Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.cer
File: ivvGTVk_wHPGkxQ1ZjECld4Kgzc.cer (raw, json)
Hash identifier: QtKfszgQ+JTO304o9CXCIOkyOt/eH2oSvSAtsV2qCTk=
Subject key identifier: 8A:FB:C6:4D:59:3F:C0:73:C6:93:14:35:66:31:02:95:DE:0A:83:37
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC79373C0E2B1872D7E1703C36B7A0B4D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:29:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 202288
IP: 91.244.245.0/24
IP: 2001:678:728::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:73:c0:e2:b1:87:2d:7e:17:03:c3:6b:7a:0b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8afbc64d593fc073c693143566310295de0a8337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f9:b7:23:f1:37:26:cc:12:73:25:31:2c:5a:
75:d2:38:22:3f:9f:b8:c6:f8:cd:5a:e7:cd:ed:46:
3d:b1:43:bd:20:f1:4d:f2:5d:53:a3:91:95:f4:80:
f0:1c:86:3c:bd:a0:c6:fb:77:79:6c:a6:4d:da:38:
22:93:78:96:9e:3c:7e:36:de:10:5b:1c:9d:a6:81:
7b:db:07:91:dd:a7:2a:66:e0:45:18:a6:dc:9c:64:
ed:6c:2b:23:53:b8:ce:b3:ef:ac:a8:e3:72:9a:18:
01:2a:20:ac:72:46:fc:08:ab:d8:6f:27:ab:61:a6:
06:15:e9:0a:15:ce:49:9f:23:73:22:a3:02:8c:f4:
e7:70:5d:1f:b7:70:cc:dc:c6:e0:1d:50:1d:99:4b:
d2:d6:fe:27:d4:f2:b1:99:e8:8a:3a:55:d7:f7:4e:
78:6f:18:bb:db:89:ca:3e:fb:7b:0b:ae:f8:74:6a:
67:7f:4d:31:4a:38:86:16:9c:13:55:9e:51:b4:32:
1e:83:a3:c9:bf:1b:08:93:c7:0c:38:ec:d9:2a:f0:
04:ec:90:6b:6e:07:3d:ae:0c:f2:36:28:83:c7:18:
f9:9d:60:b1:f4:fe:a3:30:83:77:25:2f:93:f4:b7:
b5:a6:57:0d:51:a9:d8:68:4f:c1:b1:0a:77:7d:c3:
ce:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FB:C6:4D:59:3F:C0:73:C6:93:14:35:66:31:02:95:DE:0A:83:37
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.244.245.0/24
IPv6:
2001:678:728::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202288
Signature Algorithm: sha256WithRSAEncryption
00:21:bf:c2:cb:1c:af:b3:b4:3c:86:cc:5c:df:bc:76:21:04:
15:46:4b:4d:3b:7e:a4:ac:d4:bd:be:25:49:dc:3e:b0:cd:f0:
50:a3:d3:d8:1a:a9:e6:e9:54:c1:7c:7b:9b:c8:4d:5e:2c:30:
ba:c5:c9:aa:73:25:93:0f:79:8f:73:c5:67:18:99:b9:d9:d5:
74:75:59:9a:2e:47:03:75:cb:e7:ef:e2:6b:da:dc:2f:32:94:
ba:a5:52:f8:38:de:32:b9:46:39:b1:b6:47:8f:27:a2:5d:93:
bd:73:74:c4:bd:e8:13:68:24:f4:49:58:c4:01:b8:55:aa:a4:
a5:fd:d0:7d:16:c5:e7:a2:1b:05:65:13:3d:27:e4:ee:f6:20:
4a:22:29:77:23:b3:8a:39:5a:fd:30:99:bb:dc:89:0a:81:ce:
19:80:d1:19:a5:61:a5:80:62:35:62:7d:6a:a3:f5:39:d7:ee:
c3:18:ff:6b:2f:5f:f4:4d:9a:6c:86:c8:2c:37:86:2d:ab:2c:
c5:35:7f:73:22:e4:dc:77:87:10:8b:15:be:39:d5:8f:59:68:
66:3e:18:65:60:78:cf:72:3a:ca:2c:f1:df:42:5d:f8:ec:5d:
cf:aa:14:1f:9f:1a:cf:2f:4c:4a:ae:ed:37:fb:3c:21:13:9a:
48:7a:26:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:53:35 2024 by rpki-client on console-fra.rpki-client.org