Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer
File: iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer (raw, json)
Hash identifier: M/gzZe9huGdEtseGgzuX8Tz4ipwQd9XKtdN3azRnOe4=
Subject key identifier: 89:59:AE:3F:41:77:A3:CD:D9:66:8D:0C:5B:8A:89:F9:18:6B:5B:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B70D774512F0AEC55AA908F2CB8E6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:31:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 47835
IP: 91.206.198.0/23
IP: 91.230.235.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:70:d7:74:51:2f:0a:ec:55:aa:90:8f:2c:b8:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:31:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8959ae3f4177a3cdd9668d0c5b8a89f9186b5bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fb:d9:e1:de:40:3c:35:6d:73:8c:eb:d4:e3:
d0:78:32:13:62:9a:cd:e9:f0:de:2d:a9:1e:e6:71:
1e:b1:05:4e:4f:94:72:e6:90:76:04:5b:d7:6c:d5:
0e:e5:ff:75:23:c5:97:5d:ec:78:f5:e5:90:ac:99:
2d:f7:29:f3:ef:0a:3d:33:fc:ec:6b:e3:77:67:c9:
bf:58:3e:e8:05:30:3d:fb:6f:af:50:44:df:20:b1:
6a:0d:98:9a:c8:44:22:66:49:fe:eb:7a:d7:d5:fb:
78:e4:21:3b:60:d9:c3:c1:34:a0:5b:66:32:c5:6f:
a8:88:83:56:91:2e:76:50:3c:76:e1:4e:b7:4e:9d:
f9:ad:34:bb:cb:c7:3a:99:3b:3e:4c:ab:76:7b:f0:
a5:5e:0e:8d:f5:8f:95:d8:1b:bd:f5:5a:88:f1:06:
6b:03:94:30:6c:c8:b5:ba:38:d7:cd:f1:82:61:a4:
04:d8:ba:b5:9e:6c:5f:97:3f:af:de:4c:3e:1a:2c:
c4:92:c3:cc:1b:4a:9e:5b:55:22:25:33:93:f7:ee:
65:9b:c6:34:4c:74:b4:ad:6a:93:cd:42:cf:74:7d:
fc:58:58:34:be:b5:ac:7f:25:34:4d:04:86:97:28:
33:f1:e6:74:e5:9a:57:90:ed:5c:f7:25:f8:2c:63:
5b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:59:AE:3F:41:77:A3:CD:D9:66:8D:0C:5B:8A:89:F9:18:6B:5B:FC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.198.0/23
91.230.235.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47835
Signature Algorithm: sha256WithRSAEncryption
75:a8:08:1a:ff:e3:71:9b:05:91:7d:65:da:14:ff:ba:28:1c:
39:8a:70:9b:4e:a2:2e:62:8f:c5:77:3b:a9:16:b3:85:e7:ca:
fc:3e:ba:c4:d5:d3:f7:4a:37:16:af:59:cf:85:70:d6:f4:ee:
0e:54:3e:7c:91:80:90:72:7c:30:91:ea:f3:6b:36:98:3e:8b:
b3:73:c8:ca:5f:80:ce:c0:6b:fe:03:d4:0f:d0:53:1e:52:1d:
c8:3c:7b:ab:39:91:e4:f8:63:9c:e0:69:12:d0:e8:8d:b8:83:
f9:36:91:a9:48:57:03:28:dd:f2:67:62:d1:65:bd:ba:f2:99:
da:b6:a1:b9:5e:15:3b:b5:2f:eb:7a:54:21:89:89:f5:70:4f:
a5:96:99:6c:4b:c4:41:44:7a:c0:f4:14:8f:bf:a8:53:e2:5d:
5e:3f:66:c2:af:d4:16:14:df:dd:2d:b5:94:cb:90:7c:b7:be:
ec:6b:c0:cf:43:3b:53:18:29:8c:42:e4:e4:40:66:85:3a:e1:
ca:2a:fe:b4:75:2e:69:4e:92:90:2b:d9:e4:26:67:c6:71:54:
cb:1b:04:94:3d:29:03:60:ae:e7:18:d9:16:0b:6b:47:6e:88:
9d:11:bb:86:d0:29:12:94:33:f9:66:95:25:c7:f2:bf:30:13:
3e:37:1e:a0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Nov 23 11:02:47 2024 by rpki-client on console-ams.rpki-client.org