Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mUQHi0B3KxcscEbnRGIEmAzq4Tk.cer
File: mUQHi0B3KxcscEbnRGIEmAzq4Tk.cer (raw, json)
Hash identifier: JGBERg6Tpo15unz4Kl0IJ4ldTcH/yEKcDUKyjTqimUc=
Subject key identifier: 99:44:07:8B:40:77:2B:17:2C:70:46:E7:44:62:04:98:0C:EA:E1:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DCBF00BAA30F499D868FF0B2B0ED13
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:30:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 43210
IP: 195.95.179.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:bf:00:ba:a3:0f:49:9d:86:8f:f0:b2:b0:ed:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9944078b40772b172c7046e7446204980ceae139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6d:60:4e:87:09:f5:1d:57:aa:5c:f1:9b:ec:
6f:c4:3b:69:68:de:5e:bf:97:ad:59:f9:50:9c:36:
b6:b5:b3:2a:e6:9c:53:18:7d:f2:21:ea:f0:57:0b:
d0:5f:42:47:aa:01:14:53:56:41:30:e1:7a:36:e5:
23:8c:08:51:0b:99:c2:ba:cb:ae:22:dd:21:e7:ca:
fa:fa:f2:c8:02:18:c0:22:84:14:50:da:c3:d6:10:
b7:89:d8:6a:ea:ae:18:ad:f2:2b:aa:0b:2f:ed:9e:
68:40:13:24:f4:b0:44:b2:09:bb:2e:bf:fa:c3:ba:
47:83:f0:f3:3d:c6:d5:81:7e:f6:34:a8:0f:e2:51:
8b:af:27:d5:63:f1:b4:f6:c4:bd:2b:90:67:7c:34:
f7:d5:ad:7f:df:3f:14:e5:1f:8c:ba:d3:45:76:5b:
0f:bc:db:61:72:35:3d:29:3d:50:d2:41:19:82:a4:
81:df:99:b8:44:b4:f5:20:5a:a5:17:dd:a0:60:07:
e0:fa:bb:37:11:e7:5a:a4:4a:60:02:d1:d0:75:68:
10:3f:12:88:16:52:dd:e6:8d:0a:70:02:9d:9b:33:
99:50:b9:a5:63:9a:11:a3:f8:cd:6a:a5:3f:ca:1f:
3b:9c:27:39:0c:50:c2:ce:72:aa:d0:6a:96:c7:48:
8f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:44:07:8B:40:77:2B:17:2C:70:46:E7:44:62:04:98:0C:EA:E1:39
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.179.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43210
Signature Algorithm: sha256WithRSAEncryption
ae:65:61:41:06:c3:48:42:69:bb:97:77:2a:f5:74:56:9b:fd:
92:4e:78:42:a3:6d:9e:3f:e4:3a:fe:4d:4e:07:5f:6b:f5:67:
bb:2d:82:7b:db:cb:6a:ae:cf:9d:d0:56:a0:69:7b:30:5d:a0:
7a:2c:24:34:18:61:99:11:63:ce:b0:67:d1:f7:2d:38:00:80:
65:1a:8b:d9:69:59:c4:78:16:76:ba:39:61:a3:32:25:2b:0a:
61:8a:02:b5:fd:f2:bf:1e:e0:29:92:12:f0:60:62:61:4a:f0:
5a:0c:3c:2b:af:40:b4:03:cb:7e:06:2a:1d:26:b2:06:2a:f6:
87:7c:2e:f3:09:9f:67:46:55:c3:71:7a:6b:cc:5f:61:67:bd:
27:13:e2:cb:57:f0:66:31:d3:11:2a:2c:31:74:3f:64:e2:c7:
a6:8b:0a:70:51:7d:02:60:b8:52:d9:cf:d9:e4:90:21:44:68:
70:38:7b:e1:a4:4d:d6:92:7f:a9:82:f2:ab:50:b3:fb:71:13:
6f:5c:d8:ef:8b:c8:0c:ef:95:c6:4e:22:7c:61:a9:ea:6a:ed:
24:04:6d:5d:ec:92:fc:65:2c:11:3f:ae:3f:0f:b8:4b:d6:0b:
0c:af:06:ba:4e:09:12:39:91:08:57:3a:55:53:22:3f:bb:13:
17:fe:df:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:28:30 2024 by rpki-client on console-ams.rpki-client.org