Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mP1EDLuwS5abkrtrOcC7tBY0zRI.cer
File: mP1EDLuwS5abkrtrOcC7tBY0zRI.cer (raw, json)
Hash identifier: IcZtv65zg8HTo+GmH+Am6ouPLbUqpLsvUBp4z3uC1wY=
Subject key identifier: 98:FD:44:0C:BB:B0:4B:96:9B:92:BB:6B:39:C0:BB:B4:16:34:CD:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B9292E33AE7AE8BC01A7321405FE88
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:31:12 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 41370
IP: 91.212.152.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:29:2e:33:ae:7a:e8:bc:01:a7:32:14:05:fe:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:31:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=98fd440cbbb04b969b92bb6b39c0bbb41634cd12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:75:86:cd:01:5b:a1:df:7e:f7:aa:49:6d:38:
ed:d4:9a:d0:a3:27:ea:07:da:9f:6d:9e:cf:84:7f:
bc:80:c3:77:60:72:42:90:7d:a6:8f:c8:d2:a6:43:
12:89:c8:90:5b:f6:e8:f3:39:aa:9f:0a:85:5e:c3:
3c:ab:4c:99:30:5f:59:f6:e5:6b:05:7d:96:e9:28:
81:12:cf:4b:b7:cd:80:9c:dd:3b:1c:1f:e8:be:5c:
c7:6f:2e:74:e0:84:e4:88:8c:2b:44:cd:45:1f:16:
36:f6:af:25:42:f6:8a:55:cd:82:d3:29:4d:14:c3:
06:e2:cf:d9:af:dc:6f:8a:e6:be:26:a8:05:6f:82:
1b:f5:9d:e5:9a:37:bb:1f:fb:b3:6c:71:0d:cb:cc:
7d:c5:eb:44:83:f5:55:a0:65:36:31:15:36:36:c8:
9d:3b:d8:ca:23:df:24:7a:09:ed:a2:1d:72:a9:6e:
9f:a8:3b:9f:ea:f6:35:75:a8:57:14:a2:ab:3f:58:
a3:78:99:18:bc:f2:65:eb:25:b6:8e:6c:df:70:c7:
28:ad:21:9b:1f:1f:2b:9e:7e:42:a1:4c:57:44:65:
c9:55:c7:db:2e:3f:64:0a:ed:49:4a:f3:d9:88:2d:
11:08:57:85:dc:0c:f4:56:a7:5f:c1:d5:d3:a6:58:
ae:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:FD:44:0C:BB:B0:4B:96:9B:92:BB:6B:39:C0:BB:B4:16:34:CD:12
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.152.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41370
Signature Algorithm: sha256WithRSAEncryption
20:f7:36:6f:bd:ba:99:e9:06:2f:a3:7c:5b:09:23:15:43:3d:
d9:eb:7d:e1:42:59:23:ea:41:95:8e:c9:9e:92:97:43:80:70:
b1:e8:d3:52:0b:44:70:e4:c9:85:d8:a6:1f:9a:b6:b4:92:e0:
5f:5f:a9:ac:74:a7:7f:28:9b:03:91:c5:ca:04:61:60:a8:f8:
2f:2b:3a:0a:76:07:49:12:48:d8:92:06:81:84:ab:3a:38:ed:
d2:d9:6d:72:6c:e2:35:ba:ff:d0:e2:8e:22:0b:d2:6e:06:e9:
e2:b9:d8:6d:24:26:f4:78:ab:da:e2:1b:21:e8:e0:7f:aa:18:
d8:2a:f1:39:05:c3:01:5b:d5:fc:4b:fc:41:ad:4a:ed:a0:df:
ec:1a:e2:25:7e:d3:68:28:90:7f:85:81:34:2e:4e:d6:1d:97:
ab:3b:8a:4c:77:34:8c:4e:ed:a8:1c:11:a6:50:81:d3:9a:04:
ee:a6:81:e7:78:0d:0a:59:96:4c:a2:d7:bd:8d:22:71:3b:90:
40:c9:2e:3e:0c:41:a9:b0:11:34:2d:c7:b1:05:bc:42:d1:0f:
67:3c:c5:89:1a:5a:fe:0b:5e:0a:74:54:7d:a1:db:bf:21:30:
c8:ca:72:7b:9f:95:7e:38:d1:0c:40:aa:c5:56:ea:b3:a6:0c:
44:dd:23:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 12:31:40 2024 by rpki-client on console-ams.rpki-client.org