Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GJPt3vXPw41hPqqBd03jADSxnSI.cer
File: GJPt3vXPw41hPqqBd03jADSxnSI.cer (raw, json)
Hash identifier: AND4ih+Od/jDx+qNEJamNNHuowrWWy6Uf/5xuzP4g6E=
Subject key identifier: 18:93:ED:DE:F5:CF:C3:8D:61:3E:AA:81:77:4D:E3:00:34:B1:9D:22
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86F4EEB49A393193AA3C5E30DE7F5C3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:29:47 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 44502
IP: 91.201.244.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 24 Apr 2024 17:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:4e:eb:49:a3:93:19:3a:a3:c5:e3:0d:e7:f5:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1893eddef5cfc38d613eaa81774de30034b19d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:31:78:98:5d:4d:ec:c9:4f:fc:85:fc:c8:d5:
74:ad:9a:e1:fa:7a:96:b1:63:3b:e0:b1:00:08:b1:
0e:f7:6e:47:7d:ed:00:3a:0a:64:4c:ef:0b:da:46:
85:d0:a1:8a:cd:78:88:be:d2:9f:1b:01:5e:05:05:
37:a0:ea:d6:0e:df:29:de:b9:b4:bd:40:6c:64:91:
6d:b2:26:dd:ab:35:9e:f8:c4:db:3c:53:e9:45:8a:
be:6f:45:3e:c0:a9:32:26:36:96:f7:48:85:82:2d:
d5:42:b0:cb:ff:8b:27:f5:d1:72:de:f0:b4:dc:98:
09:62:d1:cc:10:f2:bb:ff:04:04:23:7b:40:0c:ec:
d9:1a:f0:53:bb:c1:ad:8a:8d:0c:2b:60:1a:fa:c2:
56:c6:b4:c5:4c:c7:01:fd:eb:36:32:ed:90:78:6a:
86:f1:be:eb:65:98:d5:09:c1:e9:81:f0:98:03:1b:
32:26:e3:17:49:b8:8b:38:73:63:f3:5c:30:3b:00:
0f:3f:4c:b5:9a:5a:11:ca:40:a4:df:e0:f8:b3:dd:
70:09:d3:54:17:7b:c5:dd:09:37:ce:4b:92:a7:d2:
7f:c8:87:88:4e:34:9e:af:f6:ca:e8:1c:08:d4:fb:
dd:7c:bd:bf:11:f0:ff:2f:51:cc:24:b1:62:c9:aa:
31:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:93:ED:DE:F5:CF:C3:8D:61:3E:AA:81:77:4D:E3:00:34:B1:9D:22
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.244.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44502
Signature Algorithm: sha256WithRSAEncryption
29:99:fb:36:2d:50:01:2b:fe:6b:5b:17:c0:e3:3c:8d:25:db:
a4:7b:f8:2f:99:ad:16:55:30:09:93:cd:c0:1e:a0:24:84:9e:
9f:e6:48:33:0d:53:9f:8b:d8:3f:1a:9c:c7:09:38:bd:d7:e9:
8f:f8:0f:7e:6e:21:29:9c:26:80:72:f3:d2:ec:67:d1:cc:3e:
d7:9c:eb:91:50:d0:e3:0a:69:c7:a9:b7:7d:b3:f4:83:90:e3:
c2:0f:52:d0:98:2e:e4:55:1e:94:6d:bd:4b:c8:24:9f:0f:e1:
f6:09:a3:20:07:f9:d2:6a:75:3a:a2:d1:39:e1:28:ce:03:69:
41:e6:b0:25:c5:c9:0c:c3:17:f4:cf:1b:c2:38:03:44:aa:2e:
15:64:c5:a7:9e:89:b8:3f:1f:cb:fd:7c:d0:b2:60:ee:ab:01:
79:80:72:ba:9f:56:a4:35:7e:8d:55:87:1b:c9:ee:8e:e4:71:
31:95:ff:b4:bf:a5:25:f8:d6:40:42:14:d7:6d:26:e5:f5:c1:
6c:dd:25:48:a4:0e:04:3c:f8:b9:2d:32:73:84:9b:3a:3f:81:
fb:2a:ae:2e:32:ad:b3:03:21:c1:ce:32:3e:24:5e:fd:ad:dc:
44:14:62:73:2a:1d:cf:6d:1d:c3:ab:a4:c8:67:bf:2f:41:07:
9f:3a:31:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 00:21:31 2024 by rpki-client on console-ams.rpki-client.org