Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0aiWnX4yy_knZkstxDa5bnFJpis.cer
File: 0aiWnX4yy_knZkstxDa5bnFJpis.cer (raw, json)
Hash identifier: sEChOrAE63xmyyKgiPGaFkmctPaDeCm7OXzXx/7XzMA=
Subject key identifier: D1:A8:96:9D:7E:32:CB:F9:27:66:4B:2D:C4:36:B9:6E:71:49:A6:2B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E4840130CD0F1FB14142054576043
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/0aiWnX4yy_knZkstxDa5bnFJpis.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:48 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 51518
IP: 91.217.78.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:48:40:13:0c:d0:f1:fb:14:14:20:54:57:60:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d1a8969d7e32cbf927664b2dc436b96e7149a62b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:60:a4:98:1d:8b:1c:0a:31:2c:ac:a3:a4:ca:
fe:16:7d:e4:e4:67:c4:2e:26:4d:01:bb:73:95:a0:
c8:b0:40:ba:c9:36:ec:c0:1f:a5:a8:47:ad:d5:e6:
a5:9a:d8:97:7f:a3:ec:a2:ba:fd:b4:fc:a9:a7:64:
83:ad:88:8d:93:c7:95:48:a8:01:4e:0c:01:f0:6e:
91:bc:01:16:f1:31:f7:b4:bb:d9:a8:26:a7:cd:bd:
db:a3:a4:fe:50:56:58:20:3a:1a:2a:90:f9:ff:92:
de:c5:cb:e3:50:6f:b7:37:6d:45:78:e1:5c:86:74:
fb:7b:e0:c8:06:aa:4b:33:5b:6a:46:1d:2a:0a:46:
ad:38:d5:e6:c2:72:90:f6:7e:42:97:bb:cb:3f:75:
c9:88:24:bc:06:c0:df:93:8c:2d:2d:49:df:b6:e5:
c2:ac:4b:8f:23:24:e8:3e:8e:19:74:97:ec:ef:35:
ca:14:a6:75:a6:ea:46:8b:97:01:5b:52:6a:63:f2:
1a:fa:bc:df:1d:24:a8:d0:fb:da:f1:e3:cb:2c:76:
b8:2f:a2:11:82:54:53:27:63:14:cf:b6:2e:04:ed:
b3:db:dc:5b:03:f0:85:a5:18:36:e7:ae:3e:54:92:
da:9e:af:bb:95:e5:5b:ea:79:7c:32:79:b6:c2:4a:
c7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A8:96:9D:7E:32:CB:F9:27:66:4B:2D:C4:36:B9:6E:71:49:A6:2B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/0aiWnX4yy_knZkstxDa5bnFJpis.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.78.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51518
Signature Algorithm: sha256WithRSAEncryption
69:1c:45:19:87:75:65:9b:db:48:0a:da:b3:bc:bf:8b:f8:0c:
59:08:63:e0:52:f2:4b:a4:50:5e:60:57:b6:3e:78:f8:e1:03:
a4:31:7d:8c:8f:5a:b7:d2:fa:38:87:2e:ab:97:dd:29:9c:36:
55:68:9b:71:e3:6b:09:3a:c6:bd:23:6c:df:12:25:bc:74:42:
8b:42:18:d0:b8:65:d9:38:46:06:c5:be:3c:8d:8f:58:91:f4:
e8:a5:6d:d0:58:43:a4:0b:f3:5c:8c:b6:b8:20:a7:19:80:dc:
d6:5b:df:9e:64:1e:94:8e:cf:de:a9:7e:8c:8c:60:dc:b7:3c:
3f:45:20:97:59:2d:30:78:f7:76:f4:a8:23:fa:d7:ed:9e:c7:
12:ac:dc:4c:ec:59:23:80:5c:b3:75:f8:05:0e:dc:bd:b5:7e:
35:e5:04:c2:54:90:c1:44:b6:7a:c5:a7:25:ea:7a:c5:eb:5d:
25:4b:dc:dc:f0:f0:f1:f4:9f:7d:4b:31:a8:61:1c:6b:73:ab:
96:dd:73:dc:5f:3f:fd:33:ab:08:c5:08:4d:b9:1b:de:26:83:
c5:51:86:f5:b1:80:71:05:f7:ed:a2:60:90:6b:a8:1e:c7:cf:
4b:44:92:45:fe:e9:21:6d:c9:7a:4e:a1:aa:97:54:ef:9e:4b:
7f:1e:2f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 22:22:52 2024 by rpki-client on console-fra.rpki-client.org