Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.cer
File: z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.cer (raw, json)
Hash identifier: 2hAqty1fMcKkgm6s5495cSno6Set13axKXyngOV/RhQ=
Subject key identifier: CF:C0:25:A9:D5:5B:FD:64:37:57:DA:4D:49:9D:CE:17:20:17:74:D2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64AB668A5B9759FFCDB7640B7970FF4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:30:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 48782
IP: 91.212.30.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:b6:68:a5:b9:75:9f:fc:db:76:40:b7:97:0f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cfc025a9d55bfd643757da4d499dce17201774d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6e:19:27:55:60:9f:a8:25:a1:86:4c:a9:97:
6e:d7:88:e8:35:e8:9a:70:d9:53:a3:55:55:c9:b6:
b9:9c:59:52:75:77:93:98:aa:70:c3:62:2d:d0:3b:
76:38:b1:1a:99:b7:8c:49:38:05:32:c0:de:9f:d0:
87:cf:4c:7a:15:84:2c:c2:cd:a1:c0:b6:c5:86:7b:
ad:a5:46:d6:00:c0:18:3b:04:b2:7e:42:e7:61:fb:
b7:a9:f7:ec:c3:f7:5f:3e:f6:67:af:77:58:34:a7:
13:9d:01:99:8c:07:ad:03:71:49:ab:cc:53:2e:60:
9e:19:5d:ed:da:57:9e:f0:a4:3f:87:06:55:28:bb:
f8:b3:83:2a:9a:06:2a:e7:56:7f:6f:5a:31:cf:65:
d6:90:52:e6:ed:15:e3:0f:28:38:0d:40:7a:da:8b:
03:7b:40:26:6b:7c:55:1b:df:b2:c5:8e:55:48:59:
33:7a:91:50:aa:4a:98:dc:47:94:bd:cb:e7:ad:02:
9a:09:88:5c:b2:08:78:26:cb:b1:b7:a3:86:f6:0f:
56:a9:e4:36:60:9c:a2:ed:14:41:83:85:7e:21:c1:
59:8d:25:40:d2:fd:60:74:46:d8:0e:a2:fb:e6:14:
22:b3:f1:93:d3:98:9a:3f:3d:7e:bc:f6:2f:c5:40:
7f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C0:25:A9:D5:5B:FD:64:37:57:DA:4D:49:9D:CE:17:20:17:74:D2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.30.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48782
Signature Algorithm: sha256WithRSAEncryption
58:7f:b4:4e:0b:13:df:c0:b6:ec:a9:98:19:3d:4b:31:f0:ff:
c2:b5:e0:20:f1:b0:c9:7d:38:0b:c4:c0:66:ff:ea:ad:be:95:
47:9f:a2:e2:29:73:e3:34:1f:c4:2f:62:1a:f6:89:ee:39:d2:
1e:ff:ff:2b:3d:f8:47:3b:50:91:4e:17:97:bd:0c:84:d6:d9:
6c:07:26:cf:40:44:2e:dd:3f:95:7b:1c:dd:bb:81:11:d8:5e:
51:4e:36:24:0a:07:95:9f:dc:38:db:92:30:2b:a4:2e:eb:d8:
dd:50:0a:27:d3:0a:00:1f:99:c0:12:f5:d5:14:87:c3:96:d2:
0e:17:70:42:f3:7b:2d:37:99:cc:67:f4:50:5f:8e:03:ad:1a:
42:00:73:0d:2a:41:a7:3f:e6:0b:9f:03:aa:7b:a2:45:99:b3:
63:0e:04:56:21:65:43:d9:dd:1a:09:ea:e4:98:32:2b:09:26:
5b:eb:a8:55:1d:11:5e:ae:0a:22:7d:31:a2:5a:a3:93:2a:cc:
3c:03:fa:e9:3b:89:92:4b:b2:68:3d:93:b4:d7:0f:e7:6e:f4:
d9:74:ad:3e:2a:39:6f:a5:33:6e:eb:03:1a:bc:ca:b8:fe:89:
84:fc:44:b8:95:3f:3b:9b:c1:1e:8f:79:e5:3c:42:0a:a7:8d:
27:66:5f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:51:59 2024 by rpki-client on console-fra.rpki-client.org