Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FMuhsMMFzGL5KXwtmRiZRbl3leE.cer
File: FMuhsMMFzGL5KXwtmRiZRbl3leE.cer (raw, json)
Hash identifier: nAbVY9pthlme+MqD1q0RiEt1SkmEiTkdF/vSZONjyAU=
Subject key identifier: 14:CB:A1:B0:C3:05:CC:62:F9:29:7C:2D:99:18:99:45:B9:77:95:E1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC493911A73AB91F3107D87C578104FBD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:54 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 44036
IP: 91.199.7.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:91:1a:73:ab:91:f3:10:7d:87:c5:78:10:4f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=14cba1b0c305cc62f9297c2d99189945b97795e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0d:63:51:54:26:96:99:4c:be:2c:08:68:e4:
6d:98:1c:c3:6d:28:b7:50:1f:f9:2f:44:34:18:85:
ef:5e:21:22:ab:5b:c5:99:31:fd:05:78:0b:08:d1:
52:ee:8f:ec:ec:fd:68:8a:62:cf:ef:58:c7:4c:76:
f8:3b:e8:97:2d:c3:8a:ba:46:13:fb:86:b9:4e:68:
81:8c:46:fd:ed:7f:d6:c1:30:ce:06:9d:f4:e1:52:
b9:d4:54:60:e4:ff:21:22:cd:24:86:e7:48:2b:35:
47:4f:b0:93:c9:87:fa:1d:db:4e:7d:96:bd:0e:db:
07:83:3c:a3:56:10:e4:db:25:55:9e:83:ea:9c:18:
94:85:9a:7a:1f:dc:8e:18:4e:1b:45:ec:8f:26:78:
77:3c:91:5d:f6:e0:86:d2:9c:9d:a5:41:60:95:8c:
0c:d9:51:2a:c9:cb:79:a2:94:f2:b8:b8:b8:1c:ac:
0b:5f:74:6e:a2:96:32:e0:d0:0e:aa:f5:ba:2a:3d:
eb:7d:1c:4a:c4:85:04:ef:82:d9:98:6e:11:24:18:
5e:c0:43:a4:25:1e:8f:ea:40:59:b5:03:e2:9a:61:
cd:9c:8a:17:0a:93:65:2f:90:54:78:d4:1b:b3:2c:
d4:48:3f:6a:41:37:6d:1f:80:d6:3e:f5:20:3f:30:
37:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:CB:A1:B0:C3:05:CC:62:F9:29:7C:2D:99:18:99:45:B9:77:95:E1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.7.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44036
Signature Algorithm: sha256WithRSAEncryption
7c:9c:ff:f7:80:9c:ef:f7:af:cf:fd:e7:75:88:b7:08:51:38:
89:ce:5e:f0:33:9d:dc:d0:cb:a1:30:b5:ac:f9:79:dc:28:a9:
04:1f:d3:bd:1c:f1:6c:89:87:e3:d0:ce:74:a7:fa:9f:68:fe:
0a:8f:1e:d5:27:8f:17:a7:85:b3:91:ea:7a:69:a0:5e:19:d5:
3f:6e:39:0a:4a:b1:d6:60:a9:76:ea:42:d3:5e:95:89:8a:36:
01:56:ad:bd:72:97:03:c2:ab:21:11:c2:79:fa:a5:c1:6c:df:
51:4e:48:5f:65:42:14:4e:67:3a:c5:86:e6:45:40:bb:ae:b8:
db:8f:31:77:e1:4c:7a:b3:3b:63:34:3d:ef:cf:f7:50:34:fd:
74:c8:4d:9e:ac:21:81:78:26:55:9b:3f:1a:a3:3a:66:4a:59:
8c:c4:61:91:10:2f:dc:bd:db:3a:81:ca:56:0c:2b:ad:34:86:
3c:b3:e9:85:49:6f:1a:d8:0c:f5:47:5f:be:a9:62:8f:bf:d5:
d4:3e:c7:c0:68:28:f2:0f:4a:44:cf:60:d0:c5:c2:cc:3f:5a:
04:e4:4d:d8:05:d7:29:d0:bb:22:b0:5b:ed:1a:cc:d8:a0:7e:
d9:7c:19:fb:0c:55:86:1a:4e:e5:bb:a2:a1:12:f2:84:a9:f4:
91:e2:e2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 02:34:51 2024 by rpki-client on console-fra.rpki-client.org