Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AahezixTn1hQ-nAfLUWiEn3IZ1U.cer
File: AahezixTn1hQ-nAfLUWiEn3IZ1U.cer (raw, json)
Hash identifier: HN4hqKrXiaBrBghs/iCl1bYfzxIJAa3fZXK3M2QCV20=
Subject key identifier: 01:A8:5E:CE:2C:53:9F:58:50:FA:70:1F:2D:45:A2:12:7D:C8:67:55
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B8DA29198E21FE8B6CEDE157914042
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/AahezixTn1hQ-nAfLUWiEn3IZ1U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:30:52 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 44427
IP: 91.199.119.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:da:29:19:8e:21:fe:8b:6c:ed:e1:57:91:40:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:30:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=01a85ece2c539f5850fa701f2d45a2127dc86755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:3f:9d:4d:ea:d6:67:d5:24:7b:28:81:5b:d2:
1f:91:3d:4b:14:85:de:ea:8a:4d:c3:ee:c4:ed:d0:
3d:33:4c:fb:aa:f8:b0:d4:81:39:81:4e:47:d3:42:
fb:59:2f:fc:69:50:ee:f9:9e:16:cb:9e:9d:d0:26:
89:0c:de:df:7e:b1:9b:70:6e:67:a2:f0:83:63:2f:
fd:27:05:dd:da:22:ad:2a:60:f7:df:8a:26:50:76:
47:f7:01:8d:7f:6d:0b:7f:49:20:6a:6c:bb:0e:64:
96:74:0c:6e:13:b3:db:45:2d:1b:bb:3d:e4:55:c7:
7d:d4:c6:ad:4b:0c:c4:e5:71:d4:20:e6:72:70:a7:
1e:b2:f6:02:29:14:43:4b:fa:3c:de:26:c3:bf:b6:
fb:ea:b6:67:c7:95:8c:ba:e9:3b:c5:d1:a3:ff:bd:
e6:ef:a5:cb:fb:c4:43:59:c3:1f:f7:e1:23:29:d5:
52:31:7d:84:db:7c:78:63:bd:2d:3f:4f:db:47:72:
d3:7c:ae:e1:bb:e2:9e:7d:2b:e4:3a:85:c0:20:de:
f0:9d:84:27:ac:21:e2:8d:e7:3c:09:2f:52:44:b6:
9d:30:3b:04:d5:30:52:76:45:a3:b3:ea:31:bc:f2:
0c:30:19:81:ba:84:6e:df:e4:7d:f7:82:aa:3d:c8:
9a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A8:5E:CE:2C:53:9F:58:50:FA:70:1F:2D:45:A2:12:7D:C8:67:55
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/AahezixTn1hQ-nAfLUWiEn3IZ1U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.119.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44427
Signature Algorithm: sha256WithRSAEncryption
74:11:16:8a:7f:54:ee:5c:a6:4f:e0:e2:fb:18:23:cb:6b:21:
97:5b:3f:ae:d1:a7:d9:b9:23:8e:03:3b:4d:a7:28:a9:e3:d6:
14:d5:f5:45:85:fd:af:a9:9f:ff:75:dc:17:61:f7:84:58:87:
11:c4:10:da:e9:7e:2d:91:cd:3d:72:cb:a3:f1:72:f4:79:c4:
c8:c9:6a:11:b7:29:f2:3e:3c:02:d0:eb:7d:ea:94:8c:59:02:
b8:a1:c0:a8:56:ec:6f:12:66:ac:e6:ad:8a:27:f9:61:60:af:
d4:e5:7b:ea:ff:06:51:1c:94:87:0c:b7:b8:77:78:3c:c5:71:
b1:99:a6:a7:e3:90:66:11:c0:ab:67:4c:b1:52:b7:0b:24:f5:
d3:2e:cd:12:8b:a8:52:6e:04:f9:8f:d7:47:ba:65:c7:6c:a4:
1e:d7:49:b8:15:28:b2:a2:32:e9:b8:e8:0e:16:f3:0a:44:50:
e9:df:6e:55:0b:46:5d:2e:8d:4f:5b:30:ef:ae:11:6e:5c:9e:
cc:73:55:11:92:aa:98:77:75:26:ee:35:28:53:a5:aa:82:39:
d0:22:ae:5e:f3:40:be:f7:f0:29:6b:c7:a2:a5:76:3e:08:17:
89:cb:5b:36:76:e8:18:af:91:ed:44:00:9f:b0:63:87:ef:7e:
d8:72:7d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 22:51:34 2024 by rpki-client on console-fra.rpki-client.org