Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
File: D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer (raw, json)
Hash identifier: Jx25rg+3GU96JOU21u8BaWR0I+o+P4LhkLo5g+3ZwwM=
Subject key identifier: 0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018EA2D80CDCB990805AD875DDCF03237388
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 03 Apr 2024 07:24:11 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 41638
IP: 91.195.217.0/24
IP: 195.138.222.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a2:d8:0c:dc:b9:90:80:5a:d8:75:dd:cf:03:23:73:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 3 07:24:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f91e5b58da326e654e994fef2195276759579be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c8:8a:e9:2e:2c:a8:30:70:b9:59:bb:2d:32:
2c:92:e3:47:1f:36:a6:e2:08:ef:e6:45:2d:99:c8:
b4:be:8f:d6:7d:de:1d:2e:03:f0:74:04:8d:8a:4d:
9a:61:3a:7e:e8:8d:22:88:6c:23:5a:df:0f:55:c2:
16:64:f3:7d:11:5e:75:40:fd:e6:d4:61:f8:86:fb:
47:40:a5:36:75:bb:01:31:0c:84:45:11:54:e3:84:
67:e8:43:d3:6f:37:a0:57:88:9a:b4:8d:15:11:8e:
f8:f5:fa:cd:c1:10:5d:a1:b1:42:ad:a5:4b:48:ec:
28:a3:fa:11:cf:ab:72:f1:6b:2c:d5:9d:b1:16:c4:
75:25:0c:5f:01:f5:e6:5c:96:30:c7:45:e5:73:1b:
29:4f:57:a9:23:65:a0:0e:45:d0:9c:a2:a3:b5:da:
91:25:44:22:9e:54:47:5d:4b:b7:3d:84:6b:0c:c8:
a3:69:4d:12:2d:0c:5b:83:b8:4c:22:63:e5:cc:80:
78:b9:d8:12:93:c5:c7:31:33:f2:ed:41:ed:48:04:
88:86:32:b2:10:9b:bb:d5:bb:48:5f:80:8c:e5:b4:
8d:95:7b:8c:41:fd:8a:2f:d0:65:7a:e3:c3:d5:66:
1d:3b:01:26:7f:06:89:e7:32:43:f9:5e:36:99:1f:
1e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.217.0/24
195.138.222.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41638
Signature Algorithm: sha256WithRSAEncryption
08:c6:8a:91:a1:4f:8c:2e:c3:91:fb:b6:cd:fd:df:7f:07:72:
68:eb:27:97:10:22:f4:c4:67:4f:cd:72:19:67:46:18:53:c7:
d0:03:a8:56:0b:be:52:40:8e:cc:df:97:f9:e4:12:d0:ea:28:
6d:d2:33:e6:50:8f:e0:ab:10:ea:60:18:8a:ed:3b:59:0e:5e:
66:f3:93:4a:54:c8:bf:99:23:87:b4:a1:05:2f:dd:d4:14:57:
4b:eb:89:9f:17:a8:70:4d:f7:f0:b9:0c:6d:ed:f5:76:e4:04:
70:79:79:48:76:7e:41:66:2b:2f:99:e0:9b:e3:b7:98:29:76:
c0:95:2f:ae:ff:82:90:f1:aa:31:91:fd:93:ca:68:a9:67:e2:
ed:d6:1e:bf:ff:f3:4f:ed:b2:df:95:12:36:13:08:5e:76:e6:
99:73:a3:52:01:72:8e:cc:f5:52:8b:86:0f:90:9f:d1:05:26:
97:16:59:cd:bb:41:17:7b:29:01:00:9e:05:20:17:72:27:97:
fb:48:ca:2f:b5:dd:09:a1:e5:19:24:04:17:8c:59:9b:71:06:
89:de:7c:30:d3:1f:23:8f:6c:bd:8a:cc:f7:fc:61:d6:2b:cc:
e6:5d:ab:fd:f8:fb:53:81:00:bd:a9:b1:15:80:23:16:c9:9a:
43:91:05:35
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 26 11:53:16 2024 by rpki-client on console-ams.rpki-client.org