Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
File: KtWZlPKveVmc-z_y4-mOUY-RT7o.cer (raw, json)
Hash identifier: 53XF5QWiOditQBZPiRPXkRxL5G0N0R+nSI7qXavnzmw=
Subject key identifier: 2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5008715B48B66F77A53E0AD3BC72C18
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:29:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 58167
IP: 91.239.108.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:87:15:b4:8b:66:f7:7a:53:e0:ad:3b:c7:2c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:73:90:fc:5c:ab:cb:ab:e2:2a:8c:55:23:47:
99:2b:e2:0e:e9:aa:61:de:21:98:f4:e4:6d:dd:02:
1e:9a:e1:1f:5d:4d:53:35:79:bf:21:e3:cc:6a:30:
3d:df:59:8b:ae:3e:ed:d0:6d:c3:73:19:75:80:f2:
85:bc:e8:54:27:b7:cc:16:3d:ea:2e:54:7b:5f:90:
7c:db:51:7b:1f:26:8c:aa:d4:73:64:08:ee:64:28:
8a:39:55:d2:0a:f0:ee:79:5b:80:5e:8b:7b:3a:5b:
79:a6:ba:d7:a7:a6:7c:99:c2:cc:7d:79:40:fc:08:
c6:9d:ca:e3:0c:27:1e:5b:2a:76:d8:b2:19:25:cc:
f1:73:d9:9e:36:98:1e:65:43:4f:e6:c7:1a:15:81:
ca:b7:fc:73:f2:a7:ec:70:e3:ef:de:ae:17:20:2f:
e7:e0:08:67:46:20:12:15:9a:f7:c5:7b:45:2d:63:
b9:85:e1:54:fa:7b:e0:fa:d0:9a:c1:50:24:2c:1d:
19:ab:f0:68:de:d8:4a:3b:7e:05:b6:c5:7f:44:42:
13:a7:16:71:54:70:5a:94:4e:9f:07:ed:9b:e9:fe:
a5:83:41:0e:fd:87:5b:a1:f3:46:fd:27:ba:08:cb:
a7:79:6d:af:5d:6c:fb:a0:74:d2:4e:29:b5:5b:6d:
17:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.108.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58167
Signature Algorithm: sha256WithRSAEncryption
a7:81:ba:64:1b:a6:1e:d9:5b:6e:b6:20:b0:7d:f1:b8:d4:ac:
0c:8c:6e:92:84:83:32:19:bb:16:44:10:a0:ed:4a:79:6a:ee:
fe:7c:3f:25:e4:15:5b:0d:d3:fd:dd:27:e3:23:0c:45:c4:b4:
af:20:d5:6c:db:dd:79:fe:3f:88:9a:b3:5b:bc:7d:23:2a:a6:
74:82:e4:c6:0d:cc:39:ea:ce:ab:9c:20:44:f1:46:57:19:69:
04:29:c5:38:ed:77:df:c8:4d:3c:fa:21:7b:08:5d:4b:ec:c4:
a5:77:69:b3:70:df:45:e6:09:48:d1:e6:94:d0:a2:02:17:29:
be:e4:a6:e3:d1:4e:52:3c:65:30:6e:4b:03:6c:23:9c:70:e9:
4d:7f:c8:9b:e0:7f:90:93:bb:29:ca:d1:a4:8a:25:80:f4:6b:
91:35:89:5b:b2:ee:a7:f1:7a:a0:41:5a:22:d1:bd:87:ec:d7:
c7:9e:1c:aa:57:d9:bc:18:5b:d2:fa:b4:c9:fd:3c:0f:03:b5:
7a:5b:56:bb:46:90:25:b1:b3:46:03:37:5d:e4:f2:46:6f:b5:
8f:78:06:2f:fd:25:40:1b:67:2d:dd:e4:85:f1:2f:b3:49:91:
d7:58:ad:6e:4a:c7:04:3b:3c:b3:32:59:e8:9e:f4:40:80:8e:
9f:53:38:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:53:08 2024 by rpki-client on console-fra.rpki-client.org