Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mRyTTgj1egPvTro2taTaeYolIgc.cer
File: mRyTTgj1egPvTro2taTaeYolIgc.cer (raw, json)
Hash identifier: gdsS08cpUJLP304nypfYI4XiuNIETmP3hCgAxxiDUC4=
Subject key identifier: 99:1C:93:4E:08:F5:7A:03:EF:4E:BA:36:B5:A4:DA:79:8A:25:22:07
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94D7795F5299614D4E38A951555876C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/mRyTTgj1egPvTro2taTaeYolIgc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:32:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211317
IP: 193.104.158.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:77:95:f5:29:96:14:d4:e3:8a:95:15:55:87:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:32:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=991c934e08f57a03ef4eba36b5a4da798a252207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:46:c6:29:60:91:fb:97:a6:da:7e:0a:f7:90:
aa:9a:3d:11:34:07:e4:f4:72:de:da:39:11:b0:a2:
64:ef:82:41:03:aa:f3:8c:7a:0f:0b:a6:9f:ee:50:
4f:c4:56:a3:34:ba:6a:0c:b0:31:1f:8b:e8:ca:6a:
46:d0:6f:50:f6:29:55:98:b5:95:ba:77:83:0a:37:
b1:96:e2:e8:10:a2:b6:32:6f:6a:ff:d4:f1:8b:60:
f7:2b:2c:34:6c:c0:64:f8:db:4f:94:7b:d2:a0:31:
cc:5f:77:65:6d:af:47:fd:b5:f1:e1:2e:3c:e8:c7:
9b:85:dc:8a:0e:89:a6:ad:97:bd:7a:38:55:53:31:
bc:ec:7f:3a:fb:52:ae:9d:a1:19:60:ae:d8:c8:39:
f5:a4:30:aa:39:61:df:bd:0b:6a:7e:2e:37:de:2a:
f6:dc:73:b8:55:01:dc:83:08:42:95:cb:0f:dc:15:
54:5d:31:d9:76:e8:09:70:b2:6b:80:7d:a4:e9:e1:
07:82:20:78:e7:4a:53:67:d2:04:b8:66:bc:61:16:
38:0c:e4:68:87:8e:fb:f4:0f:38:5e:5c:47:28:0d:
d2:c7:3c:9b:99:3f:fa:34:08:eb:c6:f8:2c:5a:21:
88:07:5f:66:94:38:f7:c1:9d:0c:28:e8:40:c9:7b:
ab:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:1C:93:4E:08:F5:7A:03:EF:4E:BA:36:B5:A4:DA:79:8A:25:22:07
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/mRyTTgj1egPvTro2taTaeYolIgc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.158.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211317
Signature Algorithm: sha256WithRSAEncryption
00:4f:40:c3:16:be:7b:6b:97:f6:47:97:21:8f:56:5a:7e:70:
e1:8b:80:ce:1e:df:da:a4:b1:2c:4a:d5:12:b3:cd:76:f0:6c:
21:ac:d0:b2:44:27:e2:7e:92:c7:77:e0:3b:d0:7d:e6:84:43:
1b:74:9b:e3:ab:e3:c5:6c:fd:ca:4c:d4:f8:b3:cc:c7:a7:22:
54:2c:4c:8b:74:06:74:c1:12:b5:b7:b0:d2:ba:c8:bc:82:f9:
c8:d9:9e:1e:e2:17:e0:2c:24:b1:c5:1f:83:4a:04:41:95:84:
d5:f0:90:b1:d6:36:b8:98:b6:fa:46:17:51:5c:34:0b:f9:9c:
45:a4:58:dd:c8:4c:52:14:91:82:70:c6:4b:e3:74:eb:5b:58:
99:a4:b0:d4:92:7f:05:43:a2:38:e1:aa:f2:57:e4:46:b9:5e:
c9:d0:30:c0:b3:da:86:01:2c:2a:46:d2:38:93:65:91:36:62:
d0:df:58:cd:24:ed:65:c1:bc:12:9a:1e:b2:62:9b:01:4c:a3:
9c:a4:18:a7:4a:2a:9c:74:ca:05:7e:07:cf:cc:cf:eb:ea:a0:
75:70:ad:0c:b1:0b:81:65:f7:54:e2:f5:9b:8d:d7:b8:89:c3:
7e:4c:07:10:1b:ae:6c:09:ea:8c:d5:69:61:79:56:35:62:c8:
fc:ae:e8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:20:56 2024 by rpki-client on console-fra.rpki-client.org