Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
File: D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer (raw, json)
Hash identifier: kNyd5nfhuY+Watf7twxFjrrWUYLJEKq6ZrptAuwXXNU=
Subject key identifier: 0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019131019D5AA71F4062E00C8C1077C5ED1F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 08 Aug 2024 08:01:15 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 41638
AS: 214391
IP: 91.195.217.0/24
IP: 195.138.222.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:31:01:9d:5a:a7:1f:40:62:e0:0c:8c:10:77:c5:ed:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 8 08:01:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f91e5b58da326e654e994fef2195276759579be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c8:8a:e9:2e:2c:a8:30:70:b9:59:bb:2d:32:
2c:92:e3:47:1f:36:a6:e2:08:ef:e6:45:2d:99:c8:
b4:be:8f:d6:7d:de:1d:2e:03:f0:74:04:8d:8a:4d:
9a:61:3a:7e:e8:8d:22:88:6c:23:5a:df:0f:55:c2:
16:64:f3:7d:11:5e:75:40:fd:e6:d4:61:f8:86:fb:
47:40:a5:36:75:bb:01:31:0c:84:45:11:54:e3:84:
67:e8:43:d3:6f:37:a0:57:88:9a:b4:8d:15:11:8e:
f8:f5:fa:cd:c1:10:5d:a1:b1:42:ad:a5:4b:48:ec:
28:a3:fa:11:cf:ab:72:f1:6b:2c:d5:9d:b1:16:c4:
75:25:0c:5f:01:f5:e6:5c:96:30:c7:45:e5:73:1b:
29:4f:57:a9:23:65:a0:0e:45:d0:9c:a2:a3:b5:da:
91:25:44:22:9e:54:47:5d:4b:b7:3d:84:6b:0c:c8:
a3:69:4d:12:2d:0c:5b:83:b8:4c:22:63:e5:cc:80:
78:b9:d8:12:93:c5:c7:31:33:f2:ed:41:ed:48:04:
88:86:32:b2:10:9b:bb:d5:bb:48:5f:80:8c:e5:b4:
8d:95:7b:8c:41:fd:8a:2f:d0:65:7a:e3:c3:d5:66:
1d:3b:01:26:7f:06:89:e7:32:43:f9:5e:36:99:1f:
1e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.217.0/24
195.138.222.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41638
214391
Signature Algorithm: sha256WithRSAEncryption
6f:d6:fc:bd:23:70:bc:38:c4:14:a8:ee:e3:84:94:1e:e6:4d:
ee:fb:fe:fa:be:4d:c2:6e:c4:2b:58:eb:8d:e0:b6:07:28:99:
29:8a:ad:2d:20:35:07:8b:80:1e:b3:35:ac:64:a9:41:7c:d2:
cb:7c:dc:48:94:ab:d2:a7:df:30:ed:e3:12:42:82:af:e6:41:
3d:2a:35:a6:7f:c6:2d:5e:99:d0:0f:52:35:84:b4:62:52:d4:
54:11:da:15:6d:55:29:b9:fc:a0:5f:80:01:57:84:db:cb:c3:
18:39:26:c8:de:f2:e0:3d:26:42:a0:ca:d9:9c:ad:10:9e:18:
f4:94:ed:2e:fe:be:48:3d:44:a0:20:9d:5a:10:67:e7:50:27:
f2:fe:d3:df:e6:13:fe:4b:03:bb:5d:45:38:9c:68:3e:d0:3a:
b7:13:18:ed:bf:38:5c:00:56:ce:0f:7c:21:c0:a1:81:5d:25:
33:d8:7a:3c:76:a0:93:46:aa:4e:b3:25:bd:40:ad:f6:a9:1a:
03:25:df:c4:eb:26:9f:5d:2e:22:22:c2:f8:5b:15:e6:77:3e:
cb:07:85:05:54:0a:97:a2:e3:c2:4f:64:f3:83:38:64:18:66:
76:6d:7e:a0:c1:0a:86:58:d2:79:9a:5f:3b:4f:3f:1e:fa:fb:
ef:92:22:96
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgISAZExAZ1apx9AYuAMjBB3xe0fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwODA4MDgwMTE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjkxZTViNThkYTMyNmU2NTRlOTk0ZmVmMjE5NTI3Njc1OTU3OWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqciK6S4sqDBwuVm7LTIskuNHHzam
4gjv5kUtmci0vo/Wfd4dLgPwdASNik2aYTp+6I0iiGwjWt8PVcIWZPN9EV51QP3m
1GH4hvtHQKU2dbsBMQyERRFU44Rn6EPTbzegV4iatI0VEY749frNwRBdobFCraVL
SOwoo/oRz6ty8Wss1Z2xFsR1JQxfAfXmXJYwx0XlcxspT1epI2WgDkXQnKKjtdqR
JUQinlRHXUu3PYRrDMijaU0SLQxbg7hMImPlzIB4udgSk8XHMTPy7UHtSASIhjKy
EJu71btIX4CM5bSNlXuMQf2KL9BleuPD1WYdOwEmfwaJ5zJD+V42mR8e4QIDAQAB
o4ICqzCCAqcwHQYDVR0OBBYEFA+R5bWNoybmVOmU/vIZUnZ1lXm+MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QyLzI2NWVm
YS1mMDQ5LTQ2NDctOGNmMS04MjRjY2VmZDljODEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIvMjY1ZWZh
LWYwNDktNDY0Ny04Y2YxLTgyNGNjZWZkOWM4MS8xL0Q1SGx0WTJqSnVaVTZaVC04
aGxTZG5XVmViNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQAW8PZAwQAw4reMB8GCCsGAQUFBwEIAQH/BBAw
DqAMMAoCAwCipgIDA0V3MA0GCSqGSIb3DQEBCwUAA4IBAQBv1vy9I3C8OMQUqO7j
hJQe5k3u+/76vk3CbsQrWOuN4LYHKJkpiq0tIDUHi4AeszWsZKlBfNLLfNxIlKvS
p98w7eMSQoKv5kE9KjWmf8YtXpnQD1I1hLRiUtRUEdoVbVUpufygX4ABV4Tby8MY
OSbI3vLgPSZCoMrZnK0Qnhj0lO0u/r5IPUSgIJ1aEGfnUCfy/tPf5hP+SwO7XUU4
nGg+0Dq3ExjtvzhcAFbOD3whwKGBXSUz2Ho8dqCTRqpOsyW9QK32qRoDJd/E6yaf
XS4iIsL4WxXmdz7LB4UFVAqXouPCT2TzgzhkGGZ2bX6gwQqGWNJ5ml87Tz8e+vvv
kiKW
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:25:32 2024 by rpki-client on console-ams.rpki-client.org