Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/z2hDzhUimoAj2X-iejflkniyv9c.cer
File: z2hDzhUimoAj2X-iejflkniyv9c.cer (raw, json)
Hash identifier: K/IuimjVtgsbg1Deg5r4/tFVJ8MW4ZYSsrV8cE4kY+A=
Subject key identifier: CF:68:43:CE:15:22:9A:80:23:D9:7F:A2:7A:37:E5:92:78:B2:BF:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC2A585331729047A07948DA6471D8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:49 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 197944
IP: 91.230.90.0/24
IP: 2001:67c:24dc::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:2a:58:53:31:72:90:47:a0:79:48:da:64:71:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cf6843ce15229a8023d97fa27a37e59278b2bfd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:78:eb:db:62:52:80:40:58:71:ba:26:90:cb:
b2:49:bd:df:cb:df:25:c5:05:72:de:3d:8b:06:69:
87:0d:dc:8f:00:71:2c:dd:44:98:95:59:85:25:49:
7c:22:e0:1c:c3:21:11:15:f1:38:63:80:2a:4d:93:
04:40:06:f0:b9:85:66:9a:bd:d7:14:58:42:4c:31:
e4:a1:a0:33:43:cb:08:a9:3e:f9:76:5a:63:87:0e:
65:60:36:9b:e2:11:96:98:60:34:b2:c3:3e:f7:b1:
54:f5:f7:5f:17:0e:de:61:ac:e5:aa:05:09:f6:0d:
4a:bd:93:d5:51:5b:6c:b6:f4:94:24:cd:1a:f6:55:
a3:5e:11:6e:eb:a3:4d:52:eb:eb:cd:54:cb:f0:79:
e6:38:ef:34:6c:17:63:bc:0b:1b:49:a4:61:ad:31:
a1:f7:cb:1b:1e:93:85:2a:aa:d2:01:2c:08:49:ca:
c9:05:83:36:54:e1:1a:a6:e0:d4:49:64:b4:dd:71:
83:0d:05:a8:cb:40:dd:eb:33:5e:b0:61:53:63:b4:
c6:1b:10:d5:2c:78:1c:33:ad:98:f2:cc:13:51:65:
c1:bb:ba:b4:10:bb:8e:76:a3:b6:78:ec:17:f0:41:
ae:37:2d:b2:5f:d6:39:21:b2:c8:ac:45:60:79:01:
35:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:68:43:CE:15:22:9A:80:23:D9:7F:A2:7A:37:E5:92:78:B2:BF:D7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.90.0/24
IPv6:
2001:67c:24dc::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197944
Signature Algorithm: sha256WithRSAEncryption
93:2b:44:92:f2:75:01:40:ae:f9:45:c7:c0:7c:7a:d2:e8:5a:
db:68:a3:53:a1:70:78:7e:3d:a4:69:d6:1b:6e:f3:f7:25:ea:
0d:f1:65:d5:93:9b:55:39:ba:2b:0d:cd:26:b9:12:08:47:9a:
19:96:ea:6b:78:50:c7:db:4c:51:dc:68:37:4a:37:67:11:26:
80:1c:a5:6a:de:91:25:71:e4:ec:88:f3:85:42:fd:d4:a9:bc:
ae:41:5a:e9:84:63:88:3a:1f:26:17:c1:1e:00:54:0f:f4:71:
a0:91:0b:34:33:ba:9a:97:36:4c:9e:3b:51:53:43:93:7a:07:
70:69:01:96:a5:37:cb:68:69:b6:97:4e:11:61:b1:01:dc:bc:
45:3a:a4:91:9f:ea:d7:c8:1f:a9:53:40:09:b5:42:a3:f3:1a:
57:86:97:cd:48:ad:e5:f8:61:3a:93:24:29:e3:29:49:0b:f1:
f1:cb:7e:23:e5:2b:7b:07:b1:67:50:c8:27:ed:ec:a4:98:70:
7f:43:ff:c9:c1:a7:f7:8f:83:77:27:33:bc:d7:f6:be:73:a6:
bd:94:ce:31:8d:cd:e9:15:65:ff:91:3c:42:8b:1d:57:a7:41:
f1:af:f6:e5:dd:46:26:d4:a7:71:c2:e0:be:ba:59:98:63:6e:
66:71:d4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:20:37 2024 by rpki-client on console-ams.rpki-client.org