Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VHbgkAHDGGUmGQ0fNdKluZ_KonA.cer
File: VHbgkAHDGGUmGQ0fNdKluZ_KonA.cer (raw, json)
Hash identifier: cRfujpi3D71OyDezhtqQLKIfSY9dhZLMKeY7mutToZ0=
Subject key identifier: 54:76:E0:90:01:C3:18:65:26:19:0D:1F:35:D2:A5:B9:9F:CA:A2:70
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64A50576D9BABF5784629993EC39FFC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/4bc47e-3987-4a34-92bc-8901e8813aac/1/VHbgkAHDGGUmGQ0fNdKluZ_KonA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/4bc47e-3987-4a34-92bc-8901e8813aac/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:30:08 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.235.72.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:50:57:6d:9b:ab:f5:78:46:29:99:3e:c3:9f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5476e09001c3186526190d1f35d2a5b99fcaa270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:01:d5:2f:cf:e7:3e:92:a8:1f:39:f7:74:c5:
19:c0:ce:7d:43:a5:d3:d5:1c:3b:70:be:ac:ad:aa:
49:8e:25:86:88:a2:f3:12:c2:03:a0:7e:cc:ae:6a:
67:c3:dc:7b:29:31:e6:cd:d3:22:44:aa:31:f0:b3:
6e:09:1f:25:c6:9b:33:d4:2b:91:e5:46:c1:7a:0c:
39:63:18:3c:e1:ff:aa:77:35:a9:1a:d2:b7:85:ec:
19:7f:f5:67:e5:a7:aa:9b:95:7c:ba:af:c9:18:c5:
e1:1e:c2:cb:8a:f8:e9:c3:54:8d:05:3b:bd:6c:6b:
4f:de:cb:5d:5a:56:7e:62:33:0f:8b:ff:0b:6a:ed:
d1:99:e4:90:13:58:5a:0a:c6:dc:9b:6d:5a:dd:48:
1e:41:b9:7c:81:94:68:47:8c:13:60:bc:e1:7c:ba:
da:5d:90:be:8e:0b:86:09:a3:2e:f5:59:73:0c:22:
16:91:92:d8:91:fb:bc:79:c4:81:db:c4:eb:cf:3f:
00:a0:e9:b1:7b:bb:48:07:7f:ca:35:e3:ba:04:31:
dc:e0:f9:dc:0d:22:60:36:69:00:1a:b2:0b:58:2d:
b4:a2:cf:4a:62:5e:39:38:ba:8a:8f:6b:9e:2d:77:
cf:87:1b:03:42:91:20:52:6b:61:71:db:7f:d9:7d:
3a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:76:E0:90:01:C3:18:65:26:19:0D:1F:35:D2:A5:B9:9F:CA:A2:70
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4bc47e-3987-4a34-92bc-8901e8813aac/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4bc47e-3987-4a34-92bc-8901e8813aac/1/VHbgkAHDGGUmGQ0fNdKluZ_KonA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.72.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:b5:ac:0d:67:f2:3e:96:f2:c9:37:de:dd:59:60:38:f4:ea:
f7:d8:7a:de:81:0d:99:93:86:d2:0b:4e:60:45:6b:42:b0:84:
d9:4d:7e:74:2f:47:02:79:c9:a4:57:b8:47:b8:75:59:0a:51:
79:b6:cd:92:87:38:54:c4:64:cf:71:4a:33:a6:4a:15:d8:b8:
ed:38:bc:c0:ad:48:07:67:f2:4a:5e:b8:dd:7f:33:53:fe:bc:
3c:b2:5c:8f:bd:b2:84:2f:70:a2:37:ed:3e:f5:a4:bd:43:f6:
b5:1c:cc:13:98:ee:14:31:51:0e:48:5e:9e:88:1c:c0:71:ee:
c2:0a:25:82:08:b4:43:19:e8:b7:4b:0f:e9:e2:5e:96:2e:d8:
c0:ae:90:73:b3:b1:f3:59:a6:0d:0c:6d:a6:1b:ea:6d:bc:73:
fc:ec:26:e0:d2:52:75:4b:35:4a:c2:b6:2f:3a:b2:cc:d0:f7:
1b:07:ce:f3:80:39:60:5d:5e:da:56:b0:2b:b7:1c:3c:e8:dc:
be:9a:ec:37:9c:0d:11:95:b8:c5:30:91:4f:b3:d1:f6:f7:b0:
2e:93:6e:2c:0e:8e:e9:20:de:5e:b9:65:01:c8:61:12:22:61:
cd:5d:29:07:ca:74:4a:77:9b:bb:b9:6e:11:e2:2d:6b:6a:90:
9f:76:c0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:02:43 2024 by rpki-client on console-ams.rpki-client.org