Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KtclXVpq-4XjdugbuaCew93dvNw.cer
File: KtclXVpq-4XjdugbuaCew93dvNw.cer (raw, json)
Hash identifier: tHLZmzyxrhlitfWDaEs+/SdgEe/gfkiJadv1iZnSJh0=
Subject key identifier: 2A:D7:25:5D:5A:6A:FB:85:E3:76:E8:1B:B9:A0:9E:C3:DD:DD:BC:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D029D96E6E958CFE6DDAB81FF1804
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/ebb979-bef0-420c-95e0-bceb376c2573/1/KtclXVpq-4XjdugbuaCew93dvNw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/ebb979-bef0-420c-95e0-bceb376c2573/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 59528
IP: 91.220.190.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:02:9d:96:e6:e9:58:cf:e6:dd:ab:81:ff:18:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ad7255d5a6afb85e376e81bb9a09ec3ddddbcdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7d:a7:7b:e5:c1:ee:73:d8:30:fb:64:c3:15:
8d:e5:16:be:da:42:ec:5d:a7:15:de:50:b7:69:e9:
e6:93:7a:3b:f0:8c:4e:68:e7:9d:e5:9b:50:80:74:
cb:1a:da:25:5c:bd:d6:b1:a2:90:e4:ec:b2:68:90:
db:51:5c:22:a9:d7:ba:c1:59:60:b1:7f:c9:97:40:
29:64:0a:fc:95:ec:25:6c:07:59:11:45:c1:f1:bc:
6e:fb:b4:97:1f:31:b2:1f:2a:bd:38:4e:ec:10:14:
43:b1:d1:66:6f:54:eb:29:ee:53:a2:d4:22:ec:48:
0e:fb:47:86:a5:fa:ed:69:31:2b:d1:dd:58:8d:df:
c0:e6:59:d3:a4:e9:a9:f3:0c:c8:44:88:45:f6:6a:
e9:03:9b:15:db:e2:12:ab:39:d9:bc:a3:47:e9:f0:
60:dc:8d:7b:cd:b8:5c:ca:01:1b:ec:cc:08:2b:cd:
89:fe:0a:06:61:8a:40:94:ec:0b:ed:10:12:e3:3d:
08:fc:7b:6d:d1:ef:8a:40:64:51:e1:fb:b8:76:24:
b2:27:34:89:67:b5:73:3f:7f:d8:0d:3f:9c:b9:a6:
74:cf:24:52:e0:a3:72:36:4a:6e:01:f0:fe:54:ec:
1d:24:d1:5f:ca:08:6b:b2:a3:61:43:56:f1:c7:dc:
f0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D7:25:5D:5A:6A:FB:85:E3:76:E8:1B:B9:A0:9E:C3:DD:DD:BC:DC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ebb979-bef0-420c-95e0-bceb376c2573/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ebb979-bef0-420c-95e0-bceb376c2573/1/KtclXVpq-4XjdugbuaCew93dvNw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.190.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59528
Signature Algorithm: sha256WithRSAEncryption
b2:0e:37:b0:0a:48:58:a6:cb:e3:0d:eb:91:75:23:c4:f0:25:
3c:4d:39:ce:76:64:81:83:41:a7:b2:a6:40:a3:50:b4:33:38:
02:69:83:12:b2:22:d7:bf:43:61:23:a3:2c:42:82:d4:65:71:
70:02:17:6f:05:91:08:b6:eb:c9:9d:96:8f:0d:d9:a1:a0:a0:
39:6b:06:61:1a:67:03:18:9a:ee:da:da:17:42:75:02:26:4f:
fd:34:a0:4e:22:5f:97:23:85:c1:98:d4:f4:23:0d:36:17:6e:
93:2a:4b:63:d4:62:76:59:35:37:cd:7a:39:fe:14:ee:c2:51:
df:02:8f:20:5b:f2:0d:85:2b:ce:d0:54:dd:0a:2c:60:44:e6:
0c:a2:25:67:ac:42:ab:3c:89:2a:96:ed:db:c1:ad:f0:d4:6d:
cc:e1:9e:a9:8a:07:f2:a5:d2:10:48:4a:f4:12:f5:bb:ac:5f:
aa:5e:53:ec:81:a7:34:dd:c6:8b:4d:01:c4:10:a3:04:e6:43:
b3:43:6b:19:4f:3a:28:fd:1a:a0:49:c6:49:02:74:ff:82:4b:
c0:19:96:f2:d7:5b:40:7f:21:f0:3f:91:e7:4c:a5:2a:e2:50:
ad:f3:31:d9:68:cb:fd:d3:43:c8:5c:5d:29:4d:8b:a9:28:ee:
44:58:5a:c2
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYzCbQKdlubpWM/m3auB/xgEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDAyOTMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYWQ3MjU1ZDVhNmFmYjg1ZTM3NmU4MWJiOWEwOWVjM2RkZGRiY2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvX2ne+XB7nPYMPtkwxWN5Ra+2kLs
XacV3lC3aenmk3o78IxOaOed5ZtQgHTLGtolXL3WsaKQ5OyyaJDbUVwiqde6wVlg
sX/Jl0ApZAr8lewlbAdZEUXB8bxu+7SXHzGyHyq9OE7sEBRDsdFmb1TrKe5TotQi
7EgO+0eGpfrtaTEr0d1Yjd/A5lnTpOmp8wzIRIhF9mrpA5sV2+ISqznZvKNH6fBg
3I17zbhcygEb7MwIK82J/goGYYpAlOwL7RAS4z0I/Htt0e+KQGRR4fu4diSyJzSJ
Z7VzP3/YDT+cuaZ0zyRS4KNyNkpuAfD+VOwdJNFfyghrsqNhQ1bxx9zwxQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFCrXJV1aavuF43boG7mgnsPd3bzcMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzExL2ViYjk3
OS1iZWYwLTQyMGMtOTVlMC1iY2ViMzc2YzI1NzMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEvZWJiOTc5
LWJlZjAtNDIwYy05NWUwLWJjZWIzNzZjMjU3My8xL0t0Y2xYVnBxLTRYamR1Z2J1
YUNldzkzZHZOdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW9y+MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwDoiDANBgkqhkiG9w0BAQsFAAOCAQEAsg43sApIWKbL4w3rkXUjxPAlPE05znZk
gYNBp7KmQKNQtDM4AmmDErIi179DYSOjLEKC1GVxcAIXbwWRCLbryZ2Wjw3ZoaCg
OWsGYRpnAxia7traF0J1AiZP/TSgTiJflyOFwZjU9CMNNhdukypLY9Ridlk1N816
Of4U7sJR3wKPIFvyDYUrztBU3QosYETmDKIlZ6xCqzyJKpbt28Gt8NRtzOGeqYoH
8qXSEEhK9BL1u6xfql5T7IGnNN3Gi00BxBCjBOZDs0NrGU86KP0aoEnGSQJ0/4JL
wBmW8tdbQH8h8D+R50ylKuJQrfMx2WjL/dNDyFxdKU2LqSjuRFhawg==
-----END CERTIFICATE-----
Generated at Fri May 3 09:03:20 2024 by rpki-client on console-ams.rpki-client.org