Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer
File: n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer (raw, json)
Hash identifier: vT3BMeY47zJGQj7pFBMKtBaMIqWTv51Z2X6jBE7y/ys=
Subject key identifier: 9F:E1:61:01:E4:21:D2:1C:DB:5E:5B:05:A2:E2:89:DF:B7:73:F4:C9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DAC05B7EDBD1EFDD5B9AA3BE7D362A29C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 15 Feb 2024 09:07:52 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 41074
IP: 91.239.21.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ac:05:b7:ed:bd:1e:fd:d5:b9:aa:3b:e7:d3:62:a2:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 15 09:07:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9fe16101e421d21cdb5e5b05a2e289dfb773f4c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a6:76:5e:e8:3a:9b:8f:c4:4f:92:ee:c1:6a:
4c:14:fe:9c:a2:9c:46:4b:21:eb:c0:c4:fe:1c:00:
a3:36:43:9c:1b:06:ab:4b:58:2b:d4:ad:ab:cb:91:
44:ba:0e:a9:28:17:4c:6e:0e:a5:3f:a1:a3:aa:74:
a0:70:c2:e4:d1:58:cb:56:2b:e1:46:27:ea:01:ab:
57:a2:37:ea:97:25:34:90:34:fa:ae:6a:ae:d4:63:
79:d3:35:36:41:1a:8e:cb:78:cb:f1:bf:cf:26:09:
71:8c:4a:3b:86:67:87:94:8a:f7:37:01:81:a0:29:
72:15:5d:c6:eb:87:8e:84:e7:d9:b8:93:c6:39:db:
41:02:71:15:f7:36:da:d7:86:97:59:04:d7:08:db:
8e:ee:30:19:97:0d:fb:8b:80:e6:97:c5:48:da:9d:
50:18:b9:bf:3e:5d:42:fd:5e:6b:59:27:ff:74:35:
78:ae:1d:2d:ea:d9:ea:1f:92:1b:f8:87:c1:cb:0a:
05:4d:2c:1b:e3:b0:cd:53:b7:67:25:08:f0:6a:16:
d9:fc:f5:23:3a:65:45:6b:e5:2e:a9:6f:17:1a:78:
64:74:5f:73:b5:ba:e8:59:08:b4:af:92:cd:09:0f:
b8:4f:3d:3b:ef:3f:07:db:f3:ae:00:41:93:d6:09:
ff:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E1:61:01:E4:21:D2:1C:DB:5E:5B:05:A2:E2:89:DF:B7:73:F4:C9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.21.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41074
Signature Algorithm: sha256WithRSAEncryption
67:06:ea:f5:2b:e4:3c:e2:40:62:10:04:84:81:91:68:fc:39:
54:3b:23:1a:21:75:56:48:ec:ba:28:22:35:fb:5e:a6:0f:5d:
40:71:da:31:1c:f5:69:e3:23:58:77:06:13:e8:c5:e2:18:85:
f5:f6:fe:57:42:db:e4:18:ba:ed:87:b0:24:82:f5:15:b6:d5:
fd:91:eb:b2:d1:c0:d7:7a:41:62:dc:25:a2:b6:91:0a:d2:0d:
84:95:fb:0f:3d:ea:67:36:59:4c:e0:66:df:43:3c:5b:c1:3e:
8e:89:c8:61:62:ec:c8:fc:9e:64:5e:a9:d9:fb:90:6e:b1:ea:
02:c3:94:32:5b:b8:15:26:b0:9f:04:44:ae:8f:8d:b4:92:59:
6e:16:75:74:83:6e:08:1f:2b:4f:58:e0:1d:46:cf:46:75:94:
24:11:a4:a8:d8:19:a2:8f:e5:df:4d:eb:78:2a:7d:7f:d1:01:
98:09:bc:82:9f:8e:fc:54:b8:5a:e7:06:8c:77:18:67:30:09:
45:29:6e:ae:f9:fe:41:67:ad:9c:1c:32:d7:04:05:cb:71:c9:
e3:85:2f:37:81:d2:ae:df:bc:7d:38:3a:22:d9:7e:2a:d3:cf:
44:b3:96:b9:25:9f:06:ee:50:3d:cb:cc:df:4d:e9:ef:0f:2c:
68:be:5c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:01:42 2024 by rpki-client on console-ams.rpki-client.org