Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer
File: 793Ia4IAX_jHwmSi4GcDemCLSB8.cer (raw, json)
Hash identifier: lZU6Ke9+S99GkM+p7rxz/yOWpL46SFK40kdPgNWVtOo=
Subject key identifier: EF:DD:C8:6B:82:00:5F:F8:C7:C2:64:A2:E0:67:03:7A:60:8B:48:1F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4931BDB4CB309417B2883E4184AFFDB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 49546
IP: 91.219.40.0/22
IP: 185.49.112.0/22
IP: 2a04:b6c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:1b:db:4c:b3:09:41:7b:28:83:e4:18:4a:ff:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=efddc86b82005ff8c7c264a2e067037a608b481f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8b:90:78:f7:08:24:4b:46:a8:83:80:02:6a:
73:45:24:af:72:02:55:47:e5:13:cf:19:ce:00:c0:
e1:3a:4c:e3:1f:d7:2c:a6:59:50:78:67:e5:12:f7:
5d:fa:88:c3:1f:54:ff:09:62:e5:01:93:a9:ce:77:
9b:bc:5d:c0:1b:a3:69:d5:0b:b0:7f:a9:f0:fc:b6:
5f:e8:0b:c4:3c:f4:09:cf:0a:b3:c3:c9:93:10:db:
12:fb:e2:80:98:38:18:09:7b:68:5d:20:f3:16:49:
32:a8:93:de:51:d1:1a:96:5a:a6:27:41:d3:13:1d:
cd:b1:a0:65:ae:da:da:ab:77:bc:9a:4f:ad:d4:b9:
02:c7:ad:21:e1:11:fa:90:ff:14:b4:07:51:1a:85:
82:b1:f5:56:3e:1c:3b:55:7d:61:27:d2:35:da:af:
d8:35:c3:5b:93:03:e3:be:79:90:ad:fa:37:e2:03:
2a:57:53:34:ee:a1:6e:62:7c:fe:9b:aa:ec:e0:a8:
70:58:44:84:51:87:3e:f1:f3:1a:1f:d9:e4:94:78:
dc:91:af:d8:e4:36:af:c6:68:7f:1f:4c:da:7f:bf:
38:a5:c7:fe:4a:4d:ee:72:aa:cf:c1:85:13:e2:11:
9f:d2:37:05:74:71:55:d3:e8:3a:2a:6f:26:97:f7:
7c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:DD:C8:6B:82:00:5F:F8:C7:C2:64:A2:E0:67:03:7A:60:8B:48:1F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.40.0/22
185.49.112.0/22
IPv6:
2a04:b6c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49546
Signature Algorithm: sha256WithRSAEncryption
35:fb:31:60:67:7a:a9:f8:5c:a5:90:4b:97:b5:a9:a5:89:8f:
da:94:81:0f:ff:73:08:a2:73:88:1d:e5:c4:cc:6d:11:c2:de:
53:38:7e:45:e2:69:81:78:2f:cc:fd:01:8d:0f:46:6b:e3:da:
b3:16:56:0d:29:fe:51:d9:e4:64:2a:a5:d7:f6:c6:32:18:65:
0c:45:ad:53:be:cf:43:a3:24:f5:a4:09:ab:df:01:f4:bc:53:
3c:3a:53:a4:cb:ac:2f:e9:a1:a0:70:6d:62:8a:2c:1b:b9:38:
2a:9f:dd:45:ac:95:7f:2f:4b:46:a9:e4:cb:ce:ce:8c:a0:a3:
ff:d2:43:90:3f:fd:c8:72:be:07:9b:a3:c7:45:8a:5c:de:68:
cd:28:71:06:c7:5a:34:0c:19:12:5e:04:c6:54:73:55:70:82:
73:5e:86:5c:fe:6f:d6:34:59:de:b8:5b:b9:b0:90:4d:ad:b7:
48:e7:05:ae:4b:50:dd:3d:ce:32:af:39:4a:44:b1:a2:46:27:
84:82:20:a4:2f:61:42:4c:84:14:0c:40:70:de:40:8f:c5:70:
35:5c:c4:ef:13:aa:91:72:b5:91:f3:44:3a:24:df:33:c8:88:
88:21:8c:af:bd:ab:26:e4:81:fb:49:27:1f:e3:c2:07:bb:59:
5e:3f:39:e0
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAYzEkxvbTLMJQXsog+QYSv/bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTAzMDI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZmRkYzg2YjgyMDA1ZmY4YzdjMjY0YTJlMDY3MDM3YTYwOGI0ODFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IuQePcIJEtGqIOAAmpzRSSvcgJV
R+UTzxnOAMDhOkzjH9cspllQeGflEvdd+ojDH1T/CWLlAZOpznebvF3AG6Np1Quw
f6nw/LZf6AvEPPQJzwqzw8mTENsS++KAmDgYCXtoXSDzFkkyqJPeUdEallqmJ0HT
Ex3NsaBlrtraq3e8mk+t1LkCx60h4RH6kP8UtAdRGoWCsfVWPhw7VX1hJ9I12q/Y
NcNbkwPjvnmQrfo34gMqV1M07qFuYnz+m6rs4KhwWESEUYc+8fMaH9nklHjcka/Y
5Davxmh/H0zaf784pcf+Sk3ucqrPwYUT4hGf0jcFdHFV0+g6Km8ml/d8iwIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFO/dyGuCAF/4x8JkouBnA3pgi0gfMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNlLzc4OTg1
MS01N2MyLTRhNTgtYTA2Yy0zZWIxNDg4Y2U4ZTEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2UvNzg5ODUx
LTU3YzItNGE1OC1hMDZjLTNlYjE0ODhjZThlMS8xLzc5M0lhNElBWF9qSHdtU2k0
R2NEZW1DTFNCOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQCW9soAwQCuTFwMA0EAgACMAcDBQMqBLbAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDBijANBgkqhkiG9w0BAQsFAAOCAQEANfsx
YGd6qfhcpZBLl7WppYmP2pSBD/9zCKJziB3lxMxtEcLeUzh+ReJpgXgvzP0BjQ9G
a+PasxZWDSn+UdnkZCql1/bGMhhlDEWtU77PQ6Mk9aQJq98B9LxTPDpTpMusL+mh
oHBtYoosG7k4Kp/dRayVfy9LRqnky87OjKCj/9JDkD/9yHK+B5ujx0WKXN5ozShx
BsdaNAwZEl4ExlRzVXCCc16GXP5v1jRZ3rhbubCQTa23SOcFrktQ3T3OMq85SkSx
okYnhIIgpC9hQkyEFAxAcN5Aj8VwNVzE7xOqkXK1kfNEOiTfM8iIiCGMr72rJuSB
+0knH+PCB7tZXj854A==
-----END CERTIFICATE-----
Generated at Fri Apr 26 11:43:39 2024 by rpki-client on console-ams.rpki-client.org