Signature Algorithm: sha256WithRSAEncryption
7e:92:d4:27:62:26:64:33:e7:86:5e:03:36:9c:ec:3d:a9:c8:
24:e3:a3:11:3e:94:06:66:30:35:2a:80:d5:ea:08:8e:a6:27:
6f:a9:d7:36:9f:a1:56:24:1c:cd:5a:6a:8b:23:72:4e:e0:30:
aa:45:b6:cf:7b:c4:64:96:95:1c:b6:e0:e2:01:a5:4b:d8:b6:
95:b6:de:00:a4:12:a4:84:6f:a6:92:d3:2d:ae:92:70:8f:84:
8e:47:5a:79:a7:7d:4e:ed:ab:d5:9a:25:63:51:92:fe:9b:3a:
a7:fb:84:24:ab:d9:e3:d6:06:59:8e:f2:a9:93:86:b9:a0:04:
c3:61:83:80:bb:8a:98:8d:ee:20:bd:37:ee:69:11:35:e1:80:
b8:8c:f5:a2:66:32:31:25:43:d8:7f:77:1f:a1:af:0c:40:6e:
ad:c7:2b:fe:95:f9:5f:11:d4:85:f3:93:39:1e:b5:9e:f3:e7:
c8:17:88:5b:de:6f:34:e5:d0:cd:8a:56:62:3f:7e:e8:14:3a:
ca:27:62:88:48:d9:5f:62:be:ff:65:4a:f7:53:d2:53:e5:6e:
f0:5e:b8:b2:88:aa:20:6e:c4:bf:d4:6e:61:10:17:26:af:9d:
86:ac:9a:99:e1:d0:dc:39:29:d8:6c:84:ca:18:00:d8:36:d3:
6e:0e:67:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 14:06:17 2024 by rpki-client on console-ams.rpki-client.org