Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v3rjZp-Ef6J6abFLuH-Me_15nuA.cer
File: v3rjZp-Ef6J6abFLuH-Me_15nuA.cer (raw, json)
Hash identifier: w26gHh/INHS11112du2tnE2HNPJIUApTB1mesNxVEOc=
Subject key identifier: BF:7A:E3:66:9F:84:7F:A2:7A:69:B1:4B:B8:7F:8C:7B:FD:79:9E:E0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB38C48ACEC528EA90522710EF9946
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:56 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208309
IP: 91.231.34.0/24
IP: 2a12:88c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:38:c4:8a:ce:c5:28:ea:90:52:27:10:ef:99:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf7ae3669f847fa27a69b14bb87f8c7bfd799ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6c:80:a4:ac:d9:9d:c3:26:19:57:40:87:04:
12:31:35:73:8c:ef:ab:21:a6:0c:f9:cf:e9:66:a6:
a5:53:84:d8:73:c6:d6:c8:10:20:51:7e:f3:da:fb:
27:23:ac:83:71:30:1c:15:61:b7:d6:59:92:ba:34:
27:ff:00:9c:34:c3:d6:b4:5f:69:72:b7:a0:37:90:
31:e2:14:df:6d:94:0b:2c:2c:52:69:6f:9d:dd:e9:
e2:b0:bc:fb:f9:3b:df:21:8a:6b:5b:8c:e9:69:1c:
27:b8:fd:75:34:7f:ca:d1:74:c0:ef:67:d7:77:38:
84:51:2f:4b:5e:67:f2:fc:85:1e:e3:64:c6:66:be:
e8:bf:da:57:ed:55:01:70:9b:02:8e:db:b6:52:4c:
45:99:f8:38:ee:1a:ab:df:13:fd:fe:f9:df:d5:17:
08:3e:41:f0:fc:73:ab:be:0a:de:5a:64:5d:a0:01:
0d:8a:2f:a1:5e:f0:e3:3c:76:d3:f2:a9:88:92:8d:
d7:d0:2b:e8:a3:d9:ac:4d:ba:92:6a:06:c4:43:d3:
f2:4a:28:c2:fd:16:75:bd:dd:18:84:ff:2b:71:a4:
68:bf:66:1b:b8:eb:c9:6d:55:19:f2:f2:4c:57:b4:
fd:86:70:25:10:2e:f3:3d:d9:2e:21:d7:93:f9:b6:
66:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:7A:E3:66:9F:84:7F:A2:7A:69:B1:4B:B8:7F:8C:7B:FD:79:9E:E0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.34.0/24
IPv6:
2a12:88c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208309
Signature Algorithm: sha256WithRSAEncryption
a8:c7:ea:cb:76:5d:3d:79:05:66:36:5f:04:2d:a9:a9:ab:f3:
47:34:6a:6d:02:72:4d:77:ee:f4:3a:1f:fe:85:47:1a:0c:62:
3f:7c:4e:d7:a8:7f:1b:2c:d7:3a:95:96:c9:d1:4f:bc:96:bb:
3d:cb:84:c6:c4:1a:b8:36:64:7c:86:fe:1f:97:0a:44:ba:0b:
5b:37:c4:80:05:58:b4:a0:39:fa:27:97:63:85:8f:ea:35:cc:
e5:56:9b:99:6e:30:1c:87:fc:5d:6c:8e:f5:4c:85:d0:73:60:
f0:2b:6b:ef:69:d4:b3:fb:dc:5e:d7:42:6e:8d:02:b1:e4:4e:
72:92:d9:d3:8b:03:b8:65:cc:bb:da:41:cf:81:6e:c1:8a:f6:
7c:f6:c0:a0:3e:b9:27:b6:e4:d7:47:25:41:82:9f:5a:33:23:
0a:7d:c0:ad:ee:e9:0e:a8:df:d5:e7:9d:10:6d:e4:13:00:b9:
1c:6f:e7:c3:8f:6e:ff:1c:61:ac:f8:a6:16:a7:ee:d0:f2:3d:
19:9d:b3:34:a8:e9:eb:0f:b8:17:19:fa:77:7e:78:f9:cf:14:
bf:b9:77:d9:a3:8a:28:c3:5f:ca:3a:ba:41:2b:76:d6:48:f8:
04:0c:5d:b6:48:09:87:79:78:34:44:5a:90:1d:9e:03:55:98:
ad:57:6f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:04:35 2024 by rpki-client on console-fra.rpki-client.org