Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dXFLWBraGW41UcCM52JDvgWLROs.cer
File: dXFLWBraGW41UcCM52JDvgWLROs.cer (raw, json)
Hash identifier: FimK1re96dQg9aAwkNtiFKFOyXt4YiE/7SI3Lz1BbyM=
Subject key identifier: 75:71:4B:58:1A:DA:19:6E:35:51:C0:8C:E7:62:43:BE:05:8B:44:EB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94C0A46D9B2337607CFB7E824D9F588
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/39d226-72bf-490e-9f16-073fbbe111e5/1/dXFLWBraGW41UcCM52JDvgWLROs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/39d226-72bf-490e-9f16-073fbbe111e5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:30:52 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 48117
IP: 46.151.248.0/21
IP: 91.209.24.0/24
IP: 193.106.24.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:0a:46:d9:b2:33:76:07:cf:b7:e8:24:d9:f5:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:30:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=75714b581ada196e3551c08ce76243be058b44eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:a7:7e:03:b5:e7:4e:8b:83:c7:b0:68:70:dd:
78:1c:d0:10:b3:0e:f5:cc:9a:3f:7b:b5:33:f0:26:
d8:1b:35:cb:ad:59:78:5b:42:2c:b0:69:db:ba:4c:
e3:a3:b3:c7:cb:8c:d3:9f:cf:46:2e:b2:e8:3d:6d:
76:9b:87:81:52:ff:5f:52:c9:52:ff:50:ac:37:23:
8f:bb:2e:4f:b4:0f:c2:b4:db:ff:a5:0d:ec:c3:dd:
b1:ff:6d:23:39:3b:cd:1b:a8:ca:fc:a1:13:8a:4f:
e1:29:1c:85:7b:af:34:dd:08:46:2e:44:ad:d9:74:
b5:0d:01:4b:df:45:06:b1:84:65:4d:36:39:4b:f3:
8b:dd:23:f0:1c:2e:2d:38:82:a4:08:09:57:54:ae:
19:7a:32:8d:68:fe:61:14:6e:26:cd:fa:2d:29:0e:
f7:1c:78:49:a4:64:be:11:68:01:fe:a1:56:4f:dd:
a2:a0:93:63:07:f7:85:2e:96:12:17:87:ae:d1:77:
d1:d9:8d:cd:5c:a1:19:0f:2e:e0:e9:ed:17:6d:a6:
a1:ab:50:b9:e6:c4:de:e9:f8:b8:56:73:a2:10:72:
d6:a1:13:e4:cc:03:db:37:45:ed:b1:0e:57:4d:b8:
cf:60:a1:e7:9d:3a:10:0a:c7:59:1c:58:d0:6a:cf:
fb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:71:4B:58:1A:DA:19:6E:35:51:C0:8C:E7:62:43:BE:05:8B:44:EB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/39d226-72bf-490e-9f16-073fbbe111e5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/39d226-72bf-490e-9f16-073fbbe111e5/1/dXFLWBraGW41UcCM52JDvgWLROs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.248.0/21
91.209.24.0/24
193.106.24.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48117
Signature Algorithm: sha256WithRSAEncryption
36:8a:c9:1b:e0:63:87:4a:bb:47:cd:8a:35:51:b6:ab:d4:3e:
04:56:1f:4c:32:58:1e:b6:80:6d:fb:ae:13:94:b8:4d:78:3b:
45:c0:38:03:5f:79:08:14:52:92:75:44:f6:c9:8c:7d:d3:b1:
e2:3b:91:4d:5e:3a:7a:cd:3f:5e:78:d1:ef:8b:7e:7b:fc:82:
26:91:21:71:f3:7b:d9:78:27:a4:cd:d7:11:e4:32:22:f1:5a:
f5:80:60:99:76:ba:a8:f6:7f:57:ac:53:6b:b0:80:d1:90:ee:
6a:89:32:7c:ee:74:a0:b0:59:a4:a5:23:6f:ee:e2:4d:4b:a7:
c9:d0:35:d8:a4:1c:7d:87:b4:27:40:27:1e:6b:45:de:e6:fa:
41:65:ea:a5:f3:ac:2e:6b:4c:43:6d:75:e8:16:40:c8:35:78:
0a:f8:14:08:01:1d:93:47:11:75:46:44:05:36:d8:b0:54:c0:
31:4f:7c:23:a1:ad:a9:20:f7:a9:ff:c1:a9:44:10:6a:ab:bc:
2f:ba:ce:d2:de:5b:63:20:19:06:af:31:86:0a:6c:5a:2d:53:
50:91:41:d4:e8:9e:8f:fc:25:55:4a:e9:6a:47:50:96:c0:50:
09:50:86:5d:90:b5:80:0d:a3:42:31:22:e4:c3:c4:c9:b3:b9:
f2:f1:12:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:40:11 2024 by rpki-client on console-fra.rpki-client.org