Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer
File: Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer (raw, json)
Hash identifier: KpL0md0uwEGRVQWKsIg0kEdpOTIWoW7USjbCVTEkTe4=
Subject key identifier: 43:CF:41:61:93:A1:C2:ED:30:56:B6:47:E5:A4:65:03:14:8E:38:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01907E0FE299AAAF4CCEADD3A5C4FCFA2CB6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 04 Jul 2024 14:04:48 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 216200
IP: 46.255.27.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7e:0f:e2:99:aa:af:4c:ce:ad:d3:a5:c4:fc:fa:2c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 4 14:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=43cf416193a1c2ed3056b647e5a46503148e3824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0d:14:e3:aa:6d:8d:7f:7c:92:a5:5d:8a:63:
70:3f:25:32:fb:8d:66:7a:0d:bc:65:a2:a5:66:88:
b0:bf:03:5a:37:3f:ea:5e:f5:1d:87:22:63:5d:ed:
7d:27:76:39:cf:5b:fa:c0:65:cd:14:3d:de:eb:ff:
2c:75:b3:07:5e:fc:8c:66:77:cc:ca:5a:a3:68:26:
bc:fb:cc:c6:0d:0c:e6:c8:46:af:af:ca:8f:fd:a9:
63:27:16:5e:29:00:22:8c:e6:dd:fd:80:d0:4a:b5:
ee:4c:92:b6:40:95:d5:5b:0b:ab:7c:4b:90:9a:4f:
5c:e0:aa:18:91:61:e8:9d:80:97:47:04:fd:15:81:
88:85:29:63:5f:ae:9b:28:6d:b9:93:1e:49:f5:4c:
24:ab:f4:4b:3b:37:e3:1c:81:d0:71:ed:9a:90:f2:
1c:70:26:49:e5:3e:9d:00:23:77:7f:c0:9c:2c:9e:
31:99:99:da:94:56:bd:b6:b4:13:a4:8f:ae:18:99:
61:fe:02:4f:2b:1e:f3:ac:65:d3:dc:07:6c:53:a7:
ed:4b:d1:79:e7:4c:53:3e:b4:43:29:e1:be:88:5d:
90:9b:7a:a0:de:52:af:d9:36:48:56:14:a1:3c:b9:
63:17:21:12:5f:23:67:14:4c:77:c8:50:46:64:f8:
9f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:CF:41:61:93:A1:C2:ED:30:56:B6:47:E5:A4:65:03:14:8E:38:24
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.27.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216200
Signature Algorithm: sha256WithRSAEncryption
2c:51:b5:4e:a2:14:0c:c8:2d:23:f5:7a:87:35:23:7a:f6:9f:
43:bf:7c:ed:8c:72:ac:47:07:6d:46:1e:19:6b:de:21:09:66:
49:ef:6f:f4:70:c5:1a:48:ea:3c:f0:cb:e9:f1:1c:b0:50:e4:
4c:ba:52:66:9e:d8:77:d2:9e:a3:a1:14:88:b4:33:44:95:7d:
a9:1e:1a:0c:bd:59:52:49:02:41:8f:05:37:f4:86:9a:c3:43:
5d:81:52:cf:79:81:9d:82:85:00:90:c8:ed:87:2a:18:ff:f3:
85:6b:b2:31:13:cd:83:a8:77:a7:d7:ec:38:0b:8d:5d:53:25:
24:08:78:b2:9d:d7:39:2f:57:a4:82:92:a4:75:bd:6e:c7:9f:
41:39:17:d2:82:27:c0:35:51:d4:00:79:03:58:7e:52:5b:54:
f3:82:2b:8c:02:ef:29:fe:f4:c4:0f:b5:46:1e:56:8f:c4:c0:
1d:3f:58:60:75:22:82:29:24:3e:cc:e4:20:7d:ce:0b:e9:3b:
87:55:3a:36:a1:36:be:72:a8:2f:68:ed:14:39:b7:5f:45:df:
a1:63:c6:d6:bc:ba:f5:0d:36:83:09:e5:54:23:9b:e9:e8:bd:
d5:e0:34:8c:2c:92:31:df:83:4d:fd:ed:02:08:9e:21:6a:25:
23:6e:09:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:15:50 2024 by rpki-client on console-ams.rpki-client.org