Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mXwn0VtG2xhLwCswPIa0fEScG1Q.cer
File: mXwn0VtG2xhLwCswPIa0fEScG1Q.cer (raw, json)
Hash identifier: TJvRMFsNEWaEEU+Jz75xjpRMOL5s5et294J6TuUN3eY=
Subject key identifier: 99:7C:27:D1:5B:46:DB:18:4B:C0:2B:30:3C:86:B4:7C:44:9C:1B:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC727387C9A620D6EACDCA71BF09C2A83
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210693
IP: 188.93.112.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:38:7c:9a:62:0d:6e:ac:dc:a7:1b:f0:9c:2a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=997c27d15b46db184bc02b303c86b47c449c1b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4d:29:b2:6f:c9:50:81:77:49:94:3f:7e:65:
3f:65:33:f0:64:5f:72:16:7d:78:02:c2:d2:1a:03:
f7:5b:ff:35:88:f8:05:1c:01:49:d1:66:ce:58:90:
33:3a:a9:73:9a:25:64:4d:3d:96:d4:2b:3c:24:45:
12:cf:a0:de:60:b6:6c:b3:1c:1d:db:67:6f:4f:60:
a4:c4:cf:c1:bd:92:ad:be:42:fc:47:93:7f:bd:c4:
be:9d:97:e0:4a:64:68:0e:85:89:ea:9a:96:0c:50:
fb:11:65:04:b0:38:57:7f:11:e2:c5:30:f7:bf:15:
3e:49:31:56:90:9b:c4:1b:8e:e0:99:9d:5a:32:dd:
01:44:49:ca:67:0b:6d:82:32:93:1b:8f:7d:cb:b1:
5b:27:95:73:7c:6e:1a:ce:43:88:6d:85:7a:92:24:
d2:f0:ae:bb:34:a8:24:1f:7a:09:d5:62:d5:f6:67:
e3:59:3d:dd:97:ba:9d:eb:cb:8b:b3:a9:18:06:f6:
1a:4e:71:2c:81:92:af:90:0d:b5:38:1a:5a:e1:a0:
43:77:75:9c:ee:0c:03:10:28:b8:0e:b5:ab:c2:42:
63:18:ed:87:06:62:16:4e:ad:92:88:48:44:ba:32:
f1:42:40:cf:c4:79:05:23:4c:fa:70:21:43:d3:0f:
66:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7C:27:D1:5B:46:DB:18:4B:C0:2B:30:3C:86:B4:7C:44:9C:1B:54
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.112.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210693
Signature Algorithm: sha256WithRSAEncryption
6f:aa:78:c3:09:36:f6:ff:a0:e4:e2:8a:43:3a:5e:68:e1:c8:
b4:c8:6d:77:a8:3a:a1:9f:a9:8c:d1:46:21:46:b6:be:2c:ad:
63:7e:2c:02:09:06:c2:d8:12:41:6a:3f:54:78:ec:d3:0c:42:
2f:59:8f:97:7b:03:19:28:8d:3f:a5:14:21:d6:f6:93:0c:29:
00:83:2b:af:fd:b0:e2:92:12:4b:1f:c9:ec:f4:cf:d4:bc:a4:
9d:72:a9:d6:16:23:39:50:d6:11:05:d6:92:fd:f1:a1:98:67:
0d:fc:37:0e:80:f5:ac:3a:92:5f:05:b9:4a:9c:82:f4:90:d9:
1a:a8:dc:c3:3c:e2:74:7f:6a:98:41:4c:2c:0b:02:32:bd:23:
f8:eb:6f:d8:08:ef:50:09:80:6c:12:ac:d8:68:33:20:59:79:
8c:ef:51:ba:4a:81:c8:74:d3:6d:a6:6c:11:64:d6:6d:01:54:
12:4e:cd:49:31:fd:c3:01:90:5c:cf:52:d9:d7:77:f6:b0:43:
57:9c:13:a5:2b:39:77:2f:1e:eb:d8:3c:30:de:27:43:2c:0b:
a0:23:f0:ca:b3:41:06:81:b8:40:fd:31:62:3b:27:84:6d:93:
ba:b1:22:96:40:2c:96:55:f8:b1:21:11:f2:0f:1d:9c:66:0e:
63:16:1e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:35:34 2024 by rpki-client on console-ams.rpki-client.org