Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer
File: l2lJAzf2c8ZOORJK6JgbA05QEno.cer (raw, json)
Hash identifier: ZzjEjrhF9a0hk5bcFLtTL1GQ4Y3oHdMGnYtNfsMVRcQ=
Subject key identifier: 97:69:49:03:37:F6:73:C6:4E:39:12:4A:E8:98:1B:03:4E:50:12:7A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC45A7FF219806AB20B41AC457CCB0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:56 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 197599
IP: 91.223.221.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:45:a7:ff:21:98:06:ab:20:b4:1a:c4:57:cc:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9769490337f673c64e39124ae8981b034e50127a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e6:66:66:37:67:86:11:3a:b8:fe:20:96:44:
53:6c:ef:bb:d9:d1:2c:65:67:bc:d9:db:e2:00:77:
e9:d1:2f:eb:3c:c2:6e:89:76:9b:d6:fb:9a:ca:1d:
82:6c:98:5e:5c:2e:a3:1d:d0:4d:1f:ff:96:ba:5c:
73:c1:66:1c:4d:f2:8c:47:8f:f8:de:18:e2:95:2c:
0e:4a:b8:e2:68:b7:c7:d2:09:ca:a7:92:46:c2:e7:
4e:c0:29:bd:27:79:0d:0d:e0:6a:40:81:3a:ee:03:
6a:05:fa:0c:98:60:f2:37:b5:d2:ed:67:39:c7:52:
cf:65:61:1e:07:a6:1b:9c:7f:75:f7:25:1f:4f:c7:
aa:04:25:fe:81:8e:37:5e:a9:b4:44:60:6c:7a:4f:
9e:a5:47:97:52:e2:69:3d:fe:56:5e:ce:70:1c:99:
2c:0f:a5:c7:c4:59:43:80:27:4f:c6:66:b9:6d:a6:
87:ad:f0:3f:7a:f8:74:98:0d:77:13:11:9e:5b:11:
c8:1e:b4:99:c5:4e:bc:3b:a8:3e:2f:d0:3b:13:f1:
68:0f:73:f7:f9:6d:aa:82:d9:6f:26:17:f7:bd:33:
d1:7f:35:81:ba:1d:63:5a:9d:80:0d:e2:be:5a:3e:
01:48:06:3e:0d:5e:60:73:2e:33:55:62:3e:06:bd:
b8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:69:49:03:37:F6:73:C6:4E:39:12:4A:E8:98:1B:03:4E:50:12:7A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.221.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197599
Signature Algorithm: sha256WithRSAEncryption
7b:a3:e8:d0:d7:87:76:ab:81:61:c8:22:2f:9e:78:aa:e4:5c:
bb:e7:8c:ba:26:c9:b2:c2:cf:97:ce:47:b4:15:6d:d4:9f:ec:
97:08:3b:f5:e5:00:67:e7:0e:f9:20:43:94:36:95:c5:13:90:
99:82:e9:ec:43:7d:59:c6:6c:26:0e:a3:86:1b:63:a5:ea:0a:
52:42:f2:7c:45:5a:d1:7c:43:a9:85:5c:bd:30:a7:17:e0:04:
43:44:f6:ec:66:8f:df:ef:85:93:4d:3e:42:ab:66:10:bc:ca:
f8:a5:3c:91:0f:c7:f2:80:30:e9:7c:c3:54:c6:99:e3:2d:fb:
ab:b7:22:5d:30:fd:fe:ce:52:e3:ae:d8:81:04:9f:f9:ab:57:
08:4e:e7:30:6b:51:51:5a:5c:67:ec:f5:a8:c1:a3:d9:61:b4:
93:7e:ba:39:e2:ad:0f:97:9b:e0:72:02:2d:97:e3:e7:b3:f6:
85:2f:5a:8d:4c:f9:1f:4f:ae:56:00:c7:7d:3f:92:00:9e:83:
62:a4:aa:95:c6:8b:d1:c9:50:3f:56:c7:53:8a:0e:39:18:61:
af:19:fd:49:f4:d2:1d:c5:6f:fa:6d:21:b7:0f:6f:aa:e2:9f:
36:fc:8a:c5:f9:44:6b:91:67:c1:dd:fe:3c:22:3f:ac:f3:d0:
e3:37:61:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:14:49 2024 by rpki-client on console-fra.rpki-client.org