Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer
File: 1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer (raw, json)
Hash identifier: 7NRvY2XRC/OqY+X15JUhQtD5PMk8Kvx9VR9+gvT4iFQ=
Subject key identifier: F9:D7:46:9B:E0:D9:C4:BA:88:9D:3E:20:26:AD:8A:DC:42:C3:CF:53
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5000F74FB2F6FF09F83512556CC5D53
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:29:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 49049
IP: 91.212.105.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:0f:74:fb:2f:6f:f0:9f:83:51:25:56:cc:5d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f9d7469be0d9c4ba889d3e2026ad8adc42c3cf53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5e:18:d4:98:91:5a:9e:08:d4:71:aa:a5:b0:
64:62:0f:db:61:b2:28:9f:20:2c:84:05:3f:5b:22:
c0:80:74:a6:7c:ce:e2:4d:69:60:80:d7:37:eb:46:
fa:d1:ad:84:e4:3c:cf:35:0b:78:a2:bc:71:ca:ca:
96:44:2c:bb:9a:9f:4a:e5:6e:b7:9b:81:18:e1:cc:
6f:e6:b0:48:9b:77:cf:d4:4d:e7:9a:6f:a4:b3:37:
29:f0:ab:cb:e2:34:a6:93:b5:2f:78:07:e2:38:e0:
be:fe:1b:e8:d1:fe:bf:9b:ee:06:0b:a9:36:b8:4e:
c9:32:bc:70:11:84:45:7c:db:a1:df:79:e6:f2:2b:
de:dc:60:8e:88:f3:87:08:09:8b:26:06:5c:0d:10:
32:61:e1:31:49:94:a7:41:5c:98:e8:e6:e8:78:9e:
51:14:62:e3:a0:d8:69:62:aa:10:1c:14:8d:9f:00:
ac:e4:a2:7e:77:4b:b8:b7:fd:5d:0c:2c:7e:e6:f7:
97:88:3e:e5:63:a7:26:bb:1a:09:b8:10:2f:72:71:
19:c6:b5:cb:86:bd:71:b3:e3:05:b7:24:c1:a5:17:
99:04:0f:0a:29:fc:63:9e:54:6e:3c:ea:8b:ce:55:
60:72:d7:f4:e6:ba:85:8c:a9:44:2f:06:79:5d:1c:
8d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D7:46:9B:E0:D9:C4:BA:88:9D:3E:20:26:AD:8A:DC:42:C3:CF:53
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.105.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49049
Signature Algorithm: sha256WithRSAEncryption
89:0f:15:33:4b:ff:cd:24:d3:f2:01:ce:37:10:46:ed:ac:15:
37:57:94:b6:20:81:ed:9a:1f:5f:0b:38:e6:ed:4e:9c:45:f7:
7d:bc:1b:c9:62:14:af:5a:cd:03:a4:d7:ad:d1:1c:bc:ed:a8:
3a:5b:7e:11:a5:14:f5:a6:66:69:41:d3:35:e9:8f:36:83:89:
56:50:72:4c:ac:c7:9a:9a:55:97:ee:b7:86:47:a2:6b:55:5a:
10:e1:5b:07:cc:80:8a:59:83:84:5e:d2:57:01:a1:46:08:a5:
30:84:02:dc:e0:5e:4b:90:9b:7e:c9:9a:58:0d:e7:09:91:ed:
5c:b8:de:68:25:54:b8:c0:9d:29:12:a8:39:ce:c9:5d:9e:ea:
28:7c:db:8c:08:50:ca:56:8b:63:cf:de:94:6a:5b:27:ab:dc:
b7:3c:7e:1d:e6:32:b1:a8:50:2f:8f:9c:eb:bf:f0:f4:8b:9b:
04:ca:07:e8:a3:1f:92:b6:3a:d6:04:5b:00:86:3c:1b:8f:57:
bc:b2:65:9f:57:2e:ac:51:30:d4:9e:aa:19:95:81:0d:82:c8:
4a:53:e2:e0:85:10:9a:96:2d:d8:7d:ba:e0:25:b4:9b:70:3d:
1d:d6:9f:46:a5:3b:74:34:d9:47:2d:04:68:c9:43:92:f5:41:
c9:49:cd:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:52:23 2024 by rpki-client on console-fra.rpki-client.org