Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer
File: S92aEzqSSGoU7cTnYlsk-V04kcw.cer (raw, json)
Hash identifier: UC4w7srkSFBTOhCaF8CC1H14d46K3VCMgBgc3Hgh+PE=
Subject key identifier: 4B:DD:9A:13:3A:92:48:6A:14:ED:C4:E7:62:5B:24:F9:5D:38:91:CC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB36C9FB71A49AEB354BC3646C8A8C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 197931
IP: 45.128.98.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:36:c9:fb:71:a4:9a:eb:35:4b:c3:64:6c:8a:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4bdd9a133a92486a14edc4e7625b24f95d3891cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:dd:4b:03:ae:f6:f7:a6:7f:97:63:75:6d:24:
06:56:01:48:4a:6d:a8:eb:14:59:2b:33:bd:ef:d0:
e1:b8:d4:78:c2:37:6a:dc:4c:d6:fd:0a:c0:ba:1b:
a7:54:9c:17:1b:aa:9e:2f:56:29:3f:97:78:8c:ae:
6a:0c:a5:b6:62:c5:47:4a:38:86:02:a7:c2:f8:2a:
40:66:bd:b1:6f:11:65:15:7a:5f:74:6f:d9:99:e3:
f1:8f:b8:66:dd:b7:7c:f7:be:c1:77:e8:99:5a:54:
b2:9e:fc:43:71:07:b9:6a:80:fe:48:cf:b0:c2:b8:
76:51:0d:01:18:7c:9c:da:5e:b2:a0:55:4b:c1:65:
02:7e:cb:26:4b:74:0d:59:47:5d:6f:2c:aa:23:3b:
15:27:84:e4:d4:14:69:d1:d9:95:d9:68:ae:4c:a6:
17:d1:20:0a:57:87:81:ef:da:0b:77:5c:3b:f7:4b:
70:43:85:47:fc:8d:a3:a8:e5:c9:94:95:61:17:58:
de:52:8a:23:4d:b8:94:39:ad:7c:9e:80:65:2c:92:
03:e0:18:15:6c:80:eb:4d:73:f9:b8:1e:3a:ef:ec:
01:c6:09:1c:9a:b7:ff:86:65:44:62:62:7f:99:9f:
3c:4d:29:4e:c1:34:c7:4c:ef:46:d4:6a:cc:e7:7c:
f4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:DD:9A:13:3A:92:48:6A:14:ED:C4:E7:62:5B:24:F9:5D:38:91:CC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.98.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197931
Signature Algorithm: sha256WithRSAEncryption
0e:a4:34:a0:f1:bf:85:8c:95:03:16:05:c6:6d:fb:c5:ce:0c:
bf:d5:ac:9a:6b:79:eb:d5:cf:ef:d8:fd:1f:cf:b0:aa:27:70:
a2:a2:e0:d5:8f:d2:8c:c4:bc:c3:a5:77:aa:21:bd:57:83:a5:
39:90:98:fb:a2:61:ac:2e:a9:de:b9:c7:74:5f:7f:1f:39:fe:
3a:d2:55:74:17:8b:6c:93:d1:ef:81:60:fc:23:f9:3c:a9:95:
ae:c9:f1:90:25:3e:21:4e:67:57:68:de:55:64:b3:fa:e3:ef:
63:05:38:47:6c:4f:63:5d:ad:5c:47:27:8c:5f:15:c0:c8:dd:
39:ab:4e:47:7c:4e:f2:0b:72:a2:99:32:12:4d:f3:62:4a:42:
fc:d5:7d:d0:7d:2d:ba:06:ca:57:e1:e4:cd:21:cd:cc:a4:64:
1d:ee:8d:5c:2a:74:55:f5:11:88:40:f7:04:aa:30:e4:6e:14:
2f:05:a1:b9:31:61:90:39:4f:28:2c:ad:3d:68:4f:f5:71:f9:
8b:32:39:79:a0:53:05:ac:61:ed:c8:93:65:fa:91:4f:50:cf:
fb:9a:ce:ab:1c:4f:aa:cd:54:5c:19:2e:9a:9f:c3:5c:09:2e:
94:f4:72:38:b1:84:0a:75:3d:f8:b1:78:2b:52:b3:c0:3a:3a:
50:03:9f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:35:08 2024 by rpki-client on console-fra.rpki-client.org