Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rgMnvx57e_vdLyFMjvYpqink1m8.cer
File: rgMnvx57e_vdLyFMjvYpqink1m8.cer (raw, json)
Hash identifier: MGJh3f1LIhiRC5/2mBrzFZbgmq0vGTN6x3XhqQZUd2s=
Subject key identifier: AE:03:27:BF:1E:7B:7B:FB:DD:2F:21:4C:8E:F6:29:AA:29:E4:D6:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64A20018878B6C3D194FF3D883DEA92
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:29:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 50402
IP: 195.47.214.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:20:01:88:78:b6:c3:d1:94:ff:3d:88:3d:ea:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae0327bf1e7b7bfbdd2f214c8ef629aa29e4d66f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3f:51:81:1d:65:fa:23:5a:85:21:4b:3f:06:
21:77:59:cf:8c:4a:ec:3f:de:19:b2:1e:3b:a6:a7:
f1:58:5a:9c:67:45:e0:15:69:44:6c:ec:2f:19:47:
05:d5:df:b3:d2:f2:90:bc:a7:55:85:c8:71:03:e5:
13:1a:56:46:58:a4:36:a5:14:32:c8:d7:80:80:15:
1c:91:96:36:63:76:ae:48:3c:b9:a2:24:cd:bf:93:
1e:39:a4:4c:3f:c4:fd:d9:79:4d:57:14:99:59:bf:
fb:40:8c:40:07:ff:e9:1b:9f:e3:90:3d:02:9f:6b:
88:c5:fd:21:cc:c3:ca:aa:7d:15:9e:41:58:8d:20:
57:5b:20:5d:1a:00:be:e4:ce:35:3a:47:f1:a3:1d:
7a:ef:29:82:0a:de:97:e0:c9:a8:d7:c1:d1:6b:1b:
7a:44:98:66:a9:f2:2b:b6:00:d8:82:a8:c8:7c:73:
1e:d0:0c:85:eb:b8:fd:21:7f:16:84:fb:69:3b:65:
a3:55:d7:2a:53:c6:d0:63:6b:31:68:ee:f1:31:20:
be:22:5f:5b:e3:3c:a8:0c:d8:54:b3:13:50:02:87:
c3:1a:a7:ea:d2:8d:7d:05:a1:c3:d9:8b:e8:61:08:
5f:91:fa:93:54:f3:ff:94:e4:ca:3a:eb:f5:f7:da:
e0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:03:27:BF:1E:7B:7B:FB:DD:2F:21:4C:8E:F6:29:AA:29:E4:D6:6F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.47.214.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50402
Signature Algorithm: sha256WithRSAEncryption
1e:cf:20:03:36:92:f0:8f:dd:e1:18:1f:8f:5a:e1:6d:e2:0e:
7e:91:4b:f0:ac:ca:ec:10:75:7b:3a:e1:c3:f0:dc:0b:2d:5f:
5e:39:ab:94:ef:a0:2c:da:ac:c3:d2:f0:e3:1c:03:d9:20:80:
1b:b5:22:28:05:8b:67:d5:e0:e3:fa:aa:0e:bf:71:9b:07:53:
76:9a:d5:f7:fb:1e:b3:af:ed:57:f9:4e:bb:ce:fd:17:97:d9:
22:bd:9d:8e:bf:70:93:35:ad:89:2c:f3:02:ce:08:d4:24:af:
05:21:e4:4d:65:af:d3:13:e0:c8:73:66:b2:38:d9:35:d0:38:
60:bf:35:74:98:73:ea:74:05:b8:95:ba:c1:48:59:0c:50:de:
a0:7d:ef:74:24:ad:05:67:06:a1:0e:8b:84:87:c6:80:fb:f9:
5a:15:e7:02:53:7b:60:06:15:c3:eb:b1:4c:36:d1:4a:48:a9:
57:58:25:07:d5:96:c9:74:47:1e:57:80:cc:2b:94:91:14:0c:
67:4f:ec:84:bd:18:a5:a6:92:ec:f2:29:9a:93:a5:8f:ce:fb:
b5:4d:35:17:75:c9:61:5c:44:00:8d:75:8d:3e:3c:3f:fc:e1:
0b:fc:bf:86:a2:ff:0c:6c:74:08:33:c0:6a:81:e9:7c:e1:64:
b3:b6:7a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:16:11 2024 by rpki-client on console-ams.rpki-client.org