Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer
File: zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer (raw, json)
Hash identifier: j5lAi7P2JqJQlHXBh8wS0gtVQwLAg7P8r/v0LYnuqLE=
Subject key identifier: CC:32:31:63:BB:B4:65:F2:A0:FA:2F:93:FA:50:EF:3B:0D:4C:6A:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC331A4B6042A7C4BAD1397613C666
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:51 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 48415
IP: 91.223.245.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:33:1a:4b:60:42:a7:c4:ba:d1:39:76:13:c6:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc323163bbb465f2a0fa2f93fa50ef3b0d4c6a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e5:09:ac:c6:34:aa:0f:df:d7:db:7a:da:e4:
48:b9:11:81:11:5a:30:fb:8c:14:ca:88:e3:b5:c8:
1b:e2:4c:6f:d7:2d:73:0e:02:5c:3c:57:f7:10:28:
17:47:92:60:60:89:55:3a:66:0f:53:5e:58:2c:8c:
ad:27:43:e4:40:0a:15:0e:bf:f9:f9:96:10:9c:7f:
87:26:6b:de:8c:7a:7a:1e:94:97:e3:04:9b:b3:c2:
1a:df:4f:ee:c2:b6:38:f2:eb:7f:60:52:2d:0c:a1:
cc:e3:a0:a9:ca:b5:ed:cd:1f:98:61:6f:92:7f:e8:
3c:db:22:7e:ab:1e:1b:78:ed:20:6b:2d:18:36:35:
65:6b:a2:56:63:2c:69:81:c8:6f:1c:61:c1:74:0a:
40:4b:54:f0:4c:b7:e5:94:55:f7:d0:9f:2f:d5:3b:
f3:b8:90:ba:54:a6:74:98:ba:c9:2f:53:bd:ad:3f:
b3:81:5a:1e:79:3a:eb:9a:8f:13:82:3a:c6:8b:02:
98:d5:a9:45:aa:cb:26:77:87:1d:81:24:af:f2:3b:
4c:90:2a:a6:eb:cc:94:10:4b:a8:83:af:d9:fc:da:
c0:d9:74:a4:f6:8e:cc:c2:28:fa:c3:5a:95:a2:30:
bb:99:28:5b:54:c9:fa:87:b2:73:31:36:9b:5e:cb:
d4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:32:31:63:BB:B4:65:F2:A0:FA:2F:93:FA:50:EF:3B:0D:4C:6A:9A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.245.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48415
Signature Algorithm: sha256WithRSAEncryption
41:13:c6:f5:75:e0:6f:d9:af:d2:57:d5:d4:93:56:dd:9b:6b:
93:0f:76:a2:87:ef:7a:73:f3:a2:0d:0f:d6:36:d1:92:98:be:
e3:e5:b9:58:2c:0b:b8:c0:3d:3b:6c:bf:49:58:da:9c:e2:40:
f0:90:ac:00:fe:89:31:77:0e:57:31:d7:aa:d7:18:9d:a5:ee:
3b:70:5e:e0:25:88:93:b2:fa:25:0a:ea:c3:07:30:a6:7b:6a:
c4:44:b8:17:14:f0:cf:e4:13:84:af:6f:73:1e:33:f2:38:42:
1a:68:a1:07:3c:8b:3d:9f:d8:7b:ca:c2:2a:0a:d7:43:ab:d5:
47:fe:57:9a:69:ff:65:c7:0e:ff:39:bf:38:18:fc:d9:30:b0:
91:91:d5:31:36:39:74:37:eb:57:c2:fa:c1:c1:31:2d:6f:2e:
86:d5:1a:13:3e:18:55:e3:28:32:d8:a2:73:e4:d8:5a:07:5f:
75:21:02:17:4a:96:05:39:dd:6f:11:a5:e1:d0:d6:1c:56:2d:
e5:a2:5d:e4:ed:de:91:62:60:89:c2:59:19:52:c4:28:c3:76:
e2:2d:20:d1:56:8c:e0:d9:2a:7c:49:6f:43:d4:54:30:70:e7:
38:7b:fb:ad:2f:fa:24:e1:5e:47:e2:c9:61:67:b3:b0:a4:0e:
f9:5e:08:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:23:54 2024 by rpki-client on console-fra.rpki-client.org