Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RiJNyTluWA_3Eg8lc1OnDHI3nJM.cer
File: RiJNyTluWA_3Eg8lc1OnDHI3nJM.cer (raw, json)
Hash identifier: 2MJdLzuraP3LmObaEk6motYDkB/+gejYYqcWhZcasEo=
Subject key identifier: 46:22:4D:C9:39:6E:58:0F:F7:12:0F:25:73:53:A7:0C:72:37:9C:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B7957B3964937C29A02684C2F86026
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:29:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 31704
IP: 91.216.170.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:95:7b:39:64:93:7c:29:a0:26:84:c2:f8:60:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46224dc9396e580ff7120f257353a70c72379c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9a:a9:64:55:b3:f0:a5:ab:f3:8c:a1:ba:ed:
52:26:3f:ea:13:65:ee:80:52:c0:d0:59:98:f1:1f:
11:be:ed:00:da:92:f7:4b:10:69:9b:c6:98:64:8c:
18:ae:db:a0:19:23:51:bd:5c:b6:2b:c1:f3:26:91:
77:1b:02:7b:e2:99:45:13:60:d0:ba:9b:f6:99:5f:
03:56:36:f9:0f:76:03:08:2d:8c:11:d2:6f:ba:ac:
d9:4b:ee:d9:e1:6c:23:94:8c:27:57:b8:29:14:40:
79:5a:18:57:cd:2a:28:ba:f4:99:37:bf:0e:ec:95:
47:59:1c:71:cd:95:63:3e:6b:cc:c4:87:c7:97:30:
73:1f:fe:42:bd:64:74:7d:5a:9f:e9:10:ad:7d:94:
6f:84:19:61:a9:76:78:22:de:3d:5c:2c:98:df:91:
56:f3:2b:27:9a:35:99:8c:7b:8d:d6:13:5e:e3:c0:
d2:83:91:5e:8b:46:4e:4d:61:47:40:5a:8b:af:63:
10:97:eb:3f:ae:2e:0a:8b:d7:b9:15:4b:fc:6e:8a:
de:d2:06:3b:be:be:49:02:c0:61:19:ff:a6:d2:71:
15:6a:04:89:ac:8b:50:06:1b:d5:82:d6:92:8b:c3:
0e:85:bb:57:11:91:33:03:3d:37:b4:ae:9d:f6:90:
dd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:22:4D:C9:39:6E:58:0F:F7:12:0F:25:73:53:A7:0C:72:37:9C:93
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.170.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31704
Signature Algorithm: sha256WithRSAEncryption
4e:87:76:eb:39:24:3e:6f:75:b3:2b:8e:1c:a6:22:5e:74:7f:
ad:c9:58:2b:c2:2c:02:7a:4e:62:17:11:48:c5:cd:d0:2f:3d:
bf:02:4d:14:41:93:cd:69:59:43:9c:10:c9:71:c9:9e:4d:97:
28:19:04:1b:43:8b:9a:8c:30:f8:9e:21:cc:fb:08:7a:6d:07:
92:99:89:d3:5a:8c:9a:6c:0f:2d:68:13:1f:a1:60:6e:ab:9f:
05:36:7c:f0:63:c9:64:aa:4d:fb:3a:a7:27:84:f0:b6:a5:1b:
fd:c7:3b:3f:4a:8f:0f:ea:f6:96:a8:08:91:15:d8:15:d2:56:
76:72:22:36:a1:e7:38:5f:e5:82:84:bc:2c:85:95:4b:cb:17:
bc:98:d3:eb:03:09:9f:7d:fc:e2:23:19:55:10:76:c5:5d:89:
cd:de:74:89:43:82:f0:e9:3e:4b:e2:b2:4a:83:5d:53:80:0a:
c8:cd:66:6f:29:da:67:12:83:fe:72:d5:5d:6c:b7:a3:7b:3c:
10:78:fe:7c:58:1e:9b:be:ce:ae:0f:7e:d0:3e:38:77:a0:4d:
a7:20:c1:8d:8c:90:32:97:bf:a6:fd:2a:86:09:95:0d:fa:99:
88:89:ac:90:44:33:0d:3c:2b:55:22:b7:02:27:20:c4:59:2a:
9e:31:1b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:15:02 2024 by rpki-client on console-fra.rpki-client.org