Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer
File: Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer (raw, json)
Hash identifier: NHiRco38u4klvifYkCkYk5UlliajtpKF3t3s4DXDjF0=
Subject key identifier: 3E:BF:AF:8A:1A:A3:BC:1F:F3:E3:E4:30:C6:7F:B7:A6:41:0A:3D:F7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018EA8C4E48323CFF04C3313CA456E4E2E34
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 04 Apr 2024 11:00:59 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 51626
IP: 91.220.13.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a8:c4:e4:83:23:cf:f0:4c:33:13:ca:45:6e:4e:2e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 4 11:00:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ebfaf8a1aa3bc1ff3e3e430c67fb7a6410a3df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cf:d5:00:02:f8:d7:9e:e4:9e:d8:fc:12:7c:
a6:2b:9b:37:b2:4a:7b:03:3e:b9:10:f4:3e:d8:5c:
c5:18:e0:3f:af:4e:0d:65:82:20:e1:df:e7:fb:bd:
80:45:53:e9:b6:20:4f:92:ca:8f:e5:ea:26:e0:4f:
2a:1e:af:c1:6f:97:bc:c8:24:52:9c:96:8d:70:b2:
32:51:3e:78:2e:ea:39:5c:46:f8:1d:8e:c3:7a:aa:
56:3e:69:70:3c:8a:58:dc:69:af:9c:1e:ab:5a:f2:
d0:e6:3e:b1:22:38:a0:35:a7:88:4a:a4:62:ab:85:
8f:09:1e:30:d6:c5:e1:30:d8:04:6b:ea:20:38:f4:
4e:53:85:36:3a:f2:8f:65:35:7d:b3:68:20:79:c5:
18:f6:f8:0e:09:b9:d6:9b:05:a6:1e:ec:d0:c4:5d:
0d:47:4a:e3:3f:bf:71:99:7e:04:3a:93:0f:f0:32:
5f:bc:73:a1:71:7c:0f:b9:2c:d1:6c:20:d0:c6:34:
b4:d6:b4:88:77:97:8a:1b:1d:9a:56:8b:41:85:e1:
36:b6:d9:fe:5f:9e:48:c5:3d:ab:5d:fd:4a:b6:8c:
72:d9:3c:62:50:ce:54:22:9e:dc:83:dc:ba:a6:45:
c4:5b:9f:b9:0f:50:42:55:ee:e6:93:bf:60:f5:44:
26:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:BF:AF:8A:1A:A3:BC:1F:F3:E3:E4:30:C6:7F:B7:A6:41:0A:3D:F7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.13.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51626
Signature Algorithm: sha256WithRSAEncryption
6b:99:5d:cc:08:15:3c:91:ef:08:83:e0:ff:a6:e0:5b:57:66:
a1:2a:6b:fd:cd:25:8b:9f:8c:f4:4d:1d:d9:73:df:25:5f:89:
9d:f2:60:a1:4f:a5:f8:4e:13:9e:13:fe:b1:3e:e2:08:45:7d:
25:50:d0:ce:25:b7:3d:aa:46:b9:54:64:54:2e:63:b4:57:95:
8e:3e:92:55:3b:ef:da:58:64:4a:89:e4:a4:88:e5:c1:c1:09:
44:87:f2:f8:1c:d2:9e:de:f2:f5:83:ef:90:c6:eb:bf:e3:7f:
85:38:3c:8f:15:e0:79:3a:0d:f9:cc:f8:91:bc:d7:ea:93:0d:
04:ca:6f:5c:7b:70:36:c4:7d:c8:5e:ce:bb:84:a2:76:7f:90:
d2:5f:da:8e:d1:4f:66:da:ac:bd:21:59:eb:a8:0a:16:ef:23:
1f:70:e7:2a:28:70:dc:c7:c2:2b:09:84:32:37:e6:36:a8:a8:
0a:72:42:ac:3b:bd:54:35:b1:88:16:fd:4a:4e:3f:50:37:d3:
ee:65:7b:a8:cb:69:7a:12:ad:2b:ca:ef:bb:31:61:a8:82:e8:
35:4f:00:d9:1b:93:77:ae:af:59:2c:b0:78:6c:d5:0d:76:66:
85:7c:f9:4c:00:fd:90:b4:11:80:02:b1:13:a7:42:85:20:59:
29:10:ac:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:33:02 2024 by rpki-client on console-fra.rpki-client.org