Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90eZ9_GEjROw_yX0Vffzd2rl4J4.cer
File: 90eZ9_GEjROw_yX0Vffzd2rl4J4.cer (raw, json)
Hash identifier: f3ozQFZDiFtzAC5w2H7yo6tZg9K7v1ErqldTOsck3Mo=
Subject key identifier: F7:47:99:F7:F1:84:8D:13:B0:FF:25:F4:55:F7:F3:77:6A:E5:E0:9E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC79588E84249A78050C7416C304BB3A5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/06/bf08c8-5057-4831-93f7-ae02e91af8d9/1/90eZ9_GEjROw_yX0Vffzd2rl4J4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/06/bf08c8-5057-4831-93f7-ae02e91af8d9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:31:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 42209
IP: 185.216.51.0/24
IP: 2a12:b300::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 08:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:88:e8:42:49:a7:80:50:c7:41:6c:30:4b:b3:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:31:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f74799f7f1848d13b0ff25f455f7f3776ae5e09e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5b:95:7e:52:54:1c:b1:8f:5a:ca:f8:41:18:
a1:4d:59:47:34:36:cc:27:1d:a3:ee:30:6b:30:0c:
61:45:d4:cc:79:26:03:7a:2d:93:c9:5a:d3:28:80:
1d:94:26:d2:36:5c:87:3c:e6:d0:a8:c1:a4:02:9f:
75:63:f1:14:15:64:08:c9:ac:79:65:e7:22:aa:13:
47:5f:50:e0:10:57:e5:ed:c0:47:18:a8:cc:24:fe:
a3:db:08:2d:90:82:01:63:b2:cd:ba:28:96:44:dc:
65:06:9d:4c:d8:84:a2:2b:56:46:46:38:4f:d0:10:
69:ef:e7:13:a6:5f:77:50:73:1b:96:87:3e:79:53:
7b:95:dc:2d:07:71:5b:fa:07:8e:bb:3c:0b:cb:aa:
d2:37:25:6e:87:c4:3b:77:06:49:49:b9:a8:c9:85:
cb:35:11:87:1b:d0:7b:b5:0e:74:5b:f7:31:98:5c:
b9:d2:8b:9b:04:d5:2f:c5:12:fc:35:4a:6c:fd:51:
6d:60:bb:14:78:0a:3e:80:e1:11:ed:d7:0c:ca:13:
a0:df:9c:12:5e:65:71:e4:9a:b2:d8:d3:f7:1a:88:
e8:7f:f7:8b:cc:5b:7a:65:7f:c0:fb:a6:ec:6b:df:
fe:f5:e2:19:d3:6d:e4:26:f6:ab:6b:7c:dd:e4:33:
8a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:47:99:F7:F1:84:8D:13:B0:FF:25:F4:55:F7:F3:77:6A:E5:E0:9E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bf08c8-5057-4831-93f7-ae02e91af8d9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bf08c8-5057-4831-93f7-ae02e91af8d9/1/90eZ9_GEjROw_yX0Vffzd2rl4J4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.51.0/24
IPv6:
2a12:b300::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42209
Signature Algorithm: sha256WithRSAEncryption
0b:55:c7:9e:41:57:0f:e8:84:46:fd:07:4b:97:29:99:97:e5:
01:ca:06:f7:11:70:06:54:8c:d0:9c:b4:48:24:97:32:0f:ca:
04:45:8c:17:b3:39:21:a6:74:be:eb:5d:46:23:61:5b:05:f9:
4a:a5:82:13:0e:f4:60:57:db:8b:a7:6b:69:c3:07:91:91:f8:
e8:00:17:bd:97:be:b7:81:94:96:d7:28:19:b9:5d:25:56:da:
80:11:7e:26:aa:a3:3a:fd:24:a9:b7:52:ac:ae:aa:c4:5d:10:
45:39:0b:f4:13:29:0a:55:e3:79:93:85:b8:8a:13:41:25:05:
80:3d:5b:46:52:13:4c:c9:66:b3:6b:37:55:ca:61:50:51:f5:
bf:26:44:b7:a0:bf:21:d5:72:99:b4:46:72:8c:79:24:38:14:
08:ef:05:c3:44:c2:0d:29:c3:7d:58:cc:c0:87:c5:19:32:70:
51:bb:eb:1a:e1:a1:db:22:79:3a:36:11:af:0a:79:2c:7c:8b:
c0:4c:71:0a:9e:44:08:08:3b:4d:a7:76:fd:1b:39:1f:6a:1d:
fd:92:3a:39:69:54:aa:4a:b6:47:ec:e6:f6:15:c5:c2:1a:08:
8f:0d:d4:8b:31:15:ad:4b:49:2a:36:35:00:69:0c:48:68:0e:
42:bd:92:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 09:48:52 2024 by rpki-client on console-ams.rpki-client.org