Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer
File: BRYHqGja9IRiRfPIu_nr52mCmtk.cer (raw, json)
Hash identifier: sCwU4Cwdgb2MoATQiopcdpfTcZD8erObOKn2FzcpYSA=
Subject key identifier: 05:16:07:A8:68:DA:F4:84:62:45:F3:C8:BB:F9:EB:E7:69:82:9A:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0192DC5A2D398EFE77BE9B111400198C6EA2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 30 Oct 2024 07:35:50 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 39819
IP: 91.207.28.0/23
IP: 91.213.233.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:dc:5a:2d:39:8e:fe:77:be:9b:11:14:00:19:8c:6e:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 30 07:35:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=051607a868daf4846245f3c8bbf9ebe769829ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b0:c4:b9:1d:70:78:c1:5b:69:90:c8:76:a1:
db:c7:17:50:6f:c5:68:14:64:93:de:c2:16:b2:5a:
5f:a6:a1:ff:26:23:03:8a:9c:cd:3e:83:ae:fe:3b:
e3:55:d2:a4:15:aa:6f:b2:cc:60:f7:af:2f:5d:70:
29:bf:74:f8:fd:65:fe:2f:a8:7f:9f:86:6a:d1:40:
84:5b:fe:f0:68:bf:5a:c5:87:18:77:c4:c2:65:11:
47:6b:ef:b1:ec:74:2e:65:2d:31:24:4c:d1:b9:86:
3d:66:bc:15:80:3f:e5:7a:25:8b:86:b6:b3:ac:1e:
d6:5b:21:57:e9:01:cb:3c:c7:20:33:6f:67:1e:b8:
0f:82:7b:1c:90:f5:0b:a6:76:05:26:fd:4f:d8:c8:
ca:0f:a8:d0:ae:41:f7:1e:89:3c:bf:f6:53:7f:d5:
af:f9:e5:f9:07:3e:a6:c8:d6:be:78:e6:a0:75:57:
92:73:c7:6c:90:14:ad:e9:20:7b:4d:fd:d3:1b:33:
fe:f7:9b:69:56:0f:c1:14:8e:54:38:73:c4:0e:a0:
29:ad:fd:ef:f3:d8:d1:48:9a:e5:68:91:ec:4a:7f:
5b:df:4d:4c:b4:21:7b:9a:6d:dc:1e:d4:a4:85:71:
7a:de:cf:e3:7e:d8:4e:45:6c:8d:88:bb:c2:27:95:
98:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:16:07:A8:68:DA:F4:84:62:45:F3:C8:BB:F9:EB:E7:69:82:9A:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.28.0/23
91.213.233.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39819
Signature Algorithm: sha256WithRSAEncryption
31:e6:95:3e:1f:29:9c:f6:40:d6:ac:82:86:8f:97:1a:50:c0:
ee:da:93:22:c1:c5:62:97:b3:d0:d0:82:2f:8f:d7:39:94:cb:
ed:af:0a:29:62:cb:6c:37:3b:2a:b8:ff:ae:e0:ba:2b:77:bb:
73:d4:e5:70:56:67:e9:2a:d5:29:6b:3e:00:24:8b:82:dc:b9:
3b:85:4e:91:e7:43:ea:3e:04:14:6f:ab:de:76:29:d3:87:b0:
15:2b:53:6e:8b:66:9e:ff:77:ab:b4:e5:1c:21:77:ba:28:d1:
7a:32:a6:1b:27:6e:2c:14:c6:48:5f:94:d4:9b:50:68:8f:b1:
83:7d:59:07:be:04:7e:b7:d4:1d:68:34:08:15:56:0d:9b:2a:
1c:04:b2:eb:20:53:c7:78:a2:ef:6b:d6:fc:ee:c0:0f:bd:d5:
43:89:56:2f:41:d8:72:a6:37:6f:2f:28:7d:d4:7e:c4:e4:8d:
0b:3a:b6:7b:b8:11:75:c9:63:13:cb:e9:b1:2f:78:6d:af:64:
d5:a6:63:d3:0d:d9:8d:d6:fc:1a:e1:ef:6d:59:82:8c:d9:72:
88:98:cb:4d:8e:33:be:2d:c0:86:0f:f5:6e:1d:be:5b:d3:44:
8b:18:de:9f:f6:7f:84:8f:b0:4f:49:fe:2f:e2:a8:00:05:f4:
09:7b:af:19
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAZLcWi05jv53vpsRFAAZjG6iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQxMDMwMDczNTUwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTE2MDdhODY4ZGFmNDg0NjI0NWYzYzhiYmY5ZWJlNzY5ODI5YWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorDEuR1weMFbaZDIdqHbxxdQb8Vo
FGST3sIWslpfpqH/JiMDipzNPoOu/jvjVdKkFapvssxg968vXXApv3T4/WX+L6h/
n4Zq0UCEW/7waL9axYcYd8TCZRFHa++x7HQuZS0xJEzRuYY9ZrwVgD/leiWLhraz
rB7WWyFX6QHLPMcgM29nHrgPgnsckPULpnYFJv1P2MjKD6jQrkH3Hok8v/ZTf9Wv
+eX5Bz6myNa+eOagdVeSc8dskBSt6SB7Tf3TGzP+95tpVg/BFI5UOHPEDqAprf3v
89jRSJrlaJHsSn9b301MtCF7mm3cHtSkhXF63s/jfthORWyNiLvCJ5WY0wIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFAUWB6ho2vSEYkXzyLv56+dpgprZMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJlL2E3MDcx
MC1mZGQ3LTQxNDYtOTgyMS03MmNmZGFhOTU5YTIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmUvYTcwNzEw
LWZkZDctNDE0Ni05ODIxLTcyY2ZkYWE5NTlhMi8xL0JSWUhxR2phOUlSaVJmUEl1
X25yNTJtQ210ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQBW88cAwQAW9XpMBoGCCsGAQUFBwEIAQH/BAsw
CaAHMAUCAwCbizANBgkqhkiG9w0BAQsFAAOCAQEAMeaVPh8pnPZA1qyCho+XGlDA
7tqTIsHFYpez0NCCL4/XOZTL7a8KKWLLbDc7Krj/ruC6K3e7c9TlcFZn6SrVKWs+
ACSLgty5O4VOkedD6j4EFG+r3nYp04ewFStTbotmnv93q7TlHCF3uijRejKmGydu
LBTGSF+U1JtQaI+xg31ZB74EfrfUHWg0CBVWDZsqHASy6yBTx3ii72vW/O7AD73V
Q4lWL0HYcqY3by8ofdR+xOSNCzq2e7gRdcljE8vpsS94ba9k1aZj0w3Zjdb8GuHv
bVmCjNlyiJjLTY4zvi3Ahg/1bh2+W9NEixjen/Z/hI+wT0n+L+KoAAX0CXuvGQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:04:59 2024 by rpki-client on console-fra.rpki-client.org