Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gnfY854_j7Zjj3CDq58WwEfQ02Q.cer
File: gnfY854_j7Zjj3CDq58WwEfQ02Q.cer (raw, json)
Hash identifier: fQkgrnYRAtgg8VeOJ7tcR62OnIAMMIPqj+UaNGxF8AM=
Subject key identifier: 82:77:D8:F3:9E:3F:8F:B6:63:8F:70:83:AB:9F:16:C0:47:D0:D3:64
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8708E861B7805F2F8B26F52EAF7BFA5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:31:08 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 201879
IP: 91.199.116.0/24
IP: 2a0a:e3c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:8e:86:1b:78:05:f2:f8:b2:6f:52:ea:f7:bf:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:31:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8277d8f39e3f8fb6638f7083ab9f16c047d0d364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bb:37:55:5a:96:84:8d:95:0c:6b:f8:f2:5d:
ac:86:87:e2:88:7c:20:28:a7:00:0e:5c:d2:d3:2b:
fd:7e:b9:0d:32:0f:93:a8:19:f8:cf:97:bb:65:e9:
18:cc:7c:de:70:0f:60:97:67:ed:4a:73:64:01:55:
fc:22:24:45:6f:cd:69:3e:1e:7a:3c:7e:ce:aa:73:
65:36:45:7b:e2:27:88:4e:a9:b1:ba:5b:07:bd:78:
ab:40:74:0e:bd:ac:f6:5d:47:96:f6:ff:19:8c:3d:
41:09:e0:db:31:e5:a6:77:01:26:52:5a:b3:df:96:
83:2b:74:cc:ce:1f:37:31:7a:cf:5c:9e:bb:1a:4a:
0e:a1:19:2a:4c:38:38:d4:2b:0e:39:86:d3:ad:ab:
af:59:04:c9:be:4f:ae:79:ee:9f:76:79:21:39:1b:
7a:42:49:ee:64:db:f5:13:ef:72:39:2e:92:75:5f:
d7:18:8e:1a:ab:dd:4d:d6:c3:35:bb:f2:16:79:49:
c0:06:d1:79:14:32:26:54:b5:84:d3:ad:35:fd:37:
4d:60:05:80:dc:40:0f:a2:2a:47:16:54:8c:ad:1d:
e1:57:d8:4b:19:a6:49:0e:38:51:ae:40:23:50:ac:
f5:3d:69:a9:37:22:d3:5d:72:0d:1b:42:db:a0:56:
53:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:77:D8:F3:9E:3F:8F:B6:63:8F:70:83:AB:9F:16:C0:47:D0:D3:64
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.116.0/24
IPv6:
2a0a:e3c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201879
Signature Algorithm: sha256WithRSAEncryption
7d:bd:7e:07:5b:a8:19:3c:2c:cf:f9:31:7d:c1:62:f4:a8:85:
ef:90:7c:22:a4:f1:b4:a7:f3:4d:00:09:ff:d6:4b:92:8e:63:
8a:c5:c6:71:82:59:2e:53:28:40:4c:bc:28:ba:8a:c7:b7:46:
68:e8:71:f0:ca:c3:77:79:a8:78:e3:aa:92:8e:5a:44:a4:0a:
7b:d2:49:31:b5:11:b6:75:f8:f9:14:d4:10:c8:90:59:7b:34:
24:18:90:ad:6e:ae:92:84:e7:53:61:f4:92:80:66:4b:d1:22:
f4:b3:08:76:41:75:b6:90:89:9b:f3:94:88:63:8d:36:f9:10:
d0:37:db:08:81:4f:eb:76:7a:4d:8a:b2:1d:46:7c:29:d5:51:
e3:2a:41:95:9b:b4:ec:1b:8d:5c:6f:31:b8:9b:0b:a6:14:0d:
39:b7:87:03:bb:09:16:12:79:04:4d:1e:39:07:d6:fe:f5:a0:
75:c3:e5:d4:3f:e2:d1:e8:c8:85:c7:c1:27:97:f6:fd:82:66:
da:c3:1d:ea:fa:3e:2d:7c:f6:c8:69:56:2f:cd:f2:5c:25:84:
0c:4d:99:f6:8e:02:ab:e5:0a:31:1c:02:17:c0:28:4d:58:cc:
0c:f7:dd:30:03:7e:2e:b6:75:4b:c5:3d:7e:50:7c:11:11:ad:
b2:1f:59:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:53:48 2024 by rpki-client on console-fra.rpki-client.org