Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RRZvo3x2TNxioAvKKyssh5_2mdk.cer
File: RRZvo3x2TNxioAvKKyssh5_2mdk.cer (raw, json)
Hash identifier: 3vEkkAD9NOZAzjEIv4zFrg+ACdAc1RfTxOgBPJtTH9I=
Subject key identifier: 45:16:6F:A3:7C:76:4C:DC:62:A0:0B:CA:2B:2B:2C:87:9F:F6:99:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC49350DAD47C3DED72E69A0531725549
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 58195
IP: 91.239.173.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:50:da:d4:7c:3d:ed:72:e6:9a:05:31:72:55:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45166fa37c764cdc62a00bca2b2b2c879ff699d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0c:c0:a4:03:c2:12:63:f8:18:c5:57:c2:a4:
18:b1:eb:ae:d7:ba:ea:e9:49:71:5d:35:03:32:f6:
74:eb:ee:1c:09:9c:7f:0d:e5:eb:65:78:ec:9a:4c:
66:2c:7b:b9:5e:db:0f:e7:a2:b1:05:91:3c:a7:94:
f5:1a:47:52:2f:5a:1c:17:58:2d:58:1c:46:3b:de:
02:7c:f7:c0:75:df:fa:f2:17:0f:32:65:c7:f6:60:
bb:02:16:de:7d:c5:7c:85:7a:9d:59:20:01:bf:cd:
44:e9:46:93:90:3e:c6:01:79:18:18:e2:a9:0a:a9:
5b:20:6f:92:f9:7d:c1:95:10:31:ef:f1:1e:e6:fb:
6d:55:20:e3:85:74:15:d0:10:0f:5e:45:8e:c0:69:
c3:4c:c4:bd:f3:a9:07:88:b8:b4:44:db:86:01:12:
79:05:31:7b:1d:dd:74:3c:a1:91:bb:75:1e:d2:63:
c0:3d:b2:33:0c:fb:77:37:05:f8:68:38:43:18:74:
38:21:9f:f1:bc:eb:f7:fd:f1:92:fd:24:4e:d4:da:
1f:2c:09:db:53:29:90:1e:ec:9a:50:5b:60:cb:46:
3b:90:1d:88:62:c6:07:19:54:b7:45:07:80:69:3c:
74:f1:35:8b:c5:82:76:7e:e5:12:7e:d3:85:23:aa:
e2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:16:6F:A3:7C:76:4C:DC:62:A0:0B:CA:2B:2B:2C:87:9F:F6:99:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.173.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58195
Signature Algorithm: sha256WithRSAEncryption
93:ad:e4:f7:96:55:b3:5f:3d:18:25:8f:39:b0:31:81:4a:ba:
83:50:e3:88:17:1e:c2:c9:44:e2:94:d5:17:2e:4d:89:94:42:
90:f0:93:23:d1:65:d3:34:9e:72:7d:54:9a:0c:19:dd:e1:f7:
fc:44:cf:c6:e8:7b:8d:cf:8e:05:ac:4a:39:4d:a9:8a:52:76:
8a:c8:a6:1f:8b:2b:32:8b:0c:87:dc:ba:2a:79:6d:ef:7c:c8:
b9:0e:37:b5:86:72:19:38:2d:cd:c1:9a:e5:83:65:fc:25:2f:
a9:ff:2d:54:65:1e:bb:53:c4:a8:c5:cd:0a:98:88:99:51:dd:
c7:74:49:d6:a0:3e:75:a6:5a:26:93:32:19:80:6c:ab:a0:3a:
7b:f4:f0:18:8e:ae:0b:f4:4b:94:75:46:e4:fa:8a:c6:0f:0d:
5e:c2:0f:8d:0c:2a:21:48:ca:07:ff:10:de:7c:1b:fe:a7:1a:
6c:1b:ed:36:67:b7:17:b6:3f:5b:91:12:d6:c4:89:89:ef:44:
49:48:f3:59:99:82:b9:b6:f4:bc:8e:d6:7f:36:1c:a2:97:48:
53:ab:98:92:13:d6:1c:0a:07:53:0e:aa:b4:eb:49:6c:86:9a:
1d:52:7a:52:a8:2b:c5:c9:ce:d4:43:b3:dd:0e:d1:9d:4e:41:
f9:04:84:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:58:56 2024 by rpki-client on console-fra.rpki-client.org