Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
File: scPsU58j7gMao5asXO1CVjiEt7M.cer (raw, json)
Hash identifier: 1v9+te1yCaPsOW8o4oNxES4wZhjia7KKuEodV+knaXo=
Subject key identifier: B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B82FF0EF158D7AD95B11DD79A303B5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:30:08 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 207366
IP: 91.220.231.0/24
IP: 2a0a:ed80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:2f:f0:ef:15:8d:7a:d9:5b:11:dd:79:a3:03:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ed:67:d1:4b:2c:f9:aa:02:56:95:e5:b4:3d:
de:cf:33:d5:1c:d6:06:b0:a8:93:da:5b:e9:4e:a2:
1f:9c:29:74:c4:7b:61:8d:e3:a2:11:f6:65:1a:d5:
f4:35:4b:38:fb:48:9b:ca:ab:91:6d:5b:79:57:05:
53:39:49:be:4d:5e:ef:3b:8c:c3:a5:42:46:3b:7d:
c1:1b:e7:c5:80:f1:5a:64:ed:7e:b4:13:0f:93:92:
86:81:fd:66:32:f4:9c:ff:9e:0c:3d:98:8a:a7:eb:
b6:72:dc:29:f9:c2:da:77:19:d9:d5:e9:15:51:1c:
fa:c7:cd:b0:7f:7a:f6:d1:b6:cb:14:f7:6b:db:53:
f5:71:85:3e:30:bc:2a:b2:a6:e5:9e:c2:c8:15:44:
5f:b0:46:c5:03:49:91:b0:b4:c8:c4:ed:cf:6a:42:
33:67:88:49:11:14:48:78:e6:59:c6:a2:36:86:d4:
ea:4c:80:c2:1e:4a:d1:20:32:54:35:34:9b:c5:a3:
ed:25:db:82:e7:e3:dc:db:27:b0:d4:c9:78:bd:8a:
d6:16:27:25:2d:46:25:1f:42:e7:07:a1:f3:ef:d1:
16:bc:69:ec:4b:89:20:f8:29:00:47:c4:74:41:10:
23:5f:55:ca:3c:e2:4a:fe:75:ae:0b:a9:4f:38:b2:
27:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.231.0/24
IPv6:
2a0a:ed80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207366
Signature Algorithm: sha256WithRSAEncryption
5b:d1:fb:ac:48:7e:73:ea:38:c2:ea:98:3b:71:af:ba:91:20:
b7:b2:2d:2a:af:a5:07:70:89:65:4b:f3:e8:bb:e9:04:07:35:
3c:7a:01:24:84:80:24:ea:ec:8e:8b:a4:7a:2f:f9:ff:51:f1:
58:5d:59:15:df:c1:ee:bd:6a:5c:0e:4f:85:8e:7f:3a:ed:af:
2a:63:89:35:8a:98:3c:dd:44:4e:43:93:37:70:e7:46:8e:76:
d9:6e:bf:ac:5b:09:4f:14:ae:52:2c:90:07:07:b2:6e:9d:97:
92:00:f1:e2:d6:fb:fb:0e:cb:46:14:67:a8:31:6e:4a:be:90:
23:c5:77:d7:e5:c3:07:ee:55:a3:9c:c9:f0:38:97:2d:0f:e8:
39:3e:9d:4b:40:4d:e7:44:07:06:44:52:b4:83:39:23:6e:17:
f6:b9:1d:ac:0c:5b:c3:7b:9a:04:6a:a8:61:95:50:8f:ef:39:
81:2b:8c:3a:01:27:54:3e:ee:7d:ed:98:67:9d:32:5d:18:ca:
d7:f7:7d:5a:8b:89:fc:56:7d:b5:01:4c:79:c3:1d:b4:6e:21:
9e:1c:e1:08:e0:be:6d:e8:50:63:f2:7c:ac:73:42:24:a2:86:
5a:23:ed:50:4e:fa:a9:4b:58:44:37:44:9d:99:fb:95:66:3d:
95:5d:4a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:46:44 2024 by rpki-client on console-fra.rpki-client.org