Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer
File: C155jbbo9XxfSkRRUJAd7oqW1eU.cer (raw, json)
Hash identifier: iJ+gECpMH2dl9NcC15KbBz2nSdAEO2/oblSn0NADxUY=
Subject key identifier: 0B:5E:79:8D:B6:E8:F5:7C:5F:4A:44:51:50:90:1D:EE:8A:96:D5:E5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DAB089989E7BDD535BA1D383C357E2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 34024
IP: 91.199.235.0/24
IP: 193.26.26.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:b0:89:98:9e:7b:dd:53:5b:a1:d3:83:c3:57:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b5e798db6e8f57c5f4a445150901dee8a96d5e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ca:e5:bf:78:3c:5a:c0:19:ca:30:60:04:9c:
99:2f:93:20:b5:a5:d9:56:0b:05:c0:26:c8:e8:7a:
8c:35:aa:88:a7:33:50:1f:38:5e:30:e5:32:1b:dd:
8e:e0:9f:73:16:6d:c3:c3:bc:0f:08:16:70:62:19:
52:9b:3a:7a:ba:71:d0:01:64:72:99:cc:89:7a:4a:
a8:6b:10:0f:f6:64:3f:d3:e3:f0:dc:64:7d:d1:39:
52:19:b7:10:53:3e:e5:e7:b9:42:a1:70:cb:8f:89:
7e:a7:48:64:e8:58:b8:54:ee:19:9a:02:43:b4:f5:
4e:d6:37:3b:6c:b9:b1:ba:e9:c7:0c:81:16:00:aa:
b5:97:d0:a9:0d:e2:dc:44:3c:7e:c8:65:e3:dc:c5:
e1:d0:18:aa:01:04:24:4b:46:cd:30:9d:91:3d:c8:
9d:4d:51:64:2c:30:de:3d:81:e0:f5:0d:63:06:db:
7b:5d:56:01:75:67:78:b9:63:51:11:4c:a9:a8:92:
3d:b9:e3:fe:05:ce:c2:ec:cf:1c:94:a6:e0:13:9e:
af:95:ac:bd:b4:26:25:3b:6d:f0:e4:d0:1f:44:2d:
58:17:d1:5a:d6:d4:be:e1:17:46:8b:47:96:2b:fb:
de:3c:24:76:76:bb:8a:1e:4c:6d:7f:85:7a:10:17:
4e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:5E:79:8D:B6:E8:F5:7C:5F:4A:44:51:50:90:1D:EE:8A:96:D5:E5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.235.0/24
193.26.26.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34024
Signature Algorithm: sha256WithRSAEncryption
4e:e4:d1:e9:0d:7e:47:42:3c:b7:ca:db:65:ec:5a:4a:bf:8b:
6b:fd:6e:0f:34:d8:e6:75:89:3f:2e:1b:93:15:aa:0c:8c:6d:
3b:8b:9b:72:45:e4:9e:b1:ab:5c:70:00:6f:bc:f7:28:88:7d:
11:8f:4e:53:ae:52:ba:f3:d9:ca:7f:d8:8c:01:5e:b2:33:4b:
c5:54:79:50:d4:ca:ba:2a:9b:18:3e:28:df:a0:89:86:93:cc:
ab:39:89:15:fd:fc:af:f4:a9:6a:b6:18:33:48:0b:66:ef:5e:
31:97:b2:a9:67:89:83:52:38:42:a2:a4:5e:98:55:6b:b1:16:
f4:6b:29:62:02:54:82:5e:cb:2a:63:79:0d:04:27:88:11:74:
3f:57:6b:3d:a6:89:d4:9e:01:74:4c:bc:0e:37:d2:92:d5:5f:
18:4a:f8:8a:87:2f:9b:4b:98:91:58:ea:39:62:b5:f0:a3:68:
4e:73:b1:05:9a:1c:9f:0e:47:c1:d3:86:0b:b4:38:bc:c3:07:
1f:39:78:4a:9c:9a:cb:fa:24:27:1c:60:aa:05:c4:76:e6:03:
1a:e5:07:98:73:4b:3b:6a:99:87:d2:a8:67:5a:c1:1e:43:ef:
3c:26:ff:16:f6:89:c2:b5:51:76:5f:57:58:5a:7e:fe:0a:f1:
64:37:de:80
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Nov 26 23:05:23 2024 by rpki-client on console-fra.rpki-client.org