Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pMr8tGEtHWVxkg9OSGBWmBA2piA.cer
File: pMr8tGEtHWVxkg9OSGBWmBA2piA.cer (raw, json)
Hash identifier: xjc5e8oG92kpMkcH/U++uznsnhMiDVVdG8RqJhsRxGw=
Subject key identifier: A4:CA:FC:B4:61:2D:1D:65:71:92:0F:4E:48:60:56:98:10:36:A6:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BBAC434FFCC46DE2E43D776344F223
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/36/d1f8e9-d166-41bf-b96d-f17b0fddd0e0/1/pMr8tGEtHWVxkg9OSGBWmBA2piA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/36/d1f8e9-d166-41bf-b96d-f17b0fddd0e0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:32:48 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 39002
IP: 91.208.179.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:ac:43:4f:fc:c4:6d:e2:e4:3d:77:63:44:f2:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:32:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4cafcb4612d1d6571920f4e486056981036a620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b1:bc:be:40:1d:ad:85:0a:4a:1a:5d:75:88:
dd:a2:9f:65:50:0f:d6:9b:20:c3:41:5f:18:b7:0c:
fd:ee:42:c7:fe:7d:c7:18:67:66:ea:ed:96:35:f9:
71:a2:0a:6d:bc:e4:52:30:f2:53:85:4d:75:50:fe:
69:f5:73:28:12:7d:60:88:fa:9a:4f:f3:35:3d:c7:
f8:df:50:73:3c:15:65:15:f9:c7:40:78:4c:1d:7b:
bf:40:7f:6a:cb:7d:6b:f5:4e:29:a6:97:e2:aa:21:
d4:45:98:2d:73:e7:78:5b:75:09:ff:76:e6:d0:35:
2f:d6:40:56:b0:a4:e3:d1:a3:3f:31:6e:89:b7:3b:
24:66:4b:d7:03:45:e6:a0:1d:df:d2:44:c4:81:b5:
05:10:89:fa:12:3a:d4:08:2a:6c:49:3a:ef:c2:a1:
77:16:67:37:92:5f:2b:93:f1:16:d9:4c:6a:ef:39:
d5:12:6f:4e:0a:4a:87:3d:f8:01:bd:02:35:31:a2:
e9:7a:b0:05:f8:e1:36:8e:84:4b:45:a1:f4:79:89:
87:63:89:88:12:36:dc:2c:96:40:b7:39:21:7d:8b:
23:7a:5a:13:7f:66:e1:27:76:dc:a5:93:09:a2:f0:
30:e1:e5:7f:07:44:69:3c:45:d1:e4:e9:08:e3:10:
c0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:CA:FC:B4:61:2D:1D:65:71:92:0F:4E:48:60:56:98:10:36:A6:20
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d1f8e9-d166-41bf-b96d-f17b0fddd0e0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d1f8e9-d166-41bf-b96d-f17b0fddd0e0/1/pMr8tGEtHWVxkg9OSGBWmBA2piA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.179.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39002
Signature Algorithm: sha256WithRSAEncryption
3a:36:c1:e2:06:fd:24:d6:49:3b:79:e1:4d:7d:1c:52:b8:ba:
f8:4a:52:18:cd:fe:6b:f8:6f:b6:1b:28:7a:3d:08:9c:7d:02:
6a:96:c9:8b:04:9d:af:61:a9:5c:2b:4e:65:1b:e1:74:2f:a1:
73:09:92:24:12:14:9e:85:1d:40:b0:28:9b:95:f9:72:dc:96:
8c:ba:de:e5:e4:50:ac:de:d6:ca:3b:4e:7b:85:f3:2b:b1:77:
53:44:b2:95:bc:15:aa:9a:a9:03:0d:1e:00:3e:27:c8:f9:e2:
ff:f4:52:e0:b1:a6:89:78:55:61:3d:8f:e7:30:7c:2c:b0:2b:
22:5f:65:59:68:a8:35:e2:61:d2:a6:43:cb:49:63:4e:6c:82:
4d:f1:f3:ca:2d:a7:be:e0:bd:3c:cb:10:e1:2c:e3:5a:8a:75:
42:cc:4e:df:c9:ca:6c:6d:54:de:d8:0b:98:fe:5a:d2:87:af:
69:27:57:8f:f3:06:6d:11:c5:86:14:c1:65:64:7f:5f:44:81:
74:2a:b1:fd:d5:00:86:fd:17:72:c8:5a:7b:ba:50:9c:4f:7a:
c8:bd:f7:b7:8f:0d:65:42:2c:4e:59:07:36:f4:0e:3b:96:50:
e1:85:4c:a7:44:8a:b3:66:19:e5:a7:3e:60:8c:8e:20:b7:90:
97:25:2a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:14:44 2024 by rpki-client on console-ams.rpki-client.org