Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kTxeovTqvz88Qt88Mx6cuhDJOgk.cer
File: kTxeovTqvz88Qt88Mx6cuhDJOgk.cer (raw, json)
Hash identifier: IhPgfRMzXW4nU4WhlpUeEF1jtEtCwHJQR0vGx4D1fxI=
Subject key identifier: 91:3C:5E:A2:F4:EA:BF:3F:3C:42:DF:3C:33:1E:9C:BA:10:C9:3A:09
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DBEE4CBF1D65EB2181DBB6406DFF20
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 59990
IP: 91.246.76.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:ee:4c:bf:1d:65:eb:21:81:db:b6:40:6d:ff:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=913c5ea2f4eabf3f3c42df3c331e9cba10c93a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e3:0e:77:71:22:dd:36:b5:1f:8f:b2:e5:20:
9b:4c:78:ef:a9:90:9a:c5:14:48:ff:0c:68:07:f6:
f2:7f:00:50:aa:f9:b4:b5:9b:f1:e3:27:5b:f9:f3:
51:6d:37:4e:fd:cd:d2:6a:21:07:33:53:97:91:e3:
b4:fd:ac:e7:8a:d6:02:69:bd:81:fb:d3:b3:b2:90:
16:56:4a:6b:47:f7:78:30:bf:02:ba:04:71:9b:b9:
53:90:74:f0:e1:8a:bc:0f:64:f7:f0:58:cf:c0:11:
88:b1:5b:a5:d4:d9:50:7e:b9:c4:90:f9:3a:ff:da:
81:69:46:2a:c7:d6:a0:75:11:4c:b4:81:fb:d5:fb:
fa:a9:5f:54:1d:5b:a9:d2:c7:09:e8:c1:e6:3e:a5:
7c:d6:78:ee:6f:99:d1:cd:e8:98:e3:42:27:ec:ad:
fd:b4:68:cd:4c:2e:98:49:5b:01:76:16:4f:5b:5f:
2e:49:eb:f0:10:49:ab:2a:f3:c3:c2:b6:19:b0:c7:
0f:12:1b:58:53:6a:3b:aa:34:1c:3a:c6:3f:d0:c7:
d2:a3:dd:48:88:c8:ea:37:c5:72:97:1a:e8:d0:01:
a0:e4:cd:60:36:6a:5f:9a:89:28:00:35:b1:a0:de:
49:1e:f7:d0:d9:09:22:84:c0:98:00:0e:7d:27:49:
69:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:3C:5E:A2:F4:EA:BF:3F:3C:42:DF:3C:33:1E:9C:BA:10:C9:3A:09
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.76.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59990
Signature Algorithm: sha256WithRSAEncryption
6f:28:15:1e:d6:2c:e4:78:c0:86:e3:39:15:a5:d7:41:6e:51:
79:5b:e6:dc:7e:ac:4d:5c:12:78:c0:2e:08:4c:5f:7e:d4:8c:
af:a4:d1:bd:af:64:2c:e9:e9:fd:6f:1e:11:df:38:f4:f5:df:
e4:e1:fa:f1:ae:80:1e:04:4f:85:1e:61:2f:8b:08:3e:0d:54:
1b:e5:a7:f2:ad:fc:2b:d4:4d:40:99:c0:40:b3:05:93:f0:8e:
a3:69:64:f2:36:a0:91:98:c8:e4:2a:4d:16:76:32:40:77:f9:
bb:6d:57:1d:51:94:63:ee:e2:99:c5:25:f5:8c:6f:24:ec:b9:
19:09:92:bf:ba:04:27:05:9a:c3:36:3e:06:a7:46:7f:43:54:
b8:74:41:e4:27:1d:4d:7e:3a:7a:9b:73:fd:59:4e:5c:97:31:
1a:5f:bf:1d:6e:41:16:90:0e:86:a1:24:3e:df:4f:7a:3a:3f:
6e:96:a8:aa:d7:78:f3:43:70:ff:5c:fb:c0:7f:20:dd:de:3c:
1c:e0:2a:43:1d:80:07:a4:85:dd:2b:02:c3:6e:cb:b8:49:a8:
21:d7:e8:17:b2:93:1e:01:ec:c3:45:90:5e:9a:bb:60:b7:d9:
ac:d9:5c:5d:1e:0b:26:58:7f:ef:0e:7b:5e:39:bf:10:d6:60:
3b:7b:00:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:05:29 2024 by rpki-client on console-fra.rpki-client.org