Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mV7N6HyxBneJW2YufnejRrxKsfg.cer
File: mV7N6HyxBneJW2YufnejRrxKsfg.cer (raw, json)
Hash identifier: jEWgGncnWCIPhpAkXK5Ti2ITUs3srd6bsG1fY0d77HM=
Subject key identifier: 99:5E:CD:E8:7C:B1:06:77:89:5B:66:2E:7E:77:A3:46:BC:4A:B1:F8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94E6218A59D70FB35027E39EF1A7450
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/51b5e1-03da-4150-bd21-15fe72b15468/1/mV7N6HyxBneJW2YufnejRrxKsfg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/51b5e1-03da-4150-bd21-15fe72b15468/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:33:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 44396
IP: 194.48.206.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:62:18:a5:9d:70:fb:35:02:7e:39:ef:1a:74:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:33:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=995ecde87cb10677895b662e7e77a346bc4ab1f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d0:d8:81:3a:86:94:b7:8f:6b:b5:f7:03:11:
69:b9:8a:8a:1a:4f:ff:a8:5d:9b:81:89:71:98:a4:
80:bf:3d:7d:12:ea:b3:63:0d:7d:4c:72:c1:b7:f6:
9c:e7:61:85:3c:bc:5f:d1:04:a0:1e:cd:0c:a4:98:
a1:9e:07:d0:8e:fa:d3:52:5f:14:bf:4a:aa:db:8a:
90:1d:ca:a3:c3:b3:4d:56:a6:c4:00:a6:33:c1:c6:
16:83:14:28:d3:1f:65:3e:77:5c:4b:27:fd:65:a2:
fd:93:36:cf:f8:8e:9f:61:c8:04:17:8c:17:f0:97:
c6:4b:5c:14:cb:2e:b5:3e:d0:48:34:24:76:a1:c4:
43:93:50:7c:41:d4:b7:6a:eb:26:42:1d:9f:b8:e0:
c2:1c:3d:df:e8:40:65:e6:dc:80:33:3a:88:cc:c1:
f8:1f:86:60:7b:1c:0f:fa:a1:60:4b:55:9c:e8:a3:
14:98:00:8e:fa:84:b0:69:aa:62:bb:7d:c4:32:04:
b3:b1:36:61:49:17:55:58:e9:58:3c:ee:f4:ac:51:
80:f2:90:de:39:21:68:d9:f8:95:3c:04:92:3d:4f:
0e:d4:59:e0:a6:c1:d5:2f:af:45:7b:ad:18:c0:60:
f0:56:2e:8d:dc:98:84:cc:51:a5:26:63:b2:b8:62:
0c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:5E:CD:E8:7C:B1:06:77:89:5B:66:2E:7E:77:A3:46:BC:4A:B1:F8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/51b5e1-03da-4150-bd21-15fe72b15468/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/51b5e1-03da-4150-bd21-15fe72b15468/1/mV7N6HyxBneJW2YufnejRrxKsfg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.206.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44396
Signature Algorithm: sha256WithRSAEncryption
0b:fd:4e:41:80:2e:15:d0:92:49:1a:73:2d:45:cc:31:3c:18:
b3:99:b2:fd:84:5d:9e:95:7d:61:e4:72:93:01:da:a7:7b:b9:
50:98:47:1a:7a:6b:fa:5a:0a:21:c1:7e:1c:03:1b:0d:0e:74:
fb:07:e6:69:72:e4:cb:5b:bd:64:99:61:22:ab:06:b9:93:84:
96:9f:fa:90:88:30:a9:75:f6:5e:ba:a6:3b:f0:f2:bd:e5:6b:
57:0a:2f:0a:b3:0c:b2:aa:ca:5e:82:be:06:e4:98:d3:1e:f9:
4a:7f:97:8f:b2:f4:56:28:0a:f4:46:bf:d6:0b:e7:ad:67:ca:
a9:97:bd:7f:8e:13:3f:10:bf:96:08:c9:ee:fb:50:36:58:78:
07:b4:d3:1b:84:27:c2:db:cd:5a:1e:5f:db:3b:0a:a0:f2:67:
36:85:b6:e6:af:8f:00:a6:98:c9:aa:a6:3d:77:e2:3a:22:d3:
bd:48:fc:f2:17:00:73:56:87:c3:3b:10:4f:54:81:bb:9a:5f:
9b:ef:5c:4f:28:ed:76:0d:8e:dd:fd:79:5f:18:98:92:54:8e:
99:7a:8c:ef:da:38:e8:8e:85:d1:aa:37:1c:fb:65:3b:2e:d0:
27:0d:b8:77:59:6b:b2:63:68:9d:bf:95:1c:29:df:85:29:a5:
59:41:87:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:56:45 2024 by rpki-client on console-fra.rpki-client.org