Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/THKIPrwkBfmKJ54AbEi2yvOd_VE.cer
File: THKIPrwkBfmKJ54AbEi2yvOd_VE.cer (raw, json)
Hash identifier: g6EFjkIRv/NqAFyBV5GKb1ZsezFGTaqQFa0ZzGgO4lk=
Subject key identifier: 4C:72:88:3E:BC:24:05:F9:8A:27:9E:00:6C:48:B6:CA:F3:9D:FD:51
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA98F98525144529F5CEDBF000F930A1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/50c033-54a8-44f0-8c1b-5f7691b6620a/1/THKIPrwkBfmKJ54AbEi2yvOd_VE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/50c033-54a8-44f0-8c1b-5f7691b6620a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 14:34:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 198034
IP: 91.230.169.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:98:f9:85:25:14:45:29:f5:ce:db:f0:00:f9:30:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 14:34:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c72883ebc2405f98a279e006c48b6caf39dfd51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:71:eb:18:a6:60:da:81:a5:38:79:62:28:06:
40:33:eb:29:0b:db:16:98:d1:d1:c7:80:1a:d6:21:
69:0f:04:3c:67:f3:d8:5a:4f:a5:f3:b0:b9:78:07:
fc:40:6a:3f:13:3c:85:e1:19:7c:b2:26:3d:8d:a6:
43:9b:a8:82:da:b0:3c:cd:ee:0d:13:26:a8:62:f5:
e6:1d:26:57:50:51:95:27:2b:89:dd:c2:72:f2:ee:
1d:66:00:27:5a:d5:e0:b5:bb:fc:7f:a0:64:fa:49:
48:a4:93:a0:27:59:90:35:98:63:d6:5f:28:97:10:
bd:4b:ad:c0:15:88:1d:9c:a7:db:a3:75:4a:83:91:
4d:21:eb:9c:d8:38:d3:de:32:22:d8:5d:70:a1:a6:
22:72:df:d6:36:9c:13:52:37:fb:29:7f:31:73:16:
e9:fa:2a:44:55:7e:3b:e5:73:d4:16:69:82:36:aa:
19:d7:dd:51:d3:70:2d:95:43:33:05:bd:9c:1c:e0:
3d:24:44:ac:d1:c7:e6:c6:b1:86:13:50:b5:74:00:
b4:d0:69:3c:69:54:85:63:ec:0e:37:ba:a9:6f:19:
9d:98:16:fb:99:60:89:ea:d5:73:f1:bb:a3:7d:3c:
18:05:7e:44:7e:68:91:83:84:2a:52:88:44:89:b1:
ed:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:72:88:3E:BC:24:05:F9:8A:27:9E:00:6C:48:B6:CA:F3:9D:FD:51
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/50c033-54a8-44f0-8c1b-5f7691b6620a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/50c033-54a8-44f0-8c1b-5f7691b6620a/1/THKIPrwkBfmKJ54AbEi2yvOd_VE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.169.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198034
Signature Algorithm: sha256WithRSAEncryption
44:ed:85:b5:31:d3:99:c5:bb:7b:17:84:d9:1d:a8:93:84:72:
53:71:b5:ed:00:fc:30:be:97:1a:56:42:70:1d:21:d4:2d:2f:
15:c1:8b:f5:ae:fd:06:44:81:02:cd:65:95:08:42:d8:63:e7:
7f:b9:9e:9f:b2:ab:7a:82:57:66:46:d9:f8:40:1b:74:4e:a3:
38:b3:cf:fd:7a:ca:3d:70:38:cb:92:1a:a8:14:58:0c:54:0a:
31:da:3c:15:b9:fd:f0:ec:c6:26:3a:4a:75:46:89:f6:52:e1:
27:b8:61:18:28:94:e2:2b:82:f4:95:65:ea:ff:db:1a:53:d3:
c3:13:64:09:f0:b0:a3:a3:c3:c1:37:a6:ed:40:00:99:85:9e:
c3:07:5f:18:74:1a:cc:da:33:7c:30:df:3f:f1:fc:6a:7b:00:
c0:1b:14:84:f9:48:63:86:ee:e8:86:77:ea:04:c8:87:74:b3:
40:3b:cc:79:c0:7c:5b:be:43:65:c7:cd:b3:60:81:ae:7e:72:
42:02:9b:c7:08:a9:54:d7:94:20:9e:c0:41:09:14:03:ef:7f:
8d:5d:f0:a5:4e:34:fc:42:96:64:24:f4:c6:5e:ed:a5:2a:7c:
e5:72:0e:14:6b:82:58:05:8b:2c:ef:08:dc:b1:54:8b:84:12:
65:1f:d5:98
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYzKmPmFJRRFKfXO2/AA+TChMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTQzNDMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzcyODgzZWJjMjQwNWY5OGEyNzllMDA2YzQ4YjZjYWYzOWRmZDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHHrGKZg2oGlOHliKAZAM+spC9sW
mNHRx4Aa1iFpDwQ8Z/PYWk+l87C5eAf8QGo/EzyF4Rl8siY9jaZDm6iC2rA8ze4N
EyaoYvXmHSZXUFGVJyuJ3cJy8u4dZgAnWtXgtbv8f6Bk+klIpJOgJ1mQNZhj1l8o
lxC9S63AFYgdnKfbo3VKg5FNIeuc2DjT3jIi2F1woaYict/WNpwTUjf7KX8xcxbp
+ipEVX475XPUFmmCNqoZ191R03AtlUMzBb2cHOA9JESs0cfmxrGGE1C1dAC00Gk8
aVSFY+wON7qpbxmdmBb7mWCJ6tVz8bujfTwYBX5EfmiRg4QqUohEibHt8QIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFExyiD68JAX5iieeAGxItsrznf1RMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzliLzUwYzAz
My01NGE4LTQ0ZjAtOGMxYi01Zjc2OTFiNjYyMGEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWIvNTBjMDMz
LTU0YTgtNDRmMC04YzFiLTVmNzY5MWI2NjIwYS8xL1RIS0lQcndrQmZtS0o1NEFi
RWkyeXZPZF9WRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW+apMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwMFkjANBgkqhkiG9w0BAQsFAAOCAQEARO2FtTHTmcW7exeE2R2ok4RyU3G17QD8
ML6XGlZCcB0h1C0vFcGL9a79BkSBAs1llQhC2GPnf7men7KreoJXZkbZ+EAbdE6j
OLPP/XrKPXA4y5IaqBRYDFQKMdo8Fbn98OzGJjpKdUaJ9lLhJ7hhGCiU4iuC9JVl
6v/bGlPTwxNkCfCwo6PDwTem7UAAmYWewwdfGHQazNozfDDfP/H8ansAwBsUhPlI
Y4bu6IZ36gTIh3SzQDvMecB8W75DZcfNs2CBrn5yQgKbxwipVNeUIJ7AQQkUA+9/
jV3wpU40/EKWZCT0xl7tpSp85XIOFGuCWAWLLO8I3LFUi4QSZR/VmA==
-----END CERTIFICATE-----
Generated at Fri May 3 07:36:11 2024 by rpki-client on console-fra.rpki-client.org