Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6vlt8xs_QE31t345nOeTcbT0REM.cer
File: 6vlt8xs_QE31t345nOeTcbT0REM.cer (raw, json)
Hash identifier: YNj9K50o+/izCGuT7+9mig3cZ9Vm3DLGgYlKT22QA08=
Subject key identifier: EA:F9:6D:F3:1B:3F:40:4D:F5:B7:7E:39:9C:E7:93:71:B4:F4:44:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01914624F14D8C6F0DBD54966960D96F9655
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 12 Aug 2024 10:31:51 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 56886
IP: 91.229.233.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Dec 2024 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:46:24:f1:4d:8c:6f:0d:bd:54:96:69:60:d9:6f:96:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 12 10:31:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eaf96df31b3f404df5b77e399ce79371b4f44443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b4:83:3b:cb:f2:bf:b9:7a:8a:b7:32:bf:c4:
e7:24:45:b6:84:cc:4b:4f:41:a0:8a:70:3a:08:01:
21:5b:9b:92:d2:89:6c:af:de:2f:ce:bc:52:63:b0:
86:84:56:08:e9:d5:1b:15:23:3c:df:d7:30:60:4e:
00:57:89:d0:4b:bf:44:ab:ad:3b:b0:57:94:16:3d:
0a:dc:ba:d0:2e:34:a1:7a:3d:80:9d:c4:e3:b5:e2:
37:7a:ef:42:16:a8:11:f1:b0:4e:e9:e3:8b:e8:3e:
fd:c4:41:dc:16:63:c3:d7:d5:ce:89:2f:6b:e6:34:
1d:15:e5:6b:08:b8:3e:d9:fb:05:4f:43:04:b9:15:
bc:6e:52:74:d6:8f:c2:16:8e:68:63:41:c0:db:b1:
5c:cc:6d:5d:f5:9b:97:1f:59:32:fc:c8:fb:89:56:
b8:1a:07:54:76:b6:8e:25:11:51:83:77:39:20:55:
73:25:60:cd:09:8a:82:fe:8b:24:a9:67:3f:45:b4:
81:d0:b4:de:a0:26:54:e6:0a:44:8c:0f:df:e8:f8:
01:f3:0a:90:b0:53:7c:2f:c9:c0:05:c1:f1:e0:84:
d4:28:4f:86:d7:4a:b3:e9:57:b8:c4:21:7e:4d:95:
e1:65:af:13:cc:32:0e:52:15:0d:34:cf:54:0a:60:
98:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F9:6D:F3:1B:3F:40:4D:F5:B7:7E:39:9C:E7:93:71:B4:F4:44:43
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.233.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56886
Signature Algorithm: sha256WithRSAEncryption
90:0f:89:e9:f6:2d:6a:73:69:c0:01:d5:e8:33:d2:52:7d:cd:
fc:fc:21:16:07:fe:31:df:a8:69:33:22:17:a4:4f:14:29:41:
a4:8f:a8:69:b3:4f:c8:fc:3e:af:c9:b2:3e:15:72:c2:1f:4f:
fa:3d:42:ca:41:c3:09:71:cf:97:4c:87:19:ef:33:c9:aa:6c:
04:5e:2e:b8:a2:c8:13:40:12:c9:41:d5:aa:21:00:f1:c6:d4:
3b:e6:9c:f4:ed:35:65:c4:24:e0:36:09:6d:41:d7:53:b7:fd:
ca:44:93:ac:a0:e8:0c:16:3f:ad:67:61:68:fa:c7:9d:a7:3b:
49:9f:fa:9b:ee:9f:bb:a5:25:43:1b:ef:6a:29:8d:2f:e7:0b:
72:dd:f2:c6:d6:57:cf:bf:ce:42:c2:d8:8b:92:ce:ca:83:f3:
14:b9:19:65:3d:b1:d3:53:c7:4d:8d:46:da:65:29:2b:8e:43:
22:dd:b8:c9:6b:4c:73:f8:8e:e9:e6:55:75:c8:55:bd:a1:8d:
ce:3b:e8:4d:54:fe:72:46:c4:a2:05:91:ee:cb:b1:02:43:79:
83:75:d0:f9:06:2e:01:99:2d:87:20:c2:8a:cc:da:5d:80:38:
1e:33:de:17:12:95:e1:6b:45:01:db:f2:c6:cf:6c:a8:b1:28:
69:c8:b4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 16:57:23 2024 by rpki-client on console-fra.rpki-client.org