Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.cer
File: gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.cer (raw, json)
Hash identifier: 9YsbeWE/ujYXsQ+5jCYi9ynPmYB4Dm5bIck5ZCjerTY=
Subject key identifier: 83:02:06:37:E8:96:55:E2:99:D9:18:43:76:92:54:AF:07:71:49:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94CA46E171FFBFD26272B43C4F56D3A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:31:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 48745
IP: 91.212.17.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:a4:6e:17:1f:fb:fd:26:27:2b:43:c4:f5:6d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83020637e89655e299d91843769254af07714994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d8:91:40:32:37:05:1f:ba:21:89:9b:23:06:
5e:28:08:b2:7e:b8:ce:25:73:14:a3:4c:81:7a:c6:
38:1c:e8:a3:5d:d6:61:e7:a5:0d:ab:b9:a3:96:e2:
ff:cc:2c:18:60:3f:03:72:d9:82:0a:f3:94:c3:44:
f8:dc:b2:3d:34:f0:e7:3b:22:e1:eb:bd:b9:3d:48:
ba:a2:71:d4:46:21:f6:7a:7a:06:ac:ac:ec:bd:77:
53:2e:0e:7e:b5:3d:99:13:a8:31:c9:ef:a5:59:62:
e8:ee:fc:d1:7e:63:56:97:4d:0a:1f:09:65:25:73:
ba:fb:e4:1f:95:79:c4:84:f9:e7:5d:76:19:82:b7:
e4:6a:cb:56:ac:da:2b:9c:fb:f9:68:bf:d8:cf:d9:
d6:7c:bd:2a:66:54:08:fb:64:bb:ab:72:d2:b6:a9:
c5:a0:af:5d:cd:35:bd:45:20:a9:66:1a:54:22:31:
31:81:b2:f4:02:a8:ee:f4:23:58:d0:83:46:34:89:
9a:52:68:6a:1c:52:b2:22:d9:29:f3:23:2e:60:4b:
07:4d:06:80:56:47:7e:38:8f:7c:b9:f9:5a:5f:03:
fa:91:c2:7a:12:e2:1d:ab:71:ef:99:f5:df:c0:1c:
99:d2:d8:cb:67:39:af:15:85:31:1d:5e:4e:37:5a:
37:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:02:06:37:E8:96:55:E2:99:D9:18:43:76:92:54:AF:07:71:49:94
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.17.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48745
Signature Algorithm: sha256WithRSAEncryption
95:8d:62:46:5d:9a:63:8e:19:3d:14:8a:66:2d:a8:18:59:f4:
07:9b:84:64:f4:38:54:ef:2c:8d:eb:b2:86:51:a8:e7:a8:20:
8a:ed:16:5f:78:93:58:6d:a8:a2:6f:7b:88:a7:b5:fb:5a:a4:
a7:fa:3e:af:e7:41:af:34:4b:5a:18:e9:f6:88:ac:34:d3:54:
59:ac:b7:8a:c1:a2:23:f5:62:bd:b1:74:92:21:30:e6:14:0f:
8e:5f:ce:96:4a:26:d4:02:f4:fc:91:7d:c8:32:d9:bf:8b:76:
c9:46:8a:7c:a8:88:7c:a1:6c:07:18:95:02:91:c1:32:b9:a0:
6e:11:ce:b6:ce:94:02:ed:8e:77:52:2d:b9:89:82:7a:f0:cb:
15:08:0b:3b:9d:e4:11:34:76:45:39:81:e0:58:66:b4:c3:0f:
b9:bd:ee:48:48:5c:7f:48:78:af:fe:5a:e7:40:6b:b2:ea:f3:
03:8e:ab:6f:e6:eb:47:6a:75:df:55:5e:a8:9d:68:a9:11:0b:
89:9c:e1:e8:e6:bd:4d:81:60:a6:ee:ba:97:44:86:ed:f7:c9:
f8:35:79:14:f6:6b:1f:3d:8b:d3:15:f2:a3:87:d9:cb:34:06:
65:74:37:ec:1c:ee:8a:29:8d:ee:ca:d7:dd:08:a6:36:41:f4:
f1:76:bb:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:51:49 2024 by rpki-client on console-fra.rpki-client.org