Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/L5INmRKzpyi5SBgYjvPj5X-NP5w.cer
File: L5INmRKzpyi5SBgYjvPj5X-NP5w.cer (raw, json)
Hash identifier: NHdPYvVZPEwPy2mt3DB9vn/5diAe7A4huOdsprtmDEU=
Subject key identifier: 2F:92:0D:99:12:B3:A7:28:B9:48:18:18:8E:F3:E3:E5:7F:8D:3F:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3488A7DDAC3413207A7916CFD8BC7A4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:20 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 204991
IP: 91.203.226.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:8a:7d:da:c3:41:32:07:a7:91:6c:fd:8b:c7:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f920d9912b3a728b94818188ef3e3e57f8d3f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:01:c1:ad:5e:cb:bc:de:16:74:b1:87:6f:12:
b8:c7:c3:19:f6:6f:74:f0:8b:58:f9:18:6a:b9:e7:
92:af:e3:19:07:0f:ab:b9:20:6c:52:cb:b5:41:61:
bb:dc:25:21:4b:ab:5d:ac:0b:f8:b8:47:64:bb:12:
d9:a0:9c:74:07:42:f2:52:19:5e:c1:84:9f:5f:9a:
2f:73:aa:ba:b0:e2:b1:6f:50:6d:27:f4:53:ae:64:
04:c3:b0:e6:d2:ce:2b:68:55:63:95:e6:01:09:69:
22:12:4a:5a:e8:91:ed:a8:36:77:87:88:6e:99:57:
2c:eb:b6:c9:60:1a:20:37:c4:c0:c5:d2:27:6a:4e:
67:70:45:81:00:b5:a4:04:7a:66:1e:46:eb:53:b8:
b4:3e:90:b7:0c:61:da:92:d3:02:15:83:9d:3d:c0:
38:05:c7:92:8d:3c:8f:af:ab:f6:b6:69:b4:f5:f3:
7a:32:1b:96:e2:2c:94:a0:89:63:38:16:ef:be:07:
df:2f:71:bb:66:8c:f6:2e:93:01:1e:d7:9d:b8:0b:
41:4b:43:d2:e8:4d:7e:cc:33:40:57:be:86:fb:8b:
e7:99:16:5e:52:36:dd:6b:72:f4:bb:c5:23:4c:83:
d3:35:e2:50:7e:21:f4:d1:95:d3:d6:0a:f3:d1:5d:
eb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:92:0D:99:12:B3:A7:28:B9:48:18:18:8E:F3:E3:E5:7F:8D:3F:9C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.226.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204991
Signature Algorithm: sha256WithRSAEncryption
2f:b6:56:ae:95:b9:c9:e0:46:19:c0:ff:a3:c7:b7:11:55:ff:
d3:97:ff:99:a9:78:4c:01:5d:ba:18:ed:f3:03:28:9a:37:ee:
41:96:90:dc:41:29:3b:c6:95:6d:2f:9b:82:fe:d1:5f:49:7d:
ed:c5:6d:a8:7c:60:5d:13:9c:8d:b8:2e:db:8f:09:9c:3e:13:
95:f8:6c:7a:04:e4:c8:03:e1:19:97:65:b3:2d:fd:28:21:2a:
d8:28:ff:68:57:89:f6:6d:5d:37:9f:ff:8b:de:dd:ae:b8:55:
34:b0:88:ca:7a:d4:ff:bd:cd:ef:8c:6a:8b:c0:aa:7e:e7:e2:
03:9f:ce:89:d2:bb:d8:be:e4:ec:58:71:55:dc:65:3b:aa:8b:
61:95:ac:56:5a:46:1f:16:49:2b:a2:b6:29:3b:8d:dc:4c:67:
18:c1:71:6e:5b:90:17:68:2d:6d:29:6c:da:5a:1b:b3:fc:36:
b9:72:8a:64:75:18:d6:75:6e:34:ad:86:8d:04:db:a2:05:e5:
b5:78:bd:6b:b6:ac:c7:9a:47:9a:ce:79:21:a1:f9:47:f9:ac:
0e:2f:fa:bc:6f:30:79:db:5c:53:db:e2:63:0a:39:46:a6:a2:
bd:68:f6:d8:1d:d1:f9:2c:23:9e:cd:88:bc:d8:56:dd:a0:7c:
6e:e0:9c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:40:08 2024 by rpki-client on console-ams.rpki-client.org