Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/n4o8mp7fZEc1qU6wnwHKs5hV0ng.cer
File: n4o8mp7fZEc1qU6wnwHKs5hV0ng.cer (raw, json)
Hash identifier: flCcY+ZPdSttDySMhS6ND7N7C9BWbbQFxuOf7KgnAiI=
Subject key identifier: 9F:8A:3C:9A:9E:DF:64:47:35:A9:4E:B0:9F:01:CA:B3:98:55:D2:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3490A33B86399A628FED8B4BCB1E8C8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:53 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 31522
IP: 193.138.67.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:0a:33:b8:63:99:a6:28:fe:d8:b4:bc:b1:e8:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f8a3c9a9edf644735a94eb09f01cab39855d278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:53:8a:c3:10:4d:7c:d6:24:de:7c:bc:30:69:
be:8f:16:de:d0:61:f8:89:cf:30:46:e5:36:d0:c7:
29:e8:32:ff:4c:a4:69:8c:00:99:6e:c6:1d:1b:71:
31:ad:60:fb:37:c4:9d:14:a4:b7:e8:ca:a7:cf:34:
47:a0:de:6b:fe:a4:0a:72:08:81:25:01:4a:dd:fb:
f8:e6:a5:93:c4:2c:40:fa:f3:4c:a4:b0:b7:bc:e0:
ec:6f:b1:a2:98:ab:bf:51:6d:93:d6:76:cb:87:0c:
bf:f8:39:73:93:1f:a0:f0:2d:1e:ac:6f:fa:83:da:
78:fd:b7:5e:26:86:51:f7:38:7f:48:94:6e:1c:5e:
19:87:89:a5:e8:71:e2:84:18:d9:99:2a:da:b4:83:
4a:54:7c:cc:07:c6:7b:38:c0:42:96:67:fa:73:37:
12:4e:ca:b6:83:ef:6f:ea:c2:f8:c1:94:2d:11:09:
c6:f5:d5:6a:d9:29:33:45:36:13:46:6e:e9:dc:78:
e3:eb:1f:8e:8f:aa:6a:9e:1e:48:d0:67:ba:9f:44:
ab:0d:7b:98:90:78:36:37:90:a5:a0:63:ae:ad:4d:
c5:ff:09:d1:24:a7:3d:9b:ba:1a:1d:c4:53:77:99:
1e:83:a5:c6:02:05:59:b8:7c:08:8e:dc:c0:53:ef:
2c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8A:3C:9A:9E:DF:64:47:35:A9:4E:B0:9F:01:CA:B3:98:55:D2:78
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.67.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31522
Signature Algorithm: sha256WithRSAEncryption
97:e0:91:2f:f4:ce:32:fe:30:89:5e:fe:42:69:4e:3e:5d:a5:
3e:4b:69:24:41:a3:49:63:33:79:5c:e2:68:00:71:d1:08:cf:
0f:01:06:5e:19:a7:fa:98:59:7e:6f:ee:fe:89:37:24:53:1c:
78:26:6f:42:10:e6:31:72:2d:b6:32:02:e5:12:2f:ae:15:1e:
e6:f2:6d:10:da:48:e2:fb:56:61:f2:0e:32:2d:4f:55:d1:a4:
80:84:f1:ef:6d:57:fd:8d:2b:12:b6:e1:c5:12:9a:49:ed:c2:
0a:ae:fd:fd:bd:16:5c:35:79:d7:2c:4c:07:e3:5f:56:43:44:
1e:39:2d:ac:bc:aa:4f:bc:6f:03:4c:3b:7b:60:02:45:6d:db:
37:e3:13:90:12:21:2f:c4:4a:85:62:e1:c8:a5:5a:21:25:49:
6a:b6:79:10:0c:00:b8:e6:ef:bb:2c:82:52:67:c1:8e:12:e3:
07:83:61:10:49:f6:58:31:0e:ea:40:b1:9b:e9:63:47:a4:4e:
e4:15:50:d7:11:f8:0b:62:01:90:9e:6f:a2:7e:d7:ba:5e:35:
9a:47:b4:e5:c0:64:58:e2:48:77:06:d6:f1:00:8e:6c:43:1a:
e0:2a:8c:30:cf:3f:a7:bc:46:4a:16:09:b9:e9:c5:0e:62:01:
6d:3b:9c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:28:50 2024 by rpki-client on console-ams.rpki-client.org