Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
File: 8LKNasbsQN-yL5b3tVYWnASZATc.cer (raw, json)
Hash identifier: cR+ttFss9ZwrADOKZX4yRgJz9O1nVVXDZMfv5UCq48A=
Subject key identifier: F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB19336A6C6015C5C1ECB373ED5113
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:47 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 49169
IP: 91.212.162.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:19:33:6a:6c:60:15:c5:c1:ec:b3:73:ed:51:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f0b28d6ac6ec40dfb22f96f7b556169c04990137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e5:23:bb:80:85:b6:81:67:a9:d7:b5:d2:4f:
3b:50:9e:f2:cc:88:4d:f9:2a:e2:d5:1f:86:99:69:
50:0d:7d:13:97:4d:b3:80:92:e5:e6:a2:bd:fd:fc:
ae:68:99:94:b8:b8:f6:9e:53:35:26:ad:c7:c9:b9:
3e:89:c9:f9:eb:cc:5a:79:de:6a:03:44:e9:4a:57:
57:75:4a:6c:08:e5:5f:f9:1b:1f:af:cc:15:ad:9e:
33:39:8b:48:81:8a:bd:75:5f:f8:d0:e1:19:d6:ca:
b0:b9:5f:67:cb:af:f2:48:f9:11:d7:68:45:45:f1:
94:04:f6:e3:d9:32:d7:3f:72:be:07:28:a8:2a:cc:
cd:1e:74:cc:b4:a3:d0:a7:c9:d8:a4:8e:63:d9:4a:
62:80:dd:3b:47:66:0e:32:cf:e9:39:fa:60:81:df:
83:f3:0c:3f:89:43:a0:d6:03:4e:c9:7f:a3:c3:9c:
c8:11:78:92:7c:8e:68:5f:dc:27:58:b1:6b:c3:a9:
3a:71:e3:0c:3f:5a:6b:37:e3:c3:c5:f1:79:06:ce:
b6:a7:40:55:ab:0e:e2:10:fe:ea:21:55:ef:f6:4a:
c2:8f:fd:48:6b:1e:c1:98:06:69:47:f0:b8:a7:a3:
6a:31:e2:93:81:e0:78:f8:de:fc:37:7e:33:72:f9:
ac:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.162.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49169
Signature Algorithm: sha256WithRSAEncryption
13:0f:7a:cd:bb:dd:ac:10:fd:6a:78:e3:9b:47:a8:60:e9:32:
01:d6:0e:d6:e2:d0:39:5d:4a:62:1e:1b:ba:08:79:23:04:0d:
90:73:58:a4:c2:03:c3:18:2b:7b:2a:3a:fa:ca:1f:4c:f6:29:
81:ef:3d:27:34:61:c2:fa:ea:0a:64:ab:e2:76:9c:32:c8:31:
81:d3:82:ce:a0:07:81:fd:c2:b5:d2:f1:a8:1d:62:ad:59:ca:
ea:fb:55:31:44:90:d3:4f:bb:07:54:3f:cc:1b:da:fa:22:39:
53:73:cb:e5:48:e8:b1:f8:25:97:25:6b:72:47:f1:e8:5d:56:
e7:ef:85:ab:60:99:a5:26:bf:1e:c5:de:07:b9:78:3b:cf:1c:
4e:c1:46:7a:ed:a7:1e:06:10:47:fd:01:79:45:50:7b:55:14:
cf:8c:04:38:c8:01:c0:eb:a2:2d:20:71:44:f3:08:46:ea:bc:
87:a1:28:46:a6:d4:ce:ff:b9:4e:a6:c1:51:07:8e:be:4d:4c:
77:52:c4:49:16:a9:e1:f8:2b:fc:a5:a3:66:38:96:fe:4c:2c:
e5:2a:77:f0:22:bf:f0:cb:5f:57:36:9a:35:ff:40:b7:0c:a6:
10:0e:9e:8e:aa:6b:10:bf:03:15:84:51:d0:31:dd:20:38:8c:
51:27:52:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 20:14:29 2024 by rpki-client on console-ams.rpki-client.org