Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mf-X9RWwg-MLxS2B4ZPYyLt_34w.cer
File: mf-X9RWwg-MLxS2B4ZPYyLt_34w.cer (raw, json)
Hash identifier: i/H1AKPRQNdB50EnPqInJR01RukJoKBnyrN6iqZSlPk=
Subject key identifier: 99:FF:97:F5:15:B0:83:E3:0B:C5:2D:81:E1:93:D8:C8:BB:7F:DF:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D1867651FB8E39C693A62FD10D7DCF569
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 17 Jan 2024 17:10:45 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 46.151.160.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:18:67:65:1f:b8:e3:9c:69:3a:62:fd:10:d7:dc:f5:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 17 17:10:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99ff97f515b083e30bc52d81e193d8c8bb7fdf8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bb:b1:e8:9d:93:3a:b3:e7:cd:ec:0d:a7:67:
87:48:cb:9e:e6:96:07:61:b1:24:5e:24:11:08:02:
f2:13:97:d9:0f:1d:ea:cf:1e:73:ae:77:7d:2d:ed:
f8:01:c6:b3:2b:66:82:ca:a7:a3:b9:59:24:7a:65:
c8:a1:78:23:dd:64:e4:e5:43:39:a6:87:05:1c:a6:
9c:90:a5:c7:38:d7:40:fe:8a:2d:e1:1e:b8:f2:25:
74:cb:1a:31:db:61:a2:1a:43:75:d3:52:72:6e:8e:
cf:56:98:38:d4:49:c9:9d:24:8d:30:e3:66:6d:55:
fb:57:94:20:34:16:7d:9a:4d:83:fb:df:e8:d0:9f:
f2:09:03:82:99:93:5a:0f:0c:a8:82:27:4d:54:f8:
75:f2:7e:02:b8:6e:43:0e:c7:5e:96:8f:f7:b2:62:
08:6f:e3:87:28:18:ff:54:35:38:48:49:6c:fe:f3:
8e:74:5d:cb:6f:30:e7:94:57:6c:aa:d8:9c:df:91:
b3:dd:30:fa:93:72:f7:24:52:30:63:d3:d3:96:ff:
70:69:e9:2b:30:32:3b:2b:59:b6:4d:6a:14:a8:8f:
83:5f:35:c9:81:12:ec:10:28:f4:b6:d2:43:02:7d:
5c:d1:a2:5a:23:b0:17:4d:15:ec:20:0d:a8:95:2a:
dd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FF:97:F5:15:B0:83:E3:0B:C5:2D:81:E1:93:D8:C8:BB:7F:DF:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.160.0/21
Signature Algorithm: sha256WithRSAEncryption
3d:d3:8c:88:b4:81:78:bd:2b:8a:35:6b:b0:4b:d6:7e:f9:e5:
95:81:2b:f5:10:a0:10:d4:6f:9e:09:e3:95:19:33:72:b1:2a:
24:cf:cb:92:67:32:48:f1:d7:b5:29:e0:7b:96:9e:07:ba:35:
12:30:6d:b6:8f:8a:76:d6:13:8b:02:e2:73:2a:57:a0:03:f0:
77:89:d1:b5:83:a4:40:f1:0e:41:49:1f:0e:8b:15:6a:92:27:
2d:65:d8:2a:88:2f:2c:0e:aa:c9:43:a1:ae:17:db:73:fc:96:
c7:eb:4a:12:35:73:2d:da:9d:dd:bc:d3:f7:ad:68:a8:71:f9:
48:43:76:c4:6f:20:d6:55:a1:4c:e2:e2:35:a5:34:f2:d0:84:
b1:e5:f9:bb:c4:9d:0a:71:67:a8:c0:5c:fe:af:82:43:46:66:
68:63:6b:88:47:86:cb:a4:6f:e3:06:3c:60:c5:a2:82:bb:7c:
88:ca:74:91:a3:f0:cd:0c:76:67:76:cc:dc:eb:37:26:48:e9:
4a:6d:61:a8:fd:ae:ef:3f:19:33:b5:1a:3b:b4:52:ee:88:5a:
6d:ea:64:9b:0f:7a:ed:f6:e4:3a:d4:ff:ec:24:49:c2:26:be:
13:88:39:b9:2b:90:cc:d3:26:c0:fa:9f:4e:97:59:36:dd:d9:
43:a1:5d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:03:43 2024 by rpki-client on console-ams.rpki-client.org