Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mVehWqmJPxyRW0SX6_kqijPV5Dk.cer
File: mVehWqmJPxyRW0SX6_kqijPV5Dk.cer (raw, json)
Hash identifier: sAcDTk+Jq/z6UhiHohWmy96nJd4q6baWX5MKRbQ3HTI=
Subject key identifier: 99:57:A1:5A:A9:89:3F:1C:91:5B:44:97:EB:F9:2A:8A:33:D5:E4:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA29B5D282DD6DC20B7AF6E816688B70
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:33:00 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 43713
IP: 91.198.119.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:b5:d2:82:dd:6d:c2:0b:7a:f6:e8:16:68:8b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:33:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9957a15aa9893f1c915b4497ebf92a8a33d5e439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:36:2d:9b:c2:01:5f:95:18:6a:b7:dc:cc:a2:
fb:03:3c:95:23:aa:40:9c:10:2a:a6:ed:6d:3d:a2:
94:57:e1:df:65:35:0a:d9:18:14:95:b9:b1:72:55:
73:df:8c:20:c1:f1:61:d0:59:e2:bc:46:15:3b:4b:
f6:db:4c:b7:a7:25:f1:80:9b:7a:41:ea:f6:5e:24:
a5:7a:f2:77:2d:24:45:85:e0:3f:1b:1a:ac:48:70:
d8:9d:fa:a3:09:4d:a3:6a:99:be:11:9c:ea:72:7a:
eb:c0:45:b2:a9:3b:2c:52:6f:de:97:0f:fc:dd:84:
6f:fe:42:aa:da:54:58:d6:95:f6:de:f1:13:9c:93:
3e:a6:6b:e6:f0:21:3a:00:9d:ae:6d:a1:b4:18:63:
3f:52:5b:ec:80:9b:f2:13:2a:d9:24:96:76:b4:13:
54:1c:87:44:e1:c1:36:29:68:20:9c:b1:a6:aa:a2:
25:e0:fb:56:08:f8:cc:11:6d:d3:5d:2f:65:5c:8b:
49:cc:6a:d2:9e:0e:f4:d7:3b:78:67:86:dc:7f:3c:
05:43:54:66:f6:d7:ab:f5:a4:52:81:2a:4e:f9:95:
e3:44:d9:35:49:52:72:cf:66:34:d9:03:7a:9e:23:
4c:93:71:0e:9d:8c:b5:ef:cc:2b:f9:13:ff:2a:1c:
ed:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:57:A1:5A:A9:89:3F:1C:91:5B:44:97:EB:F9:2A:8A:33:D5:E4:39
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.119.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43713
Signature Algorithm: sha256WithRSAEncryption
89:f3:86:2a:b7:13:77:2c:5e:25:2a:95:3c:65:e5:44:15:ec:
d1:3c:de:51:88:a1:fe:16:66:63:e9:26:ca:43:b9:73:4d:5c:
f4:87:7f:0c:92:1d:0b:66:52:bf:81:48:d9:f6:08:b1:d1:41:
7e:20:e7:3c:66:73:a1:c8:a1:d4:5c:00:b2:64:30:2f:c1:2f:
3b:af:03:50:47:65:00:cc:c2:0a:d8:ef:f4:99:f3:f6:a1:50:
10:00:ef:f6:56:d3:95:82:f3:75:12:05:e5:95:8c:b9:93:ed:
ec:34:95:ce:2e:e8:f6:08:d2:12:c5:ee:16:c2:b0:94:07:55:
a1:0b:cb:36:d8:ee:d3:c6:f8:4b:33:9c:a3:cc:45:82:e5:19:
9a:99:ac:e6:4d:92:ee:0d:c6:20:37:3d:d3:67:e4:f8:7a:b9:
12:e1:71:b2:9b:c6:6c:6d:99:02:75:e5:65:2c:d6:db:03:61:
d7:ed:34:62:a8:6e:d7:77:7b:b6:2b:99:ed:f7:0a:86:3b:c2:
a3:5e:6a:40:22:2e:9e:b1:9c:a1:9c:15:48:a6:73:ea:c4:16:
eb:d1:97:96:d1:33:41:28:b4:cb:11:76:36:ec:53:36:69:3f:
c9:29:35:f6:ee:12:9a:34:46:18:7d:da:91:89:4d:ae:f4:ef:
dd:40:78:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:12:54 2024 by rpki-client on console-ams.rpki-client.org