Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/l2umIpxFnXaV01KbEgfiwpsIQrE.cer
File: l2umIpxFnXaV01KbEgfiwpsIQrE.cer (raw, json)
Hash identifier: kFPoczp2ie7B+r7oA9cySesmwqLrhjaLQWMUQO2vRnc=
Subject key identifier: 97:6B:A6:22:9C:45:9D:76:95:D3:52:9B:12:07:E2:C2:9B:08:42:B1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC34890F97CF6C22E9048821EE210E31A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 12516
IP: 91.216.195.0/24
IP: 195.54.48.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:90:f9:7c:f6:c2:2e:90:48:82:1e:e2:10:e3:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=976ba6229c459d7695d3529b1207e2c29b0842b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:44:a2:c8:7a:56:13:56:e7:ea:87:6b:c1:36:
0d:7e:a4:29:41:87:77:bb:d3:62:4a:16:f9:8a:0f:
bd:77:d9:26:dd:ed:fd:d4:f1:aa:0f:f3:90:89:91:
f5:86:7c:d9:7f:e7:4c:81:a4:52:76:6e:f4:f3:04:
c0:a0:44:f8:d9:11:d4:94:dc:2b:d4:7e:69:2d:57:
de:28:fc:00:70:25:c2:dc:62:4c:fa:48:40:8d:a3:
b8:4a:86:df:b9:db:23:11:d1:eb:3c:c4:d1:4d:cf:
c8:c9:ab:4e:98:1b:4e:2a:bc:28:b7:eb:1b:e4:5c:
4a:4c:5e:49:2d:08:e4:24:26:5b:4d:d4:18:73:3b:
d4:84:fb:a9:95:15:96:6a:ba:b1:d9:06:47:37:83:
37:2b:71:2b:ab:15:f0:74:f7:a8:91:70:ae:9c:e4:
60:47:34:09:2b:72:2f:bd:1a:d4:58:b0:5a:19:f4:
20:40:30:ae:e0:bf:97:74:66:89:7c:5c:07:86:db:
96:ec:78:63:78:3e:cd:5e:98:06:3d:ab:bc:e6:0b:
8e:63:a7:e2:81:d8:a2:2f:6c:bd:c1:a6:c1:c4:d8:
4b:b9:5f:26:17:e0:50:d0:07:58:c3:0c:dd:cd:69:
12:48:a0:f3:72:88:f9:70:26:c5:34:17:d6:40:0f:
45:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:6B:A6:22:9C:45:9D:76:95:D3:52:9B:12:07:E2:C2:9B:08:42:B1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.195.0/24
195.54.48.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12516
Signature Algorithm: sha256WithRSAEncryption
32:df:dc:90:bf:09:6b:d9:da:42:ec:b7:9b:e4:af:f9:d8:78:
89:4c:53:0a:b0:f5:20:94:48:fe:9a:e3:c8:3d:71:35:e8:a7:
4b:0b:8a:6f:d7:5a:47:58:46:8d:b5:c0:4c:a9:b9:ec:0d:66:
bc:64:99:e5:51:3f:b0:90:a7:f8:f9:3c:68:b8:de:d6:83:80:
74:dc:59:03:c4:d7:94:0c:6c:b1:b4:54:41:f1:97:53:c5:68:
23:31:dc:0a:ff:52:c3:07:64:d9:f3:e5:03:24:3c:a3:75:6f:
42:2a:c2:31:67:32:75:0b:19:6e:3f:bf:2c:30:9a:ab:c9:de:
54:76:e5:8c:bf:4a:23:04:62:9f:f8:40:f9:25:64:fc:98:f0:
49:0b:18:cc:7f:58:14:bf:33:ad:3d:33:ed:23:72:4f:c5:0b:
69:98:ca:1d:d0:a3:fb:d2:27:1e:2f:83:cd:f9:42:c2:21:5e:
f1:2a:67:b2:0f:ab:c4:62:d3:df:1a:8c:0d:01:a3:98:da:e7:
72:47:c2:36:66:90:c1:8f:45:68:e2:9e:9c:87:bd:66:b3:6f:
51:09:8a:7b:ec:fa:6c:28:2c:2a:53:73:31:06:44:21:99:d8:
34:35:bf:ac:4c:dd:63:34:59:d4:bb:98:8d:67:9a:6e:72:83:
a9:7c:54:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:34:45 2024 by rpki-client on console-ams.rpki-client.org