Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m-CmEeBni40ynuVQMSskbg3PRpg.cer
File: m-CmEeBni40ynuVQMSskbg3PRpg.cer (raw, json)
Hash identifier: nlkTGd9jNlY86KCToRXWTfnCsUWM5IPCWNnpZD4u5fk=
Subject key identifier: 9B:E0:A6:11:E0:67:8B:8D:32:9E:E5:50:31:2B:24:6E:0D:CF:46:98
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC50112908A93382AAEB6F02F56628E25
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 6744
IP: 150.140.0.0/17
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:12:90:8a:93:38:2a:ae:b6:f0:2f:56:62:8e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9be0a611e0678b8d329ee550312b246e0dcf4698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cd:0f:87:97:96:9e:b7:a3:48:10:64:b7:e4:
a3:1e:0b:8d:e1:b9:ee:48:6d:81:45:19:e1:8a:e5:
9c:98:2a:64:c9:e7:cc:41:96:33:0d:e6:c7:67:51:
94:dd:33:09:37:a8:09:ac:35:0c:95:13:21:c9:33:
a1:db:bf:88:51:6d:d1:a1:ce:bd:bd:c7:46:b7:58:
29:0d:29:d2:6b:c3:a6:cb:ee:ff:4f:e6:3f:ed:4d:
a4:fd:21:d8:f8:e7:55:28:a3:fa:7e:30:1a:23:06:
a9:f8:aa:98:b2:a0:62:ab:0e:6b:94:23:41:ff:ba:
c9:a5:6d:49:62:05:92:02:50:ca:38:1e:95:7c:1b:
da:89:f6:13:8c:88:92:66:81:5e:ec:e1:b1:d8:72:
97:6d:b0:4e:dd:81:24:e7:d1:0f:a8:30:b9:52:54:
0b:12:9e:94:3e:f8:3c:83:04:a3:90:28:86:df:75:
f2:85:54:46:8b:6e:14:9c:43:ee:1a:17:d4:e7:9d:
d1:b4:2b:c6:d7:7f:2e:85:72:f7:37:39:09:97:9b:
3d:06:b2:ba:20:14:a9:7a:11:0f:d7:0f:c6:d2:d5:
20:03:8a:40:b9:d2:69:a1:ef:c6:fc:17:9d:e3:45:
c7:d4:60:ef:fe:4a:8c:42:3e:af:43:61:ec:b6:a4:
09:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E0:A6:11:E0:67:8B:8D:32:9E:E5:50:31:2B:24:6E:0D:CF:46:98
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.140.0.0/17
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
6744
Signature Algorithm: sha256WithRSAEncryption
58:b4:1a:61:9c:68:e1:98:01:cc:3c:7d:c9:bb:bd:b8:3f:2e:
b4:d8:e3:2a:8d:4b:ae:74:54:c4:04:cf:c2:2c:5e:bc:8c:6f:
33:49:fc:71:52:39:93:5f:76:eb:96:90:da:f4:43:cb:cd:37:
7f:a3:18:56:3c:2a:40:45:a7:d4:a5:f4:d8:28:7f:59:31:db:
03:d6:26:af:40:0b:35:c4:bc:49:05:d1:82:78:59:99:f6:84:
72:6e:48:c8:39:d7:f2:5b:80:44:7a:be:15:95:78:00:a4:77:
28:48:76:a2:81:64:30:fa:dd:8f:14:ad:f8:28:a9:87:3b:03:
e3:d7:5a:56:14:22:01:4b:1f:06:5b:0d:8a:f3:16:79:c4:85:
d2:df:6f:a2:21:3f:ab:e2:20:f5:56:42:6f:51:30:19:58:f8:
2f:be:bd:54:63:0a:1d:52:e4:90:dc:a7:5f:13:3a:ae:a4:1c:
72:f2:5b:bd:7f:50:84:be:b7:79:41:52:c6:d3:c1:8f:94:b3:
21:79:c5:d4:19:c2:98:0f:84:c4:b3:30:49:5d:7a:b1:a7:ad:
9d:9a:79:c4:6d:85:64:03:08:87:ea:8e:7d:a3:7f:39:78:3f:
40:0e:d9:e3:93:36:3c:9b:dd:85:0a:59:cc:c8:df:bc:57:fb:
2d:1b:a3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:05:53 2024 by rpki-client on console-fra.rpki-client.org