Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer
File: mmCuS92dbvum6hHGBzfLoC3PHmA.cer (raw, json)
Hash identifier: rGcUrVLvIGpJX5aXFx5cVor8TgECfJOIO5VBYe1kYQo=
Subject key identifier: 9A:60:AE:4B:DD:9D:6E:FB:A6:EA:11:C6:07:37:CB:A0:2D:CF:1E:60
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56EA2D638786F7C98189B695ACB64F7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:11 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 57850
IP: 91.209.60.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:a2:d6:38:78:6f:7c:98:18:9b:69:5a:cb:64:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a60ae4bdd9d6efba6ea11c60737cba02dcf1e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bd:c3:5e:bf:1d:c1:de:39:07:ac:41:ec:a5:
08:ef:21:84:e8:a9:8c:ab:bb:2b:19:76:27:ce:a3:
18:74:bf:67:95:50:3d:d3:d4:01:82:e4:f6:18:31:
f6:11:9a:78:90:d9:23:1a:58:22:58:1e:c8:98:84:
4c:7e:32:6a:70:21:58:44:3c:0e:aa:33:24:be:4b:
d4:d1:62:81:d3:e8:3b:87:40:f0:a9:9e:b0:52:07:
89:d4:ed:3e:7b:6a:b4:3d:a5:7d:88:da:30:b4:9c:
c5:34:0e:56:a6:91:a0:f5:dc:79:7a:7b:0e:d7:3e:
8e:28:b8:cc:17:88:b7:72:24:18:dc:c4:1b:67:43:
79:4e:8d:60:f7:ff:ab:8c:91:30:84:93:95:f5:66:
0b:5f:43:84:4b:27:ab:07:03:6b:30:e7:4a:06:59:
44:2c:df:35:e8:71:2a:5f:ce:34:b3:cf:7d:07:b5:
eb:b8:0a:00:0a:ca:48:0e:ea:33:38:7e:1f:ef:56:
24:8c:35:76:7a:c9:65:d2:57:1d:c8:ab:a8:27:2b:
d8:2e:78:62:42:9a:15:13:5f:ac:9d:fd:29:2e:22:
90:cf:af:72:ef:07:e0:cc:3b:56:44:ce:fb:54:54:
12:12:bb:c0:9d:e8:47:2e:6e:7e:01:52:6a:a7:a6:
c5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:60:AE:4B:DD:9D:6E:FB:A6:EA:11:C6:07:37:CB:A0:2D:CF:1E:60
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.60.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57850
Signature Algorithm: sha256WithRSAEncryption
4a:09:c0:b8:a2:44:2a:58:92:8f:73:15:de:97:fd:6c:00:3f:
cb:78:63:6f:e8:f0:00:d9:f3:d9:59:d0:01:52:d7:cd:b2:d1:
3b:8b:a8:20:52:c2:3a:43:a8:00:b0:06:5a:d1:3d:af:33:68:
0f:55:91:87:dd:17:14:0c:6c:1d:e2:82:76:3d:23:28:19:02:
eb:3d:18:e0:a4:12:25:46:fd:ce:68:6a:52:b1:f7:89:92:ed:
84:aa:be:05:3f:83:c4:d7:8b:c6:35:79:3b:97:63:28:13:27:
23:4f:e3:05:90:60:b4:22:95:6a:d8:f0:79:74:f8:3c:80:c0:
08:c0:4b:dd:d7:0d:c1:c7:56:af:aa:00:56:33:f6:36:17:74:
6c:6f:60:34:77:21:63:79:d1:3a:20:f4:30:54:70:17:56:2e:
7c:e0:0a:93:35:8a:74:61:9b:eb:c0:7d:22:82:20:a1:ed:9f:
1c:f1:3d:15:43:d9:06:7f:9c:d8:e5:52:b0:fe:38:f6:86:dc:
b8:de:6d:42:17:10:c7:7e:dd:07:ff:98:ea:e8:6c:66:a2:d8:
01:db:49:55:b5:dc:10:db:3b:bc:5b:06:95:6a:b3:93:4c:f9:
08:53:49:fa:22:0d:1b:9f:8e:f0:16:22:82:a1:66:de:2b:8f:
68:0a:07:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:12:57 2024 by rpki-client on console-ams.rpki-client.org