Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer
File: T4R35WnR19YPBGmnzIp_R0YDm7c.cer (raw, json)
Hash identifier: b8jYUu6RvxqRk0notWGCdUCDqCez/bFFCMRC/1k16Ag=
Subject key identifier: 4F:84:77:E5:69:D1:D7:D6:0F:04:69:A7:CC:8A:7F:47:46:03:9B:B7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2B5DC361888F5CB94D0AFC7BBF5EE5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:34:48 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 197386
IP: 91.220.50.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:5d:c3:61:88:8f:5c:b9:4d:0a:fc:7b:bf:5e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:34:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f8477e569d1d7d60f0469a7cc8a7f4746039bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ec:73:c1:ef:18:9c:ee:22:e8:1b:7b:0a:39:
3a:f0:da:ad:0a:2f:7a:fd:09:cd:90:7c:aa:b6:1a:
f9:61:82:33:b7:86:25:b0:ae:16:8c:64:72:f1:d3:
41:e8:60:39:51:3b:05:63:e1:69:e5:98:9a:ba:dd:
77:76:9b:92:7a:ee:b3:3a:82:5b:09:1d:48:7f:4c:
b0:fb:8f:3f:27:e5:a5:80:9c:6b:89:60:ec:5e:33:
9e:12:87:1e:12:e1:30:ae:b1:5f:ac:85:fc:18:a5:
60:ca:7d:ad:7d:56:db:8d:b4:28:eb:51:da:4e:5f:
e8:78:52:ab:59:89:ff:0d:ee:36:b2:3c:ca:93:5e:
f3:62:3a:0b:d3:95:36:31:40:79:0e:88:9a:13:66:
cf:ec:32:0e:82:18:5e:f3:5a:ec:cf:6b:90:75:77:
df:d8:68:06:77:0d:a8:52:72:a3:93:b4:0e:b0:98:
93:ea:e0:7b:b0:8e:ea:a1:f4:c9:25:b4:a2:c5:47:
6d:06:fe:79:d0:a7:95:a6:b1:ab:98:e9:ef:b9:1f:
b7:98:07:aa:2a:8e:b1:90:39:2f:b3:a2:ad:4c:01:
cb:d1:27:5c:7a:03:44:12:06:53:b5:5b:28:dd:fa:
c3:53:33:4a:9a:51:96:f7:cc:a6:5a:de:27:8d:ec:
3b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:84:77:E5:69:D1:D7:D6:0F:04:69:A7:CC:8A:7F:47:46:03:9B:B7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.50.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197386
Signature Algorithm: sha256WithRSAEncryption
1f:11:9d:41:b7:31:02:2e:06:ce:92:b1:39:b7:a7:8a:f8:6f:
93:ca:94:d5:4b:69:45:14:58:b5:56:4d:08:cb:73:6a:bb:e7:
7e:82:a0:1e:cb:78:01:00:d6:9f:fa:a0:ea:2f:77:3c:2b:49:
da:8c:5e:7e:7e:d3:38:61:9d:92:b7:bc:16:52:d7:da:7d:78:
c8:9c:bf:7b:e1:4e:77:7e:d6:fd:de:a2:72:44:2e:09:14:77:
16:30:95:60:0b:4f:e5:d5:6e:3a:d1:19:ef:29:fb:66:e1:e4:
c1:cb:3f:9a:95:29:06:4c:41:07:18:88:f6:f2:f4:8f:1e:70:
21:cb:75:09:36:81:e6:fe:0f:fd:a2:63:7f:8d:c5:ee:cf:b0:
a1:7a:12:fa:02:e7:45:e9:65:3f:79:89:4d:ed:a4:07:19:00:
c5:53:76:7c:30:f6:40:f7:f2:c1:15:5a:cd:c1:41:ea:19:ef:
01:1d:00:63:40:04:f6:36:24:4c:83:5d:14:45:ef:45:0e:ea:
5b:60:fa:5e:98:90:08:7e:16:09:63:e6:7f:05:14:22:a9:59:
63:41:9e:65:e8:da:05:4b:6e:e8:dd:16:b9:52:33:bc:7e:7b:
ce:6d:a6:39:b2:04:56:d4:45:ec:c8:d5:fb:ce:22:2c:5f:53:
1f:90:d6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:44:49 2024 by rpki-client on console-ams.rpki-client.org