Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer
File: G0ILeZxSBqGe93F-48cxL9iDMK4.cer (raw, json)
Hash identifier: 7npiScyA89yP0BdNO3ZgGrx9P+t6rpzFjYp8VpuEe2Y=
Subject key identifier: 1B:42:0B:79:9C:52:06:A1:9E:F7:71:7E:E3:C7:31:2F:D8:83:30:AE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC794BF094BBCCB3C5657DA757F542CA7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:31:03 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 51067
IP: 91.216.121.0/24
IP: 2001:67c:23f8::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:bf:09:4b:bc:cb:3c:56:57:da:75:7f:54:2c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:31:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b420b799c5206a19ef7717ee3c7312fd88330ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:93:50:45:d9:5f:4d:c3:3a:ab:98:11:23:45:
dc:1d:81:7a:37:7a:d6:09:6d:6f:3e:ab:77:11:69:
5e:d8:1d:79:b4:b5:b7:e4:7e:97:89:96:d1:e8:d7:
b7:ee:d3:0f:e5:ba:77:4a:42:ae:13:ae:f5:21:b6:
3e:9e:b4:ba:d9:9e:09:78:e8:0b:8d:88:ec:11:25:
22:49:fc:03:4f:4f:e3:be:6f:f2:da:19:5f:ec:52:
ca:20:dd:5f:b0:da:66:d1:53:90:91:4b:9e:16:5e:
f4:3e:8b:c2:0d:3a:b6:48:f7:e6:82:49:ec:2a:f7:
79:35:6b:bd:6f:1f:77:c4:63:e3:c9:a7:25:8a:e7:
d7:68:39:6f:ad:c8:ae:04:61:53:6e:a9:b9:22:88:
23:dc:68:f0:c6:cd:77:96:dd:ca:11:9d:58:d4:ad:
7b:4d:fa:c5:80:e5:17:5d:67:17:26:52:32:dd:cb:
ad:9f:b1:e5:c0:e4:d4:51:2a:34:48:c2:11:3b:90:
ed:73:82:bd:c4:a1:4e:25:d2:92:b1:96:54:0f:da:
c4:53:cb:17:51:5e:20:12:33:de:b4:0d:29:2c:c1:
76:36:e3:68:09:c8:00:26:a1:e1:51:8e:f2:da:45:
c1:5c:c3:7f:52:d1:2f:79:bd:4d:28:1d:55:66:e5:
9c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:42:0B:79:9C:52:06:A1:9E:F7:71:7E:E3:C7:31:2F:D8:83:30:AE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.121.0/24
IPv6:
2001:67c:23f8::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51067
Signature Algorithm: sha256WithRSAEncryption
29:6a:65:40:7c:98:c6:60:f9:60:6e:c2:72:a0:b6:a5:b0:92:
5d:54:71:e3:b1:3c:6b:06:ff:ef:39:93:dc:ea:68:52:30:09:
38:e7:3f:7b:50:bc:7d:1f:78:2b:1a:4b:9f:95:f1:15:d5:93:
d0:00:3e:fc:54:31:0e:d9:19:c4:90:19:d4:8d:95:11:c8:72:
67:c4:6a:61:ba:0c:be:da:ba:17:62:b2:13:1b:2c:1e:e7:8a:
52:f2:f5:2d:42:73:57:c4:95:ea:49:77:82:2b:41:b4:18:7e:
15:a8:cc:32:a0:d3:6d:ae:d9:7b:3f:34:a5:19:84:65:ae:ef:
6e:b4:be:e4:1d:6c:94:54:24:4e:9e:b1:9b:87:99:c5:20:1b:
ed:70:22:46:3d:cc:53:a5:50:55:f6:d8:49:98:87:60:f7:63:
13:6f:7e:23:59:c7:19:32:1b:8a:5b:05:52:0c:c8:44:db:ed:
7d:09:9e:0e:7d:16:13:33:ba:a0:55:8a:09:58:bf:0e:5b:26:
3b:f6:17:6a:33:0b:69:95:1f:89:ca:48:5b:00:73:b0:e3:f5:
2f:67:da:b9:18:a1:31:4c:4e:1d:6d:51:77:87:1f:17:d9:c5:
1e:4a:cb:3e:eb:c8:c6:ba:8e:66:b0:5a:ae:f6:53:b3:53:36:
7e:c8:3e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:37:11 2024 by rpki-client on console-ams.rpki-client.org