Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GTWdi0RPJzSynpueCQG-CLAPQOM.cer
File: GTWdi0RPJzSynpueCQG-CLAPQOM.cer (raw, json)
Hash identifier: HlCjtZ/lw1QM1LwiiYByUACpylDTQz1C/mITjhgtLQk=
Subject key identifier: 19:35:9D:8B:44:4F:27:34:B2:9E:9B:9E:09:01:BE:08:B0:0F:40:E3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC49321D9C9B4E274E3BF2F0AC98FA9A6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 199007
IP: 91.241.43.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:21:d9:c9:b4:e2:74:e3:bf:2f:0a:c9:8f:a9:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19359d8b444f2734b29e9b9e0901be08b00f40e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:49:c2:1a:d9:82:24:b0:44:27:2a:e0:cc:ce:
e3:b2:2a:cd:0d:20:7c:27:02:a7:a2:19:56:02:42:
25:b3:d9:5a:04:14:5b:e0:62:ee:2e:1e:23:33:81:
29:bc:11:fa:4f:3f:56:c5:1e:c5:04:49:87:9b:b4:
e2:17:bd:d9:e6:38:f7:81:1a:3f:81:f2:d6:91:81:
a9:a1:c6:be:96:f4:91:01:0e:45:d1:f4:65:58:23:
e1:35:81:8a:1a:7a:13:e6:d5:5e:07:f3:fa:a8:40:
61:c6:a1:9a:db:9a:44:98:a8:52:f7:fc:b0:ae:95:
92:03:bb:78:b6:0c:5a:ec:d3:7e:cb:e6:e1:db:76:
68:94:3b:20:4a:67:f0:69:80:58:3b:a1:03:32:39:
7d:7b:b7:ee:54:4b:2f:1e:5e:f5:6a:0c:7a:37:fc:
4e:6e:8d:db:80:3d:5e:f9:40:5e:23:dd:76:b2:68:
18:e3:6b:96:89:4d:57:e7:39:3d:8d:3b:0e:82:4b:
ad:0f:dc:6d:15:c0:ef:c0:78:61:d6:55:07:d8:d3:
0e:68:fd:a4:6c:95:45:ea:28:bf:3b:9a:40:78:fa:
75:ee:8e:d4:f0:a6:b1:8e:7f:1a:e9:dd:31:82:df:
12:94:cb:a7:a9:88:48:0b:42:0b:2c:88:12:19:da:
b5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:35:9D:8B:44:4F:27:34:B2:9E:9B:9E:09:01:BE:08:B0:0F:40:E3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.43.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199007
Signature Algorithm: sha256WithRSAEncryption
4a:d6:d3:4a:36:f3:9f:7a:a1:c4:44:e1:14:ab:f4:5a:38:b3:
a7:0b:92:30:78:2b:5d:d8:f8:b3:f0:2a:db:14:53:83:94:fb:
f6:e5:0c:cd:42:b5:c5:b0:43:8f:2b:4f:b2:b0:38:36:8a:59:
15:88:6e:19:f8:4f:ee:28:8a:e8:65:a8:5d:f4:39:66:c8:5d:
19:07:dc:f1:db:2e:9e:69:84:08:44:9e:43:96:de:33:7c:c0:
8d:8b:70:1a:18:76:cf:6c:2e:8c:0c:c5:2e:93:51:fc:37:ce:
94:ea:f3:13:53:53:a3:a6:95:3f:87:91:a9:e8:ba:d4:6d:33:
ce:14:b9:69:6e:40:70:05:61:59:c3:db:de:b7:4a:fc:9a:0a:
45:3a:94:48:2d:10:36:c9:56:c6:51:15:01:f8:fe:9e:2f:24:
56:20:be:2c:95:5b:cb:6b:53:d6:03:f4:bf:2e:76:c6:52:5b:
bf:d0:42:23:04:a3:a0:3f:2c:3e:f2:04:1d:00:b9:48:26:d6:
9a:5b:89:71:c8:3d:e1:2d:d9:4a:01:e3:3f:01:09:5b:76:19:
9a:6a:5f:f4:ad:80:01:62:27:e3:e3:7e:98:ac:53:7a:8e:0b:
15:2d:74:52:57:c9:a1:9d:70:34:a1:75:df:45:b0:7c:f2:03:
51:31:d0:7c
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYzEkyHZybTidOO/LwrJj6mmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTAzMDI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTM1OWQ4YjQ0NGYyNzM0YjI5ZTliOWUwOTAxYmUwOGIwMGY0MGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5EnCGtmCJLBEJyrgzM7jsirNDSB8
JwKnohlWAkIls9laBBRb4GLuLh4jM4EpvBH6Tz9WxR7FBEmHm7TiF73Z5jj3gRo/
gfLWkYGpoca+lvSRAQ5F0fRlWCPhNYGKGnoT5tVeB/P6qEBhxqGa25pEmKhS9/yw
rpWSA7t4tgxa7NN+y+bh23ZolDsgSmfwaYBYO6EDMjl9e7fuVEsvHl71agx6N/xO
bo3bgD1e+UBeI912smgY42uWiU1X5zk9jTsOgkutD9xtFcDvwHhh1lUH2NMOaP2k
bJVF6ii/O5pAePp17o7U8Kaxjn8a6d0xgt8SlMunqYhIC0ILLIgSGdq1MQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFBk1nYtETyc0sp6bngkBvgiwD0DjMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY5LzNhOTQ0
Yi1iNDI4LTQ1NDctYjdmYi0zOGY3YzZhYzliNjYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkvM2E5NDRi
LWI0MjgtNDU0Ny1iN2ZiLTM4ZjdjNmFjOWI2Ni8xL0dUV2RpMFJQSnpTeW5wdWVD
UUctQ0xBUFFPTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW/ErMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwMJXzANBgkqhkiG9w0BAQsFAAOCAQEAStbTSjbzn3qhxEThFKv0WjizpwuSMHgr
Xdj4s/Aq2xRTg5T79uUMzUK1xbBDjytPsrA4NopZFYhuGfhP7iiK6GWoXfQ5Zshd
GQfc8dsunmmECESeQ5beM3zAjYtwGhh2z2wujAzFLpNR/DfOlOrzE1NTo6aVP4eR
qei61G0zzhS5aW5AcAVhWcPb3rdK/JoKRTqUSC0QNslWxlEVAfj+ni8kViC+LJVb
y2tT1gP0vy52xlJbv9BCIwSjoD8sPvIEHQC5SCbWmluJccg94S3ZSgHjPwEJW3YZ
mmpf9K2AAWIn4+N+mKxTeo4LFS10UlfJoZ1wNKF130WwfPIDUTHQfA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:06:14 2024 by rpki-client on console-fra.rpki-client.org