Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ML5SuuTUjd3Jy-wgdqupHJU64S4.cer
File: ML5SuuTUjd3Jy-wgdqupHJU64S4.cer (raw, json)
Hash identifier: bp4ex4Xkegr/OlcJzd7BDjs/ynsfoaYWvFtXy1DA27I=
Subject key identifier: 30:BE:52:BA:E4:D4:8D:DD:C9:CB:EC:20:76:AB:A9:1C:95:3A:E1:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B7A33A34AF020E150D5118330B8561
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:29:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 43305
IP: 91.198.35.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:a3:3a:34:af:02:0e:15:0d:51:18:33:0b:85:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=30be52bae4d48dddc9cbec2076aba91c953ae12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:42:06:11:f4:e5:0b:49:49:01:3d:db:e4:30:
51:26:3e:85:c6:3e:f8:3a:df:0a:93:9c:b0:c9:2f:
36:49:79:83:51:cc:0c:51:f1:ce:ed:4d:29:23:6c:
2d:cc:84:cd:e6:9e:43:15:6c:92:6d:56:76:9b:de:
7e:0c:cb:ac:46:5f:c4:9d:71:56:e3:b7:46:fe:87:
4e:35:7c:85:85:32:f7:2b:66:06:a6:92:3a:14:ee:
b6:a8:d5:d2:d0:94:60:e9:78:56:15:19:2f:29:1b:
f8:44:e0:be:87:cd:15:3c:fe:c8:a3:81:aa:fd:07:
34:19:f8:96:13:c8:2b:9d:b2:b3:c1:86:c5:f2:3a:
7a:99:06:49:fb:27:28:78:3a:3e:5f:f6:0b:fe:51:
23:71:20:85:6e:52:ed:f6:a8:c4:fa:87:c1:87:3f:
59:7e:64:ad:72:87:14:6c:bd:b5:06:63:11:55:db:
24:e3:6b:0d:6c:cc:20:71:4f:89:a1:ad:47:cf:4b:
54:d9:aa:f8:13:54:22:24:39:53:b7:30:db:03:eb:
82:78:ab:2c:72:72:83:b2:48:05:e4:b2:e2:47:c9:
88:a4:60:bb:fb:d3:61:fa:c3:47:45:2b:82:c6:69:
85:5b:62:d8:3b:cd:14:25:8a:bb:73:0b:c7:f8:6d:
0e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:BE:52:BA:E4:D4:8D:DD:C9:CB:EC:20:76:AB:A9:1C:95:3A:E1:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.35.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43305
Signature Algorithm: sha256WithRSAEncryption
11:60:59:81:f7:25:db:bc:e6:28:21:41:a8:51:6d:8c:4c:9a:
b7:6e:8a:c1:9c:11:1e:d1:87:b7:86:f0:f8:f8:16:0e:ea:87:
16:be:81:7d:c4:e4:97:74:e6:de:50:eb:d8:5d:fe:20:51:e7:
a0:3c:59:6f:2e:37:3e:83:64:9f:81:ca:85:9d:4f:25:e3:7c:
06:ce:ee:d3:57:e1:c7:91:e2:b0:56:93:70:2b:28:34:7c:e6:
cf:fd:65:4d:d7:3d:01:ae:15:c4:e1:1f:5e:4d:c2:3f:96:31:
13:c2:a7:60:2b:97:3f:e6:86:0a:cf:c9:c3:c0:06:21:4d:f7:
c2:63:e4:0e:de:ce:85:fe:7d:ed:96:af:58:3d:40:2a:e2:eb:
34:91:61:21:c2:96:3c:b8:81:b4:5b:4f:fc:3b:ed:5b:5b:8e:
2d:f6:e3:46:e8:09:03:4e:9d:84:b6:92:88:d9:f9:5e:83:95:
db:15:a0:db:93:b6:a0:49:94:d0:2e:be:49:ba:59:1d:49:0e:
08:1a:44:a3:28:fd:43:ac:e4:bc:06:35:b0:47:1a:09:ec:1d:
49:eb:49:e0:0a:80:82:a5:dc:b6:3f:1d:b7:79:06:51:60:12:
80:1f:f0:35:46:3e:a0:df:e0:0b:bc:06:8c:99:39:11:e0:36:
4d:17:93:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:30:02 2024 by rpki-client on console-fra.rpki-client.org