Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/P6LWhQu8RyBVepF03LyXYK7MCxo.cer
File: P6LWhQu8RyBVepF03LyXYK7MCxo.cer (raw, json)
Hash identifier: rNXdh0SWsLApS6chaNufNTLvvpWOyKv3NxbnRUMbuGA=
Subject key identifier: 3F:A2:D6:85:0B:BC:47:20:55:7A:91:74:DC:BC:97:60:AE:CC:0B:1A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DD081DD299A5B6D92050B6D4C9626C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:30:46 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 49275
IP: 91.199.239.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dd:08:1d:d2:99:a5:b6:d9:20:50:b6:d4:c9:62:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3fa2d6850bbc4720557a9174dcbc9760aecc0b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ed:28:20:54:2a:f8:bc:d8:99:95:a9:9d:10:
42:85:36:52:64:1a:b5:b6:48:13:e2:65:c8:a7:e1:
21:8d:32:70:e1:eb:ba:b4:9d:9d:56:9d:0e:4b:2a:
6e:ae:0f:df:a8:07:c1:ef:c6:49:75:32:c6:a2:e3:
79:7a:e7:52:47:68:fe:18:fd:2e:f1:54:9a:97:3f:
a4:24:e3:20:e5:2b:76:67:ec:51:9b:5a:74:51:20:
4a:ef:85:48:02:dc:17:d4:6a:a8:39:36:a9:85:c9:
97:24:82:9e:f7:c0:bd:4a:d3:c2:15:3a:90:2a:6e:
38:ce:cd:15:42:06:4c:67:98:57:fb:8c:8b:e3:7a:
73:70:6f:97:0b:08:89:c1:20:91:b5:0a:ab:4e:f6:
bf:d0:8d:4b:3a:89:a5:0d:b3:32:2f:69:fb:bc:1e:
1b:97:4c:a7:cb:78:71:13:30:f6:30:53:5f:87:fa:
57:0f:96:d9:15:c7:33:f9:ea:80:8e:c0:ba:2b:c4:
9d:c3:32:3d:16:95:da:f1:f9:81:b8:aa:6e:93:d8:
bf:11:81:64:42:8f:8f:16:fc:a8:95:57:63:58:4e:
a4:82:a7:84:bd:c6:ef:09:d1:7b:a2:74:13:a8:b0:
d3:b9:ab:5c:db:1f:ec:cd:3a:55:cc:e2:87:7e:be:
84:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A2:D6:85:0B:BC:47:20:55:7A:91:74:DC:BC:97:60:AE:CC:0B:1A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.239.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49275
Signature Algorithm: sha256WithRSAEncryption
88:1b:81:31:c3:b4:36:24:61:78:43:ab:39:86:47:cd:a1:a9:
44:5c:60:d7:ce:80:e1:3f:ff:d0:2c:c8:d9:87:d0:e0:82:5a:
8b:b4:16:a5:e7:92:e5:a0:ff:38:2d:a6:0c:e4:57:62:de:9a:
a8:08:71:90:d2:98:a8:f4:d6:b3:95:ee:65:59:14:04:5d:90:
64:36:4b:ce:25:1d:ec:2a:8f:35:33:7c:14:cb:d8:0a:74:1c:
96:fe:86:bb:b7:6c:2e:ce:2f:f0:34:b8:4d:c2:2c:aa:1a:4f:
f8:80:5f:4f:68:a0:56:06:4d:db:8f:ca:76:bc:5b:10:c5:94:
c5:f9:a0:88:1a:99:ec:dd:12:58:c3:7c:1f:90:1b:09:bd:e1:
70:66:d2:e7:7c:e4:94:2b:00:79:3c:02:36:41:f3:bb:68:e2:
c5:e3:55:38:96:42:f7:4c:ea:fc:7f:5f:9f:ea:ab:e0:83:78:
cd:79:12:46:e6:82:57:21:a8:2f:b7:71:f3:66:7d:46:66:67:
ec:1f:57:2a:93:fd:48:88:b6:8b:a5:dd:f3:d4:10:8e:e8:16:
fd:a4:ed:bd:ed:63:16:e9:62:85:f7:a0:ed:f3:06:ff:40:73:
e5:05:8e:49:36:16:42:a7:d1:e2:2c:d7:d9:19:f8:5c:60:95:
65:ec:f6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:31:11 2024 by rpki-client on console-ams.rpki-client.org