Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m4Me6Uw3ubEVnH13MpNhgatUHYA.cer
File: m4Me6Uw3ubEVnH13MpNhgatUHYA.cer (raw, json)
Hash identifier: dngu+ZMfQk0r4ROqyBJ5Z7BJtWsSMhe+a1PfPOMsctE=
Subject key identifier: 9B:83:1E:E9:4C:37:B9:B1:15:9C:7D:77:32:93:61:81:AB:54:1D:80
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019222E702EAAE15AC1D83851D4EA3FCD35B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 24 Sep 2024 07:20:17 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 204704
IP: 45.84.64.0/22
IP: 185.206.88.0/22
IP: 2a0e:9880::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:22:e7:02:ea:ae:15:ac:1d:83:85:1d:4e:a3:fc:d3:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 24 07:20:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b831ee94c37b9b1159c7d7732936181ab541d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:46:b1:c4:03:65:1c:bf:49:c2:9d:dd:c7:3f:
c4:2b:3a:29:80:29:95:8d:d1:33:93:6b:98:ea:ad:
e1:72:a0:89:d5:ed:92:57:e9:75:ff:7b:f6:1f:9e:
f2:6a:18:a2:9d:7b:df:6c:35:fb:f8:30:61:8d:c3:
d9:99:ec:8c:5b:12:31:cb:30:6b:92:b5:6c:cd:a2:
83:2e:94:79:07:30:bd:cb:d1:2b:9e:84:05:78:c2:
75:af:e4:d2:40:4d:18:5b:ce:80:de:c0:38:cc:63:
3f:11:52:cc:48:ed:dc:d1:f6:f8:37:8c:af:1f:8e:
12:e0:9d:ab:94:8e:1f:bb:26:34:8d:af:7e:d2:50:
4d:86:71:af:5c:8f:23:44:4f:ce:38:e7:41:dc:de:
76:13:cd:82:af:24:a8:49:4e:67:d1:49:12:1c:c2:
4b:36:30:20:2e:97:86:4c:16:ef:44:88:a0:a5:73:
11:9b:1b:47:5f:30:61:ef:9b:be:33:2b:c2:e9:b3:
3c:2a:83:24:0e:a8:1f:f7:26:12:5a:8d:d3:38:c7:
1a:44:e1:f7:5d:8c:e2:60:07:e9:be:07:96:37:82:
eb:19:c5:90:a6:5f:9d:f9:63:06:b2:b1:fc:e7:ae:
66:e1:ea:38:43:64:9e:ea:eb:e6:f7:f7:9d:a9:bf:
6e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:83:1E:E9:4C:37:B9:B1:15:9C:7D:77:32:93:61:81:AB:54:1D:80
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.64.0/22
185.206.88.0/22
IPv6:
2a0e:9880::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204704
Signature Algorithm: sha256WithRSAEncryption
7c:47:05:8b:68:5c:1d:48:a5:82:85:23:5d:4c:fb:70:56:de:
5d:19:03:2b:cc:c1:41:c5:66:57:22:a6:68:42:27:c0:70:23:
95:ee:41:c6:ba:15:d5:16:13:db:21:b0:f4:ff:5a:2c:13:b9:
e1:1a:18:81:1e:ee:22:3a:96:43:a4:30:d6:e8:fd:96:11:9e:
2d:13:3d:f7:9b:4a:5c:5d:01:ee:ee:a5:cb:7f:5b:66:29:89:
f7:11:db:11:c7:d8:c9:40:1b:23:60:e0:58:85:59:00:a5:2f:
7b:61:74:7e:04:1c:6d:e5:bf:bf:a1:14:75:67:34:0b:59:cb:
2d:4e:05:fd:9b:70:85:df:26:7c:5d:aa:aa:50:d8:22:6b:a7:
02:52:80:99:fa:0d:ec:2e:60:bd:e7:ce:fc:5f:b4:1f:8e:f7:
3f:49:66:1a:30:8c:81:a8:8f:d4:6d:62:73:97:75:c5:b6:1d:
32:4f:14:69:4c:d9:9e:44:65:f8:2b:a1:a7:82:d6:fb:4c:38:
86:6d:25:4d:fa:24:42:54:09:d4:5b:59:0b:52:4e:34:d2:d3:
e5:2e:c8:d3:0c:7c:98:d6:f2:1c:72:c2:e9:b6:82:32:b9:be:
23:b2:3c:09:59:2a:24:d1:1e:77:d3:55:34:fc:df:17:dc:b4:
a7:df:77:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:05:54 2024 by rpki-client on console-fra.rpki-client.org