Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mlqYLljuVQrZ_FOuBekOveLcIls.cer
File: mlqYLljuVQrZ_FOuBekOveLcIls.cer (raw, json)
Hash identifier: Xtn1kCmrvX983jwTXPuAXYpB4YL4S5vp8GO0SXraBfQ=
Subject key identifier: 9A:5A:98:2E:58:EE:55:0A:D9:FC:53:AE:05:E9:0E:BD:E2:DC:22:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC493778C3F1B0CD05239C0633521DD4C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/80447f-4edd-4a2c-80e2-b97cb6307724/1/mlqYLljuVQrZ_FOuBekOveLcIls.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/80447f-4edd-4a2c-80e2-b97cb6307724/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:47 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 195.69.162.0/24
IP: 2a12:2dc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:77:8c:3f:1b:0c:d0:52:39:c0:63:35:21:dd:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a5a982e58ee550ad9fc53ae05e90ebde2dc225b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:df:4d:36:9a:ba:b4:0c:7a:e3:90:1c:08:cd:
2f:9f:fa:f0:a3:16:9f:bd:80:32:a2:6b:f8:d2:30:
f9:6c:65:fb:e1:31:9b:6d:bc:f7:d0:aa:6e:aa:30:
c2:a3:1b:33:2e:12:43:72:b7:81:8e:04:7b:d3:d7:
d4:e1:a7:b1:fd:5c:99:71:a4:78:0d:2b:21:ed:9b:
7a:1d:76:43:aa:cd:df:b7:2d:b6:a9:ac:53:a2:f3:
72:ef:b1:b0:6c:93:1b:d1:3f:ad:b0:5e:7d:f0:f7:
b3:82:53:90:f3:64:71:04:11:ac:bc:d6:68:09:69:
66:d6:e0:a4:7a:40:b5:45:7b:76:04:d0:da:4b:4a:
91:24:24:88:17:4f:c7:c4:7e:39:33:ea:c7:6b:14:
84:05:e9:88:f1:9f:85:34:1f:14:fa:55:f8:37:bd:
ce:41:b1:32:5d:e8:84:d1:ac:81:1f:a8:32:56:d2:
7b:88:b9:47:e1:a6:5a:f3:60:f3:bc:e4:c0:05:64:
82:1e:f7:fb:7b:b7:0a:11:b4:12:b0:40:b4:f8:bd:
3f:3f:9a:9a:ee:4f:f6:80:60:ad:b5:4b:7a:45:b2:
66:de:7f:75:26:64:52:c2:85:f2:ff:b4:02:4b:fb:
e6:fa:60:e2:9e:15:20:c3:69:16:3e:3b:72:6e:ee:
9e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5A:98:2E:58:EE:55:0A:D9:FC:53:AE:05:E9:0E:BD:E2:DC:22:5B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/80447f-4edd-4a2c-80e2-b97cb6307724/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/80447f-4edd-4a2c-80e2-b97cb6307724/1/mlqYLljuVQrZ_FOuBekOveLcIls.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.69.162.0/24
IPv6:
2a12:2dc0::/29
Signature Algorithm: sha256WithRSAEncryption
25:ce:12:d8:64:de:d3:44:f9:f7:fc:0b:e3:43:85:bd:fd:70:
53:48:b6:0e:43:5e:a4:61:49:d9:30:c7:7e:52:2c:6b:36:52:
d0:d1:f2:33:89:f0:e1:92:e1:fa:b7:3c:b5:d9:b3:f1:43:59:
e0:dd:91:68:3f:04:e4:55:9e:bf:9b:5a:61:bb:29:10:fd:80:
f3:54:b4:e1:0b:a5:ca:e4:14:56:fc:b2:3a:7a:48:09:06:16:
10:0f:f5:bf:fa:0f:26:3b:a7:1b:79:59:85:8f:e2:9c:c2:97:
24:80:2a:35:99:cb:7a:f1:22:08:92:50:85:85:0b:3a:93:4e:
a9:a0:96:c8:ca:d8:68:ba:43:71:9d:f2:a0:d8:7b:01:ea:f7:
53:41:52:f7:74:58:f6:26:fc:3b:b1:3f:f0:c9:86:5b:56:c7:
dd:7c:18:f5:3b:99:b7:6f:ec:18:ae:98:00:d4:9f:fe:3a:f1:
da:92:d7:52:b9:45:0a:b2:24:1a:53:29:f4:87:be:aa:26:3e:
df:4c:3b:23:eb:3f:31:69:23:7d:9c:89:cd:6b:89:b8:e4:4b:
4d:79:0e:4c:92:59:f5:65:d7:ea:0d:d5:6d:67:5e:5f:f0:fa:
44:75:ee:b6:88:67:b5:4a:2f:71:37:16:34:bb:d5:48:ee:26:
f2:c8:0a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:56:43 2024 by rpki-client on console-fra.rpki-client.org