Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iPew3Z_8ovhXNMU3y-9czRGZ5bw.cer
File: iPew3Z_8ovhXNMU3y-9czRGZ5bw.cer (raw, json)
Hash identifier: GFLBCipNCVUR77e/Uf2sFKUneymzVpVWochf8fDihuU=
Subject key identifier: 88:F7:B0:DD:9F:FC:A2:F8:57:34:C5:37:CB:EF:5C:CD:11:99:E5:BC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F4F43B79094CA5BEE1E1E70C3C196C79D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/iPew3Z_8ovhXNMU3y-9czRGZ5bw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 06 May 2024 18:56:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 197680
IP: 91.213.226.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4f:43:b7:90:94:ca:5b:ee:1e:1e:70:c3:c1:96:c7:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 6 18:56:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=88f7b0dd9ffca2f85734c537cbef5ccd1199e5bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:63:bb:e7:f7:91:a5:d9:77:29:d1:9e:89:51:
e1:8d:25:76:8d:00:6a:e2:0a:ea:09:9d:ac:1c:ca:
c5:5b:45:ec:2b:ec:1e:f0:d7:1a:fc:2f:8e:9e:b4:
0b:08:b9:95:13:27:7a:0f:9e:e1:94:79:d3:45:44:
97:33:9a:ac:70:a7:49:f9:32:11:d5:29:3f:7b:a8:
ef:ed:99:e7:4e:7f:7b:63:4a:8c:35:ae:d8:cb:1c:
e6:cc:1a:5f:16:7f:e5:8b:d6:36:b0:d7:eb:a2:c1:
93:60:24:fa:1a:48:ea:be:5a:6d:3d:16:ad:64:74:
56:e1:5e:6b:16:73:7c:c9:e3:f2:f3:74:5e:b1:4a:
fc:c9:25:cb:fd:45:76:69:36:0e:8d:a7:8d:57:11:
e1:27:85:02:a2:34:a9:c0:01:72:3a:ff:f5:6d:50:
52:0d:d9:f2:92:fc:b5:44:75:b3:21:fd:30:a5:ea:
3d:93:38:3c:c6:b0:23:51:63:07:bb:b0:7b:80:06:
8f:55:5a:6d:09:37:06:8d:7a:2e:23:a6:8e:67:be:
9b:21:a0:34:40:e0:22:1c:9b:6f:dc:58:ce:bb:32:
64:26:db:ed:eb:83:8d:12:95:15:d5:e4:ad:14:37:
11:7d:b7:64:6c:58:28:b8:2f:ae:33:b5:55:ff:6f:
00:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F7:B0:DD:9F:FC:A2:F8:57:34:C5:37:CB:EF:5C:CD:11:99:E5:BC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/iPew3Z_8ovhXNMU3y-9czRGZ5bw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.226.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197680
Signature Algorithm: sha256WithRSAEncryption
4e:2c:e9:c0:cf:54:c0:64:65:63:c9:11:df:d2:e8:b6:11:80:
af:c9:99:39:88:83:20:7c:1f:6c:b5:b3:ca:4f:17:db:53:df:
80:6e:09:34:96:2e:f7:22:ce:d9:ce:98:a9:d1:c7:e7:e1:60:
bd:40:3c:87:12:dd:7f:f8:e7:73:3b:ff:72:dd:0e:09:1e:48:
9b:9b:43:64:07:e4:bd:ac:a3:0d:66:23:43:60:0c:d9:7a:93:
ef:2b:c8:1e:0c:41:29:8d:3f:9b:16:2a:64:0a:7c:31:ea:34:
33:e5:43:62:c2:1f:89:f6:3c:0f:df:83:52:b1:bc:eb:06:31:
2d:c0:11:39:60:39:33:6d:08:9b:c2:25:21:16:56:76:c5:7f:
5a:f7:46:56:7b:60:12:02:8a:a5:30:e0:b3:6b:be:66:01:22:
07:92:88:c9:95:01:37:b4:d7:b5:d2:3a:af:04:3e:5a:5b:e2:
c5:cd:90:13:da:0e:fa:36:74:62:58:8d:2b:aa:0a:03:24:68:
1e:43:0d:51:12:3e:16:d1:5e:ec:c4:91:74:2a:4b:73:1e:2d:
43:09:32:3d:2d:68:1a:b6:a1:07:a8:8d:cf:c2:34:f1:2d:99:
28:3a:21:40:40:8f:9f:ea:df:eb:4c:54:64:c0:34:53:e9:22:
5b:66:53:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:20:07 2024 by rpki-client on console-fra.rpki-client.org