Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aNr9Y2BjamMndHoHCA9_Ll4yzoU.cer
File: aNr9Y2BjamMndHoHCA9_Ll4yzoU.cer (raw, json)
Hash identifier: 8nF5zMdPSFZx7YJXM2AmcsT4SoC5NQldTp29vSBv+Qk=
Subject key identifier: 68:DA:FD:63:60:63:6A:63:27:74:7A:07:08:0F:7F:2E:5E:32:CE:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B6724BDF2BD94EC5A8F0C79050B4DB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 204626
IP: 91.218.152.0/23
IP: 2001:678:5f4::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:72:4b:df:2b:d9:4e:c5:a8:f0:c7:90:50:b4:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=68dafd6360636a6327747a07080f7f2e5e32ce85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f3:bb:f8:dc:4f:20:00:a5:f6:d5:6f:3c:dc:
9e:6c:ae:52:4c:c8:07:f6:32:46:37:a5:3e:2c:78:
1c:00:9b:8c:49:f8:91:9b:2c:bf:ce:cf:cf:d5:47:
dc:41:a3:6c:4b:8d:0f:75:7b:4f:3c:15:40:4e:b6:
ee:2a:f4:e9:21:fd:ba:4d:43:7a:56:11:77:0e:fa:
68:7e:d2:e2:73:36:fd:7b:9b:b8:d2:4d:7d:76:e7:
9e:1f:8e:dc:ef:a1:08:1c:82:49:a8:96:48:bc:e8:
b0:cb:b7:57:89:e5:ea:2f:42:03:58:4e:f9:7c:29:
e6:e3:45:ad:3e:49:3f:f6:b7:03:a0:02:37:74:0f:
2b:fe:84:e9:87:92:25:62:41:98:52:11:0c:f1:20:
25:16:d8:69:6f:76:25:e9:59:e4:55:2c:7a:c0:4a:
b5:f8:40:4d:b7:75:f0:4f:57:b4:ad:14:47:de:5f:
3e:d5:6a:71:39:de:11:eb:44:54:b8:01:8d:80:e0:
58:4b:2a:1f:ab:9d:d6:b0:af:93:1b:9a:67:82:b7:
3d:38:1b:e8:ab:67:5a:cf:04:7d:b4:ac:cd:32:70:
48:39:03:a4:ce:54:91:f9:d8:97:51:ca:c6:ac:95:
ce:dc:01:44:8f:bc:4e:e9:f7:12:20:24:2c:1c:7b:
88:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:DA:FD:63:60:63:6A:63:27:74:7A:07:08:0F:7F:2E:5E:32:CE:85
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.152.0/23
IPv6:
2001:678:5f4::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204626
Signature Algorithm: sha256WithRSAEncryption
70:5d:7a:0f:76:bc:ae:62:55:c2:32:ee:dd:c9:52:f7:01:7e:
25:8b:92:42:fd:49:1b:d6:4e:95:bd:6b:45:35:04:77:c7:bb:
0a:6a:94:8d:56:9d:f0:6a:e9:2d:7a:b5:a3:60:33:cc:05:84:
2f:0d:9f:d2:1b:bf:aa:10:9f:7d:67:52:ce:91:9b:09:b9:d2:
c2:6f:bd:6b:11:fe:f9:b5:d9:46:30:1b:82:cd:d2:bb:83:07:
95:51:fb:01:81:97:28:55:e8:68:39:4e:a7:9f:2b:f8:bf:48:
e1:91:10:0b:39:42:ca:46:a4:c6:66:dd:a1:6d:12:73:3b:bb:
3e:e1:93:e1:10:93:07:6b:6e:e6:9c:a5:e9:a7:b0:bb:cb:5c:
b7:3b:f3:87:e0:2e:86:0e:90:a3:2c:65:32:36:58:89:7a:48:
fc:65:a5:26:0f:be:42:1b:53:19:15:63:01:16:32:e8:c9:f0:
6b:db:bf:f0:92:1c:08:93:e1:45:40:3e:af:ca:cb:5f:52:6e:
13:7d:ec:8d:db:3d:45:35:22:aa:41:a9:1f:f9:2d:d9:18:c0:
aa:c8:62:30:d7:26:77:ce:ff:90:56:ad:21:08:9a:4f:9c:b8:
3a:3e:d4:e9:f2:5b:86:8e:f5:2d:19:1f:38:ef:2d:9a:48:25:
11:22:a9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:07:52 2024 by rpki-client on console-ams.rpki-client.org