Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/E7myHACB0jxKIfYKCEp1y1-VvqI.cer
File: E7myHACB0jxKIfYKCEp1y1-VvqI.cer (raw, json)
Hash identifier: W3Un5G0wY7gHrLtM1uGvZJgOGOm34XjWHlkN8FduGWQ=
Subject key identifier: 13:B9:B2:1C:00:81:D2:3C:4A:21:F6:0A:08:4A:75:CB:5F:95:BE:A2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E839BA3209EBA3BDE0F547E2E172D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:03 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 9164
IP: 91.222.220.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:83:9b:a3:20:9e:ba:3b:de:0f:54:7e:2e:17:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13b9b21c0081d23c4a21f60a084a75cb5f95bea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:40:89:11:24:c2:f5:44:bb:45:40:51:67:d2:
58:6a:3f:6a:d5:e7:57:69:b4:e2:66:53:3a:3e:88:
02:63:8d:a1:5f:8d:e1:a1:56:96:a8:f4:c0:d8:ef:
9f:d0:58:72:64:2f:2b:b7:f6:36:60:8d:cd:f8:f8:
29:f6:03:dc:b0:bf:fa:c6:22:43:cc:e0:60:77:0a:
e5:78:79:0e:07:1f:3f:0d:23:23:a5:e4:b5:fa:8a:
b5:ed:36:8a:43:3c:99:4d:14:e0:84:68:3b:7b:f9:
b9:81:bd:9a:e3:1a:a3:e2:f9:b5:c6:c1:37:f8:1a:
4d:45:87:ed:a8:b2:c3:7e:21:e9:8a:70:8d:30:3d:
91:1c:7d:ad:bd:85:1f:31:ff:cc:99:99:c9:55:eb:
bf:1f:3b:66:38:e9:54:ab:34:1b:18:00:93:f2:d5:
5e:fc:e6:c5:89:f4:c9:60:91:d7:13:b4:c2:c8:fe:
a2:d9:9d:48:3c:53:9d:10:17:f1:da:62:11:5c:d1:
ae:22:b2:20:06:67:5a:ec:b2:99:ae:88:10:16:29:
ac:bd:4c:04:31:63:9b:22:a6:07:dc:f4:9c:48:80:
96:06:af:1e:4d:12:e2:eb:2c:86:fd:24:c2:71:ef:
2c:93:80:72:67:aa:c9:11:e6:99:03:48:0d:c6:94:
79:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B9:B2:1C:00:81:D2:3C:4A:21:F6:0A:08:4A:75:CB:5F:95:BE:A2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.222.220.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9164
Signature Algorithm: sha256WithRSAEncryption
0b:c1:df:73:f6:ee:80:80:20:89:91:65:ba:ca:da:d2:7f:d9:
2c:fb:ee:79:89:24:45:57:ea:cb:fd:8a:62:36:3a:a1:01:58:
5a:af:81:4f:7d:6e:38:2d:de:94:a3:ba:d3:c6:81:f6:f3:97:
5e:72:55:1d:dc:7d:3c:36:a3:79:ee:a1:55:c8:f4:5a:09:fa:
c3:8c:3c:56:9c:d4:39:ad:01:b8:42:cd:da:96:7d:4e:1d:06:
b9:d4:b5:d6:6c:4c:67:52:da:af:94:a0:8e:aa:d7:a6:d6:e5:
a2:7c:a1:dc:20:32:05:b2:d4:40:d2:a0:fe:3e:58:76:a6:48:
5b:1b:34:1f:40:2e:7b:2c:6d:ed:6f:da:6f:96:4f:c8:ab:ba:
dd:0f:b1:49:c6:b0:5c:5a:5c:ee:5d:46:0b:7c:b1:3f:d5:46:
2a:de:5d:ac:36:e6:f3:cf:8b:a1:9a:38:45:4b:7d:95:b2:a8:
c1:cf:cc:01:55:83:2a:cd:68:b8:b2:89:0c:b5:71:88:b6:55:
79:b8:2f:0e:56:36:34:fe:4e:6f:7e:bb:29:de:fa:8e:55:c6:
ed:de:fa:68:83:a5:93:0f:12:0d:a7:cf:0d:d1:cc:52:c7:69:
43:cd:b5:2b:3e:d6:24:8e:ab:10:a6:34:94:ff:f6:ad:38:2f:
37:e4:67:a2
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgISAYzFboOboyCeujveD1R+LhctMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTQzMDAzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2I5YjIxYzAwODFkMjNjNGEyMWY2MGEwODRhNzVjYjVmOTViZWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkCJESTC9US7RUBRZ9JYaj9q1edX
abTiZlM6PogCY42hX43hoVaWqPTA2O+f0FhyZC8rt/Y2YI3N+Pgp9gPcsL/6xiJD
zOBgdwrleHkOBx8/DSMjpeS1+oq17TaKQzyZTRTghGg7e/m5gb2a4xqj4vm1xsE3
+BpNRYftqLLDfiHpinCNMD2RHH2tvYUfMf/MmZnJVeu/HztmOOlUqzQbGACT8tVe
/ObFifTJYJHXE7TCyP6i2Z1IPFOdEBfx2mIRXNGuIrIgBmda7LKZrogQFimsvUwE
MWObIqYH3PScSICWBq8eTRLi6yyG/STCce8sk4ByZ6rJEeaZA0gNxpR5AwIDAQAB
o4ICnzCCApswHQYDVR0OBBYEFBO5shwAgdI8SiH2CghKdctflb6iMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YwLzk5YTAx
Zi1iYjUyLTQ3MTItOTRkMC1iZjkyNGE4MjVmNTgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjAvOTlhMDFm
LWJiNTItNDcxMi05NGQwLWJmOTI0YTgyNWY1OC8xL0U3bXlIQUNCMGp4S0lmWUtD
RXAxeTEtVnZxSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCW97cMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC
AiPMMA0GCSqGSIb3DQEBCwUAA4IBAQALwd9z9u6AgCCJkWW6ytrSf9ks++55iSRF
V+rL/YpiNjqhAVhar4FPfW44Ld6Uo7rTxoH285declUd3H08NqN57qFVyPRaCfrD
jDxWnNQ5rQG4Qs3aln1OHQa51LXWbExnUtqvlKCOqtem1uWifKHcIDIFstRA0qD+
Plh2pkhbGzQfQC57LG3tb9pvlk/Iq7rdD7FJxrBcWlzuXUYLfLE/1UYq3l2sNubz
z4uhmjhFS32VsqjBz8wBVYMqzWi4sokMtXGItlV5uC8OVjY0/k5vfrsp3vqOVcbt
3vpog6WTDxINp88N0cxSx2lDzbUrPtYkjqsQpjSU//atOC835Gei
-----END CERTIFICATE-----
Generated at Fri May 3 11:24:33 2024 by rpki-client on console-ams.rpki-client.org