Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mq5G4hNZMNomjAZNzlrbtjoM7DY.cer
File: mq5G4hNZMNomjAZNzlrbtjoM7DY.cer (raw, json)
Hash identifier: uHqIa04EIZdjUt0AVazQAGMSdBf5elX7/TiB2i1vUIM=
Subject key identifier: 9A:AE:46:E2:13:59:30:DA:26:8C:06:4D:CE:5A:DB:B6:3A:0C:EC:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B715BAE4B713B7201F47D05D5C899F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:30:04 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210875
IP: 87.236.160.0/24
IP: 2a11:4c80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:15:ba:e4:b7:13:b7:20:1f:47:d0:5d:5c:89:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9aae46e2135930da268c064dce5adbb63a0cec36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:61:57:55:92:2b:54:a4:9c:15:62:ab:42:43:
d1:94:0b:10:09:69:98:71:20:77:3b:c5:ca:b6:58:
21:b4:5a:ec:26:75:ca:0a:f6:70:ce:ec:0e:f6:c0:
0b:c3:5d:3e:6e:42:b6:fd:8a:14:49:05:22:c6:86:
fd:eb:0d:b2:90:94:f1:ba:de:7a:08:7f:d8:3b:5a:
46:3b:1b:f2:50:0e:3a:e9:c7:cc:db:62:c1:db:ff:
3d:63:47:79:f3:7d:8a:73:05:40:72:38:22:a7:05:
85:83:e3:79:6e:40:1b:ba:3d:25:38:75:d5:f1:73:
42:b2:ed:ce:43:fe:8b:9f:a4:62:5f:5a:8b:b4:8e:
78:34:e9:66:02:b7:a1:06:6a:8b:c9:35:8c:60:4e:
96:44:fd:23:a8:0a:93:a2:5a:5e:1e:37:4f:6e:58:
88:39:dd:89:80:f9:c4:a3:25:0b:0a:13:3d:8d:f3:
e1:22:07:3a:f4:47:db:73:42:75:75:24:67:64:aa:
6e:13:b4:60:ad:41:46:d2:a1:d5:60:ed:d3:80:3f:
b6:ca:49:fd:42:b4:0e:d9:62:d9:7c:1c:82:9c:5c:
6e:4e:fc:e0:eb:ae:1f:2b:4e:65:ee:36:04:14:77:
29:6a:b3:92:3f:a7:b2:e8:0e:84:d3:9e:88:15:6d:
f7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AE:46:E2:13:59:30:DA:26:8C:06:4D:CE:5A:DB:B6:3A:0C:EC:36
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.160.0/24
IPv6:
2a11:4c80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210875
Signature Algorithm: sha256WithRSAEncryption
8e:e8:9f:53:6a:8c:45:77:ac:4e:a3:65:21:86:1a:c3:c7:13:
a4:db:f7:22:a9:a7:fe:9a:9f:f6:62:e9:51:3f:5b:26:08:d9:
29:7a:da:0c:ba:00:f9:fa:50:fd:d5:fb:2f:92:f2:3b:2d:3f:
f2:5a:75:03:1c:af:d6:fc:2e:2c:ca:e3:72:2c:9a:cf:d0:2f:
82:10:ff:84:f4:1c:cf:c0:5c:44:cf:9e:9b:09:2b:10:0b:d9:
9d:83:ea:d2:17:c8:f6:07:0d:b3:ec:9e:9b:d1:c8:f1:74:2d:
65:59:f7:e7:1e:c1:19:c6:31:c3:d0:04:88:5c:ca:e3:9e:53:
f3:ce:eb:19:1a:12:f6:e7:18:fd:88:db:5d:67:74:33:23:50:
56:de:34:5f:8d:db:45:af:f2:7a:6e:b5:e2:88:bc:18:2b:58:
de:a3:fc:78:2a:a6:3e:11:b2:67:b0:dc:de:dd:9b:f2:2d:cf:
84:9c:ad:73:db:89:6a:3b:90:ea:4d:e1:12:0d:47:eb:66:c7:
6b:67:a6:1b:74:04:f9:76:63:c4:be:d6:73:01:04:e0:ce:f9:
ce:6d:67:69:2f:3f:91:95:03:05:63:4c:d8:15:c8:d8:8c:20:
84:92:3e:25:54:73:a7:c8:43:07:b0:d3:7b:5a:69:0f:70:10:
8c:c6:fd:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:16:21 2024 by rpki-client on console-fra.rpki-client.org