Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ML5SuuTUjd3Jy-wgdqupHJU64S4.cer
File: ML5SuuTUjd3Jy-wgdqupHJU64S4.cer (raw, json)
Hash identifier: z/RkU0vfzMVHq9nRmtwJ0n2stvsDgPyVFnuqJa3JODI=
Subject key identifier: 30:BE:52:BA:E4:D4:8D:DD:C9:CB:EC:20:76:AB:A9:1C:95:3A:E1:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266BAF214C2A09BA832AB0B8F069E180
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:38 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 43305
IP: 91.198.35.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:af:21:4c:2a:09:ba:83:2a:b0:b8:f0:69:e1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30be52bae4d48dddc9cbec2076aba91c953ae12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:42:06:11:f4:e5:0b:49:49:01:3d:db:e4:30:
51:26:3e:85:c6:3e:f8:3a:df:0a:93:9c:b0:c9:2f:
36:49:79:83:51:cc:0c:51:f1:ce:ed:4d:29:23:6c:
2d:cc:84:cd:e6:9e:43:15:6c:92:6d:56:76:9b:de:
7e:0c:cb:ac:46:5f:c4:9d:71:56:e3:b7:46:fe:87:
4e:35:7c:85:85:32:f7:2b:66:06:a6:92:3a:14:ee:
b6:a8:d5:d2:d0:94:60:e9:78:56:15:19:2f:29:1b:
f8:44:e0:be:87:cd:15:3c:fe:c8:a3:81:aa:fd:07:
34:19:f8:96:13:c8:2b:9d:b2:b3:c1:86:c5:f2:3a:
7a:99:06:49:fb:27:28:78:3a:3e:5f:f6:0b:fe:51:
23:71:20:85:6e:52:ed:f6:a8:c4:fa:87:c1:87:3f:
59:7e:64:ad:72:87:14:6c:bd:b5:06:63:11:55:db:
24:e3:6b:0d:6c:cc:20:71:4f:89:a1:ad:47:cf:4b:
54:d9:aa:f8:13:54:22:24:39:53:b7:30:db:03:eb:
82:78:ab:2c:72:72:83:b2:48:05:e4:b2:e2:47:c9:
88:a4:60:bb:fb:d3:61:fa:c3:47:45:2b:82:c6:69:
85:5b:62:d8:3b:cd:14:25:8a:bb:73:0b:c7:f8:6d:
0e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:BE:52:BA:E4:D4:8D:DD:C9:CB:EC:20:76:AB:A9:1C:95:3A:E1:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.35.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43305
Signature Algorithm: sha256WithRSAEncryption
18:e1:fd:b9:2e:5a:fd:84:57:e0:34:4f:21:b4:ac:35:9f:15:
e4:db:57:eb:e7:e6:27:e0:b3:9d:26:9c:42:6a:93:b1:b8:78:
6a:dd:2a:e0:18:95:55:87:f8:00:fc:af:f4:79:da:64:e3:ec:
cb:c0:ac:f6:ab:94:6a:ba:37:40:ff:d6:ec:8d:91:3e:e7:90:
15:f5:40:ec:44:ac:02:ab:ec:42:1b:bb:d9:fd:53:0e:41:a1:
b8:6c:d4:34:8e:9a:95:dc:35:3f:ad:e3:04:1a:1f:e1:af:0c:
cb:ab:50:b3:b1:3c:5f:0c:c2:df:06:05:bc:f2:52:00:b6:db:
bc:0d:c2:b1:d7:5a:13:54:e0:6b:45:61:a3:12:14:f2:a6:cb:
d2:00:ac:8d:b2:61:8e:97:52:70:cc:4d:bf:03:bf:2b:2b:a6:
06:4d:a4:ea:0f:17:03:a6:e6:f4:a2:d8:44:51:25:12:71:2d:
05:c9:d5:87:08:91:56:66:e1:6c:9c:93:f4:e8:76:a7:29:bb:
52:46:87:8f:d0:40:36:d5:dd:c5:ee:86:e0:47:cb:6d:f3:9f:
1f:08:13:98:69:b8:d9:e5:82:67:4e:c6:e6:e7:b0:13:8f:d5:
94:d8:56:95:43:30:e6:e3:a9:f0:ef:db:c3:dc:6c:e5:f1:f4:
0a:6f:f0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:00:38 2025 by rpki-client