Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer
File: Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer (raw, json)
Hash identifier: DfmoLBm59LWHh50IC1h54UcHRwvvnP6pCKxaUAVuZ0g=
Subject key identifier: 1A:7C:AF:DE:31:35:A2:6B:DD:41:79:02:9E:EB:F7:41:4E:96:43:AF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC501270FB4B2E4FF165DF50EFFA9004E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 50864
IP: 91.220.235.0/24
IP: 195.162.88.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:27:0f:b4:b2:e4:ff:16:5d:f5:0e:ff:a9:00:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a7cafde3135a26bdd4179029eebf7414e9643af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:06:9b:d6:d7:9f:d7:b1:96:df:5f:02:cb:d8:
94:ec:ec:c1:a5:d7:f9:fa:89:ea:78:25:e4:bc:19:
2d:e2:bd:79:9b:32:0c:e2:59:fb:3c:fc:db:52:1a:
bf:86:a9:b2:c0:a9:dd:f5:f1:0f:ac:fa:df:c9:06:
5f:9a:2c:9a:60:46:c3:2a:2a:6b:96:b4:07:36:04:
5a:1a:0c:bc:13:4b:f6:dd:a0:a2:f0:1e:7c:fd:5b:
cd:bc:51:5a:aa:79:6c:0f:6d:e0:e1:b9:18:05:bf:
ea:7f:3e:a5:17:17:d2:48:75:79:48:15:c5:99:d1:
06:df:2b:3f:d7:1a:82:6d:1a:e8:3b:8b:6c:62:a4:
7c:f0:be:d6:3e:be:91:8f:5b:b6:ed:28:32:74:50:
93:c8:d3:0a:82:27:b2:ab:87:0e:9b:0e:38:77:d0:
84:2d:3b:30:a1:9e:8b:ba:a4:25:5a:02:d6:e7:05:
72:a3:b1:d9:6b:4a:84:c0:af:0d:99:cd:d2:55:e0:
42:07:9b:be:6e:9d:18:f1:ec:7a:3f:af:05:f9:a0:
94:fa:0d:e6:3d:6c:0b:c0:a7:f7:76:aa:04:ce:4b:
70:5b:fe:e7:38:38:56:4e:57:fe:c9:f9:24:cf:8d:
f6:e1:f3:5c:97:50:d5:a5:88:85:be:35:91:0c:35:
b1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7C:AF:DE:31:35:A2:6B:DD:41:79:02:9E:EB:F7:41:4E:96:43:AF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.235.0/24
195.162.88.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50864
Signature Algorithm: sha256WithRSAEncryption
84:db:76:e0:9f:f1:7f:6e:5a:fb:67:e0:0d:46:98:dc:ec:6f:
76:88:c6:6c:c3:bc:c4:2d:ba:36:8a:84:2a:15:39:66:48:0c:
c4:e9:18:f6:51:e7:05:e5:65:9e:b4:23:d1:c3:b9:b3:fc:8e:
6c:77:3c:b1:21:0c:42:9d:4a:8d:fd:bd:51:50:fa:00:86:00:
ca:f4:49:cf:3d:c4:f3:45:2d:4b:16:db:86:be:8e:05:b3:13:
aa:5e:cd:ea:1e:29:cc:be:a9:d2:89:d1:23:7e:6c:71:79:c4:
d8:dd:9e:ae:ff:1c:d0:ca:61:02:bc:12:73:32:67:05:1a:7f:
36:b9:16:7b:33:1d:87:4e:a6:dd:fe:62:3f:53:c9:cf:3c:b2:
d6:33:d9:3c:62:da:12:30:07:24:9d:db:28:5d:17:ee:6e:50:
ca:e6:82:93:17:76:93:ae:ab:f3:3b:3b:f6:44:51:c4:a2:c9:
cb:e8:46:68:8b:59:5f:c8:36:45:9b:a2:cf:6c:0b:a6:a3:9e:
3b:65:32:cd:a7:b9:8c:60:a1:24:39:e0:cf:10:28:92:a2:f6:
7a:9d:3d:10:c2:b3:7a:99:be:56:5b:e3:5f:18:68:2f:49:c8:
cb:73:88:60:0d:69:d7:63:ac:b6:10:5d:3b:00:98:98:4b:04:
b3:b4:e6:45
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAYzFAScPtLLk/xZd9Q7/qQBOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTIzMDM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTdjYWZkZTMxMzVhMjZiZGQ0MTc5MDI5ZWViZjc0MTRlOTY0M2FmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQab1tef17GW318Cy9iU7OzBpdf5
+onqeCXkvBkt4r15mzIM4ln7PPzbUhq/hqmywKnd9fEPrPrfyQZfmiyaYEbDKipr
lrQHNgRaGgy8E0v23aCi8B58/VvNvFFaqnlsD23g4bkYBb/qfz6lFxfSSHV5SBXF
mdEG3ys/1xqCbRroO4tsYqR88L7WPr6Rj1u27SgydFCTyNMKgieyq4cOmw44d9CE
LTswoZ6LuqQlWgLW5wVyo7HZa0qEwK8Nmc3SVeBCB5u+bp0Y8ex6P68F+aCU+g3m
PWwLwKf3dqoEzktwW/7nODhWTlf+yfkkz4324fNcl1DVpYiFvjWRDDWx1QIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFBp8r94xNaJr3UF5Ap7r90FOlkOvMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgzLzYyYWZi
Yi1iOGY4LTRiMTItOTE5My0xYzUxMDdjYWIzNTMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODMvNjJhZmJi
LWI4ZjgtNGIxMi05MTkzLTFjNTEwN2NhYjM1My8xL0dueXYzakUxb212ZFFYa0Nu
dXYzUVU2V1E2OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQAW9zrAwQCw6JYMBoGCCsGAQUFBwEIAQH/BAsw
CaAHMAUCAwDGsDANBgkqhkiG9w0BAQsFAAOCAQEAhNt24J/xf25a+2fgDUaY3Oxv
dojGbMO8xC26NoqEKhU5ZkgMxOkY9lHnBeVlnrQj0cO5s/yObHc8sSEMQp1Kjf29
UVD6AIYAyvRJzz3E80UtSxbbhr6OBbMTql7N6h4pzL6p0onRI35scXnE2N2erv8c
0MphArwSczJnBRp/NrkWezMdh06m3f5iP1PJzzyy1jPZPGLaEjAHJJ3bKF0X7m5Q
yuaCkxd2k66r8zs79kRRxKLJy+hGaItZX8g2RZuiz2wLpqOeO2Uyzae5jGChJDng
zxAokqL2ep09EMKzepm+VlvjXxhoL0nIy3OIYA1p12OsthBdOwCYmEsEs7TmRQ==
-----END CERTIFICATE-----
Generated at Thu May 23 00:15:23 2024 by rpki-client on console-fra.rpki-client.org