Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer
File: AslIBM_MfvJY1G_DJMFnZEdgPvY.cer (raw, json)
Hash identifier: /vlnWU7gZO9Bucs1U9jlqA6b/4AT68Un0vH0c4xv3Uc=
Subject key identifier: 02:C9:48:04:CF:CC:7E:F2:58:D4:6F:C3:24:C1:67:64:47:60:3E:F6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DF76B936E3F0FB3F6D6ECB72FD688A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:32:17 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 89.254.0.0/18
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:76:b9:36:e3:f0:fb:3f:6d:6e:cb:72:fd:68:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:32:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=02c94804cfcc7ef258d46fc324c1676447603ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:78:17:31:46:31:73:57:36:7a:1e:25:e9:a4:
91:ec:e0:90:64:0c:6f:a3:ff:8a:f3:95:f7:ff:ae:
7e:b7:5f:6c:6a:12:ac:1c:72:79:72:9c:26:ed:79:
24:a4:6d:6c:f1:19:d6:bc:b5:11:b5:bd:a1:4f:03:
a3:ed:35:95:27:28:e4:0a:f4:a8:78:e1:32:00:cf:
60:35:1c:e8:de:dc:2f:15:4f:56:50:55:d0:12:77:
2c:9f:91:0f:9e:2d:f8:86:7c:7b:7f:24:05:da:2c:
74:62:36:3c:7a:6e:ae:29:a0:35:47:af:51:01:a9:
9c:f6:96:79:7e:00:12:01:84:1b:a7:35:af:38:8a:
23:1e:8f:24:1e:24:50:b1:38:c9:43:87:97:96:6c:
19:52:48:b1:3b:f5:f6:e7:49:41:de:36:05:37:4a:
4b:5e:2e:58:da:b9:b8:2c:10:65:2c:b5:05:45:9f:
52:b9:55:33:bb:fc:f1:f4:d4:87:4a:cd:b6:06:0a:
83:bd:65:f3:0b:b4:0b:e7:25:c6:db:f5:41:1b:e6:
9a:c9:d2:cc:bc:d6:ab:4a:33:f9:23:da:a8:24:6e:
41:b9:a4:77:b8:17:4c:5b:11:db:8a:5a:2b:3d:55:
06:fb:11:8a:df:ab:d3:c4:c4:0e:0e:87:a8:08:5a:
ad:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C9:48:04:CF:CC:7E:F2:58:D4:6F:C3:24:C1:67:64:47:60:3E:F6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.254.0.0/18
Signature Algorithm: sha256WithRSAEncryption
a6:e4:b1:78:c9:64:44:35:e4:ba:e0:fc:82:1a:c0:cc:57:e7:
d7:8e:8a:44:c2:66:8b:f1:90:35:3c:c1:23:ec:bd:b1:07:37:
79:5b:27:cf:5d:6f:d3:67:60:8e:ff:a2:fb:e0:a3:91:fb:c4:
b4:e8:83:c0:71:f2:c5:87:39:68:6a:7d:16:59:3b:be:e6:85:
da:49:83:5d:bd:d6:64:60:81:1d:90:ac:9a:29:e4:42:92:35:
2a:97:8f:9d:5d:8e:4d:4b:4c:7f:57:3d:ac:07:4a:69:18:5c:
89:8f:17:54:9f:85:70:bc:73:eb:16:b4:3e:9a:c4:56:2d:15:
e6:e8:91:db:d7:cd:18:2c:7e:4a:49:ee:92:f9:7c:7f:d8:9c:
c8:aa:b8:26:06:9e:a1:f8:ba:1a:56:89:a9:6f:20:60:7b:e1:
6e:1f:14:34:d5:7b:f6:78:a7:9d:b0:72:0e:ca:46:ee:66:ce:
76:3a:4b:56:85:4d:c5:f8:65:1c:f8:6e:f3:f1:ab:c6:f5:89:
55:c5:7e:dd:0b:c6:86:64:7b:9f:7c:02:17:50:1b:1a:78:3d:
a7:19:d6:1e:15:65:70:41:2c:3b:b5:c7:e9:ea:8d:a4:90:45:
c2:93:00:f7:ec:d5:f4:87:4c:f8:96:8c:7e:1d:e6:49:a2:75:
73:a9:b4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:19:40 2024 by rpki-client on console-fra.rpki-client.org