Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IPtKDEbqkecGD7KUJqEyM4UmhJU.cer
File: IPtKDEbqkecGD7KUJqEyM4UmhJU.cer (raw, json)
Hash identifier: 64AqiqP3im+kD345INxqNdSmKXUJ2JEXqVFhStE2Fk0=
Subject key identifier: 20:FB:4A:0C:46:EA:91:E7:06:0F:B2:94:26:A1:32:33:85:26:84:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DF3D9906EBDCE11AD23A07A6FB229704F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 29 Feb 2024 07:52:18 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 198158
IP: 91.231.60.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f3:d9:90:6e:bd:ce:11:ad:23:a0:7a:6f:b2:29:70:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 29 07:52:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=20fb4a0c46ea91e7060fb29426a1323385268495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8a:8e:60:e0:75:84:1e:f7:88:66:56:8e:08:
8b:fc:4c:15:c4:a3:3c:3b:ab:7c:47:17:c1:ee:cc:
d1:49:da:1c:61:91:b7:a1:a7:ba:2b:a7:7f:14:30:
d3:0c:80:81:73:9c:c7:12:bc:fd:3c:08:02:dc:87:
6e:0b:c9:59:4f:ee:fb:6f:6c:c9:6a:48:56:f5:4f:
42:8b:05:6f:3a:ab:ca:9d:7d:36:7b:17:c8:75:16:
77:af:96:30:99:b0:80:a8:50:62:80:95:77:93:0f:
7b:2d:43:80:a0:df:d5:cc:4c:01:91:78:ac:ed:4f:
1f:cc:80:b4:ff:fb:18:dc:95:5b:8b:3c:38:92:62:
3a:b4:f1:be:5c:9f:a0:c0:7b:16:79:c3:6a:96:5c:
76:fa:cc:48:d6:53:64:fa:d1:82:3c:c1:0b:3a:61:
ac:ff:a7:05:5f:26:1d:7f:8e:1e:69:14:51:7e:ae:
91:c8:93:82:9e:7e:33:49:a2:77:1a:63:e9:45:e0:
95:4a:6e:74:40:00:9f:1d:7c:c3:85:56:a3:b8:35:
e6:81:60:b8:3d:c2:0e:22:9d:b8:db:64:b2:12:a3:
5c:37:b3:a4:11:31:c4:52:99:72:68:e0:61:83:fa:
fd:24:a1:df:ac:de:30:d9:97:f1:21:72:92:18:a7:
72:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:FB:4A:0C:46:EA:91:E7:06:0F:B2:94:26:A1:32:33:85:26:84:95
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.60.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198158
Signature Algorithm: sha256WithRSAEncryption
7d:d7:25:f6:89:f2:0d:d2:c9:97:a4:34:b7:87:6f:6b:3d:da:
cb:0c:f0:fc:2c:4f:70:06:51:97:0d:d3:ee:7a:f2:27:55:40:
fb:aa:ec:4e:34:bb:cf:69:af:f3:77:2e:bb:b7:dc:1b:d0:7d:
d8:1e:e2:b2:9f:52:aa:45:26:62:1d:84:1e:78:00:74:d9:8a:
c4:96:ed:fb:65:d9:3f:6f:01:79:15:67:7e:07:87:84:9d:75:
19:e2:3d:91:10:26:6a:95:4f:aa:35:86:02:86:7c:42:e6:db:
04:4f:dd:fb:4d:f8:20:6f:32:58:46:4a:1a:88:37:93:89:eb:
23:3f:2d:b8:e1:a9:bb:20:c9:3a:04:6d:ac:6f:72:0d:ca:17:
bf:9a:ea:41:13:d6:fa:af:99:15:01:50:fa:36:5e:6c:29:e8:
09:8a:67:a5:c9:b5:1e:79:78:18:da:26:e1:14:a3:ef:f7:f1:
39:09:c9:56:bb:b4:bd:d3:91:5a:51:98:9d:4a:c5:86:d8:22:
06:64:9a:89:33:ee:3e:0c:dc:94:57:aa:c1:b5:2d:45:dc:ee:
71:ed:9f:cc:78:0a:cf:82:7e:79:6c:22:d1:ef:d7:a2:d9:9a:
0b:bb:4c:43:f6:d7:06:22:3f:44:29:ca:6d:27:61:33:88:bc:
72:2b:95:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:54:52 2024 by rpki-client on console-ams.rpki-client.org