Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer
File: guItqb8KdBce67TNmPwl8wQa3S8.cer (raw, json)
Hash identifier: 05BLllt2XTDy48tOtqSIVSauTekYEClP1d7rc7Q3nxA=
Subject key identifier: 82:E2:2D:A9:BF:0A:74:17:1E:EB:B4:CD:98:FC:25:F3:04:1A:DD:2F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC50115A5B27E43C3EEA923F0033F62C8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 29445
IP: 195.149.95.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:15:a5:b2:7e:43:c3:ee:a9:23:f0:03:3f:62:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82e22da9bf0a74171eebb4cd98fc25f3041add2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:db:40:67:81:95:6a:7f:07:d4:1d:4b:b3:f7:
64:f4:2a:b7:74:ce:18:78:ac:62:b3:9c:fa:d8:75:
19:74:4f:19:00:d3:c7:58:ff:c2:87:95:d0:f3:5f:
cb:e0:2e:68:72:cd:1b:57:f5:d9:cc:c0:96:72:6d:
02:b3:d5:ca:62:20:be:a5:b4:a4:76:a1:e0:1c:00:
66:01:eb:ff:16:b6:ec:87:5d:02:74:bd:9a:b6:1a:
1c:75:41:2d:63:de:7a:41:0d:67:49:ce:30:d9:ed:
b2:ce:29:f4:e4:d0:38:a6:3a:0e:73:cf:83:9d:57:
b3:07:1e:33:bd:8c:81:f1:c8:70:e5:1d:04:ca:52:
0d:31:68:35:87:97:d3:73:03:2f:55:84:39:14:72:
ec:f9:ef:a1:df:3b:29:8f:fc:37:25:5b:65:af:79:
66:f8:51:8e:12:ba:d2:39:4f:07:73:62:25:38:02:
02:5a:45:4c:bb:e1:9e:1e:e0:ee:3e:e5:f9:a5:5a:
95:5b:22:72:8d:d4:62:51:2c:04:45:d8:fb:a8:7f:
13:bb:ca:5f:3d:76:19:63:79:c4:8f:d0:39:c9:ac:
37:87:1f:45:bb:85:c7:f5:c5:89:2c:ab:c6:bd:56:
af:5a:80:cc:57:78:ab:1b:d2:1c:da:30:85:91:14:
53:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E2:2D:A9:BF:0A:74:17:1E:EB:B4:CD:98:FC:25:F3:04:1A:DD:2F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.149.95.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29445
Signature Algorithm: sha256WithRSAEncryption
05:cf:0d:7e:e4:59:a7:6d:e3:0f:3b:1a:f1:4e:fd:0a:d9:a3:
1c:f0:7a:a1:04:82:90:03:72:c7:e1:68:b1:78:b5:38:24:00:
5f:cc:f6:4b:62:ad:26:f3:32:f4:43:88:56:9a:24:62:b1:7a:
7a:f2:b1:fe:cd:2e:fc:e3:b7:79:e1:4d:72:31:dd:09:3d:89:
0b:60:70:74:34:26:c1:d4:ed:45:cf:72:77:f3:96:a8:2d:3f:
1b:e1:c5:8a:79:08:ff:29:32:d3:f8:2e:8c:6d:1e:69:1c:bd:
8e:e0:78:9e:a6:9d:4b:5e:fe:0e:1e:29:5d:40:64:d5:3f:7a:
9a:4f:9e:e8:be:cc:60:a1:ff:3a:a7:34:91:2b:01:5a:c4:9f:
48:ba:b7:9e:99:db:c6:af:75:17:a6:56:fd:9c:26:4d:b8:08:
0d:f1:27:04:9f:90:11:42:2b:0f:20:7e:64:6b:5f:71:b4:37:
86:40:9b:3b:2c:ed:60:e5:d1:73:3f:b2:b2:30:b1:b2:a3:3f:
80:c1:56:2d:b1:49:ce:d8:30:01:9f:4c:73:13:d2:e0:dc:86:
d6:ef:aa:66:ef:26:64:70:60:0e:ef:23:8b:6e:9c:37:89:3f:
fa:b8:f4:cf:32:60:7f:f0:83:8c:9b:42:3a:41:f6:63:3a:9f:
4c:e5:4f:a5
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgISAYzFARWlsn5Dw+6pI/ADP2LIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTIzMDMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MmUyMmRhOWJmMGE3NDE3MWVlYmI0Y2Q5OGZjMjVmMzA0MWFkZDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqttAZ4GVan8H1B1Ls/dk9Cq3dM4Y
eKxis5z62HUZdE8ZANPHWP/Ch5XQ81/L4C5ocs0bV/XZzMCWcm0Cs9XKYiC+pbSk
dqHgHABmAev/Frbsh10CdL2athocdUEtY956QQ1nSc4w2e2yzin05NA4pjoOc8+D
nVezBx4zvYyB8chw5R0EylINMWg1h5fTcwMvVYQ5FHLs+e+h3zspj/w3JVtlr3lm
+FGOErrSOU8Hc2IlOAICWkVMu+GeHuDuPuX5pVqVWyJyjdRiUSwERdj7qH8Tu8pf
PXYZY3nEj9A5yaw3hx9Fu4XH9cWJLKvGvVavWoDMV3irG9Ic2jCFkRRTFwIDAQAB
o4ICnzCCApswHQYDVR0OBBYEFILiLam/CnQXHuu0zZj8JfMEGt0vMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y0L2E4OWIz
Yy05NzJjLTRiZWUtODBmMi01YzI5MTlkYThkZjMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQvYTg5YjNj
LTk3MmMtNGJlZS04MGYyLTVjMjkxOWRhOGRmMy8xL2d1SXRxYjhLZEJjZTY3VE5t
UHdsOHdRYTNTOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAw5VfMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC
AnMFMA0GCSqGSIb3DQEBCwUAA4IBAQAFzw1+5FmnbeMPOxrxTv0K2aMc8HqhBIKQ
A3LH4WixeLU4JABfzPZLYq0m8zL0Q4hWmiRisXp68rH+zS7847d54U1yMd0JPYkL
YHB0NCbB1O1Fz3J385aoLT8b4cWKeQj/KTLT+C6MbR5pHL2O4Hiepp1LXv4OHild
QGTVP3qaT57ovsxgof86pzSRKwFaxJ9IureemdvGr3UXplb9nCZNuAgN8ScEn5AR
QisPIH5ka19xtDeGQJs7LO1g5dFzP7KyMLGyoz+AwVYtsUnO2DABn0xzE9Lg3IbW
76pm7yZkcGAO7yOLbpw3iT/6uPTPMmB/8IOMm0I6QfZjOp9M5U+l
-----END CERTIFICATE-----
Generated at Fri May 3 10:51:46 2024 by rpki-client on console-fra.rpki-client.org