Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer
File: 1ZVssui7tNQpco4B4g_TyOBfMyg.cer (raw, json)
Hash identifier: HHh3TMstj4ALuXbUUWimAX0vZAbPYgR+RsngeZJO0dA=
Subject key identifier: D5:95:6C:B2:E8:BB:B4:D4:29:72:8E:01:E2:0F:D3:C8:E0:5F:33:28
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DD5AFCB7728C717A5BC1A129183567A3B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 23 Feb 2024 11:18:04 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 48617
IP: 91.209.194.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d5:af:cb:77:28:c7:17:a5:bc:1a:12:91:83:56:7a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 23 11:18:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5956cb2e8bbb4d429728e01e20fd3c8e05f3328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6f:7e:9b:12:d2:98:4a:53:90:a4:5d:98:02:
b7:fb:80:ac:04:b5:21:1f:98:3d:a8:e0:32:81:1a:
6a:82:72:c8:68:39:d8:91:45:93:67:72:52:c7:f6:
30:9e:85:67:4e:59:ff:cc:b1:9f:cf:22:d3:32:58:
27:37:80:4a:bd:fd:37:a9:eb:52:ec:2a:79:c2:21:
31:15:7d:0d:bb:e0:00:86:68:ec:14:40:0a:4c:ea:
81:cd:0f:d9:8d:49:42:a6:43:15:12:27:52:2f:d0:
88:c3:05:1f:64:6f:0c:2f:33:d7:d2:06:c0:1d:e0:
9a:63:37:01:cd:c7:dd:8c:64:42:90:0c:8d:0b:b4:
6a:ca:4f:4d:72:66:0a:3d:28:ac:93:4d:e9:1a:c7:
4f:72:f2:90:35:58:ee:66:52:ab:61:7b:b0:7c:13:
1c:3d:8a:40:90:a7:18:70:87:70:5b:ef:68:91:2c:
1f:0e:04:b7:be:75:fc:52:39:82:e2:08:df:ea:e6:
2a:7b:98:da:02:aa:64:55:df:ef:45:e1:6e:84:77:
7a:b2:16:83:b1:0b:29:37:04:ca:60:53:fd:4d:a7:
31:25:b6:08:d3:ba:73:47:df:ce:bf:4b:b8:de:27:
04:d2:67:ae:c8:5a:19:6a:84:96:2c:b3:51:52:74:
ab:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:95:6C:B2:E8:BB:B4:D4:29:72:8E:01:E2:0F:D3:C8:E0:5F:33:28
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.194.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48617
Signature Algorithm: sha256WithRSAEncryption
8a:d3:09:08:99:b8:4c:7b:9a:ec:7a:5a:ec:cd:34:8e:ef:8a:
fa:3d:f5:18:da:cd:11:fe:0e:9a:2a:af:be:3f:c1:ae:36:2e:
c9:a9:1b:07:7a:98:31:bd:e0:b3:7f:6b:c9:a5:29:89:a1:37:
f7:f7:bb:8f:ed:e0:94:32:67:d9:bf:8a:3a:4f:76:ca:a8:d1:
85:24:69:3f:2a:3f:61:f4:d0:e8:c9:4f:f9:49:ff:60:be:02:
a7:bb:ab:cd:82:d2:7a:f4:05:46:f0:5a:99:2b:1a:aa:1e:ed:
7f:dc:d3:a4:3e:52:b2:0e:e8:0d:ff:d1:a1:5c:b5:db:c7:1a:
ed:63:b1:ef:cd:f4:dc:3b:76:60:63:b4:21:05:a1:aa:60:54:
9d:b7:cb:6e:cc:f5:8d:60:19:ce:e6:b9:98:68:85:1b:e3:29:
7d:95:ff:8d:2c:fb:45:5c:5e:39:9b:05:27:30:d3:94:a9:42:
a3:ef:b6:be:d2:33:0a:b1:36:db:63:e1:ba:dd:5e:fe:24:1e:
c6:88:13:68:8c:f2:39:3b:e4:89:ff:03:40:80:57:c6:ad:a7:
bd:4c:8a:43:b2:3d:65:c3:9e:3c:89:5a:17:20:0e:ab:c4:7d:
57:68:6f:9c:09:5f:7b:40:8f:f3:03:a4:bc:77:0d:97:a5:08:
05:45:6f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:41:09 2024 by rpki-client on console-fra.rpki-client.org