Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/praJ3e9Y8KM4Pi71qjonxP5FMY4.cer
File: praJ3e9Y8KM4Pi71qjonxP5FMY4.cer (raw, json)
Hash identifier: QY95E84r1z2pghBmR/DoVEn6KDjDZ2NFFf9pBsqpWIE=
Subject key identifier: A6:B6:89:DD:EF:58:F0:A3:38:3E:2E:F5:AA:3A:27:C4:FE:45:31:8E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DF499EC0E1833BDEE5E45B07BB442F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/praJ3e9Y8KM4Pi71qjonxP5FMY4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:32:05 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 43125
IP: 91.194.82.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:49:9e:c0:e1:83:3b:de:e5:e4:5b:07:bb:44:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:32:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6b689ddef58f0a3383e2ef5aa3a27c4fe45318e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:09:c5:03:5b:f2:f9:2e:24:8c:fd:3e:22:28:
14:f5:b5:e4:2d:44:7b:95:8d:34:b4:97:0e:42:f5:
c9:8e:6c:2b:fa:10:0a:bc:04:92:5a:ec:1f:46:e2:
f1:00:66:5c:de:e4:aa:6c:a3:01:87:9b:ee:2c:69:
b2:cc:ca:d6:43:d3:db:b4:0b:99:02:53:55:26:03:
70:32:2e:d6:17:8b:dd:75:a7:dc:31:21:9f:c7:20:
ef:24:b0:24:9b:21:17:77:9d:81:6f:c7:dc:9f:60:
80:d5:83:8b:50:4f:74:ce:28:08:85:29:6d:d1:d2:
61:ea:c3:93:c2:a6:29:6b:d1:67:9b:f7:6e:6c:5b:
63:a8:04:72:6c:d8:b3:a7:53:dc:95:6a:01:c3:be:
18:64:da:06:04:4a:31:fc:14:5e:a4:fe:96:7d:ca:
2d:50:97:e2:5e:9a:b0:30:5b:7f:b9:21:f1:04:55:
cd:38:71:20:61:e9:43:1e:1c:c1:ef:12:e4:a0:d5:
a8:58:41:2f:3d:94:3c:35:70:fc:65:bb:9f:e3:6b:
e6:69:d8:1c:b8:c3:8c:e3:4c:32:28:2f:ee:33:9d:
82:8b:33:04:2f:61:49:24:a4:92:f9:11:b7:9f:f9:
fd:0a:ed:2a:42:92:cd:1e:49:44:92:99:f5:e3:5e:
49:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B6:89:DD:EF:58:F0:A3:38:3E:2E:F5:AA:3A:27:C4:FE:45:31:8E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/praJ3e9Y8KM4Pi71qjonxP5FMY4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.82.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43125
Signature Algorithm: sha256WithRSAEncryption
37:36:f6:eb:69:65:16:b6:52:3d:09:d0:5d:ad:1e:e2:d7:0c:
61:74:79:38:e2:89:eb:24:16:ae:3e:64:ae:b0:93:91:04:6a:
7c:27:df:26:53:7c:76:50:6e:52:43:3d:dc:63:b2:2e:41:b6:
01:b0:fb:e4:60:51:53:87:4b:71:de:5f:98:2a:5f:2b:30:65:
a5:02:4b:70:db:6d:9a:33:de:5a:9a:3d:08:df:b3:1a:e6:a7:
f4:be:78:16:9a:74:7a:8e:e2:c9:dc:e8:d7:71:80:cd:3f:f5:
c9:e2:93:c9:06:e0:2d:23:f7:c7:de:3b:9e:ca:2a:9a:66:1d:
79:d2:ef:1d:a6:8b:f2:0f:32:f0:3d:91:99:92:fd:ba:07:92:
fd:52:41:4f:78:93:0a:43:05:f8:17:0c:be:aa:cd:b7:c3:57:
6a:d0:cf:fd:60:79:a2:ba:38:0c:16:79:21:d9:d0:20:ff:5c:
1c:ff:59:6d:e3:14:55:af:0e:f2:f9:93:93:fd:a5:87:f7:c7:
d4:54:b4:70:c0:a4:69:e6:58:85:b3:bb:9d:e2:b2:f4:a9:bf:
39:f3:1c:6f:81:91:34:3c:71:68:75:59:16:a1:a4:a2:8c:9d:
b6:e2:4f:31:7f:d9:e0:f4:a1:79:82:00:c8:7d:20:cd:08:18:
63:e9:88:77
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYzI30mewOGDO97l5FsHu0QvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDYzMjA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNmI2ODlkZGVmNThmMGEzMzgzZTJlZjVhYTNhMjdjNGZlNDUzMThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QnFA1vy+S4kjP0+IigU9bXkLUR7
lY00tJcOQvXJjmwr+hAKvASSWuwfRuLxAGZc3uSqbKMBh5vuLGmyzMrWQ9PbtAuZ
AlNVJgNwMi7WF4vddafcMSGfxyDvJLAkmyEXd52Bb8fcn2CA1YOLUE90zigIhSlt
0dJh6sOTwqYpa9Fnm/dubFtjqARybNizp1PclWoBw74YZNoGBEox/BRepP6Wfcot
UJfiXpqwMFt/uSHxBFXNOHEgYelDHhzB7xLkoNWoWEEvPZQ8NXD8Zbuf42vmadgc
uMOM40wyKC/uM52CizMEL2FJJKSS+RG3n/n9Cu0qQpLNHklEkpn1415JwwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFKa2id3vWPCjOD4u9ao6J8T+RTGOMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk4LzhmZWY3
Zi1kMDExLTRjZGItYWMwYS0zMTcwMGYwZTFhNjEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvOGZlZjdm
LWQwMTEtNGNkYi1hYzBhLTMxNzAwZjBlMWE2MS8xL3ByYUozZTlZOEtNNFBpNzFx
am9ueFA1Rk1ZNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQBW8JSMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwCodTANBgkqhkiG9w0BAQsFAAOCAQEANzb262llFrZSPQnQXa0e4tcMYXR5OOKJ
6yQWrj5krrCTkQRqfCffJlN8dlBuUkM93GOyLkG2AbD75GBRU4dLcd5fmCpfKzBl
pQJLcNttmjPeWpo9CN+zGuan9L54Fpp0eo7iydzo13GAzT/1yeKTyQbgLSP3x947
nsoqmmYdedLvHaaL8g8y8D2RmZL9ugeS/VJBT3iTCkMF+BcMvqrNt8NXatDP/WB5
oro4DBZ5IdnQIP9cHP9ZbeMUVa8O8vmTk/2lh/fH1FS0cMCkaeZYhbO7neKy9Km/
OfMcb4GRNDxxaHVZFqGkooydtuJPMX/Z4PSheYIAyH0gzQgYY+mIdw==
-----END CERTIFICATE-----
Generated at Fri May 3 10:59:47 2024 by rpki-client on console-fra.rpki-client.org