Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YEBzL9vKpSkA2yRiB1v07xUVlpU.cer
File: YEBzL9vKpSkA2yRiB1v07xUVlpU.cer (raw, json)
Hash identifier: PGIDPcTMSUBE1p6oEU8iKHy437GpgwNRMs2Nr1/Yp78=
Subject key identifier: 60:40:73:2F:DB:CA:A5:29:00:DB:24:62:07:5B:F4:EF:15:15:96:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F3EE7530C9955C7220BEC083257C99A7B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 03 May 2024 14:41:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208973
IP: 45.67.104.0/22
IP: 2a09:7540::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 14:36:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3e:e7:53:0c:99:55:c7:22:0b:ec:08:32:57:c9:9a:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 3 14:41:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6040732fdbcaa52900db2462075bf4ef15159695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:97:87:49:67:cc:6a:18:e3:1a:15:09:a2:69:
89:78:9c:59:64:b4:ed:29:a3:4b:05:01:40:57:e7:
2b:e8:1b:1d:27:cf:59:6a:c3:7c:a9:a8:d0:e4:22:
d1:70:3c:cc:81:84:b4:b8:1c:37:52:1a:03:72:b6:
26:a3:1a:43:20:27:f9:e8:a6:eb:0c:6a:83:c9:c4:
8b:77:fa:94:43:c8:38:27:d1:56:a7:d1:d2:dc:e6:
aa:09:ee:4b:9f:6b:40:9f:bf:20:72:09:d0:29:60:
33:60:e7:5a:86:ba:ef:2f:a6:76:4e:82:82:96:9d:
5b:5a:f0:37:92:21:eb:ab:31:0f:23:55:91:fb:8a:
69:96:a9:64:0b:5e:ee:53:4d:5d:ad:dc:79:12:15:
80:42:97:7c:5a:ef:22:72:23:bc:49:2b:a4:57:77:
25:ec:60:23:2e:73:2e:10:16:26:e0:aa:fe:60:60:
b3:24:98:86:4d:14:9e:48:fa:21:8b:c4:9e:a4:75:
40:99:c2:25:6c:cc:8d:18:2c:18:a0:db:77:3b:ec:
38:c6:3d:69:93:dc:71:a1:40:9d:9c:1e:fc:b8:c8:
e8:e7:54:50:ab:d8:ae:51:86:3d:7f:e3:0d:69:35:
00:48:e6:b5:6d:44:e0:1a:dc:54:e0:7d:d8:86:c8:
c5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:40:73:2F:DB:CA:A5:29:00:DB:24:62:07:5B:F4:EF:15:15:96:95
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.104.0/22
IPv6:
2a09:7540::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208973
Signature Algorithm: sha256WithRSAEncryption
a7:34:92:83:67:c1:81:d2:20:f3:76:4f:3b:86:e5:53:5f:52:
9c:9e:9a:f5:79:99:b5:2a:49:db:e1:7c:86:e6:f4:9b:29:f4:
93:0e:73:00:9a:cd:44:e5:20:7d:e7:08:9b:47:d0:cc:bf:b6:
77:6a:a8:4f:11:50:03:18:dd:a0:cf:8f:23:af:54:3d:25:6e:
da:ff:0f:7d:a8:e0:66:2c:c1:c0:15:9b:70:8b:9d:a3:6e:bb:
b1:66:8b:13:f5:be:d7:d3:ea:a2:40:9b:5f:20:81:62:ab:69:
80:19:1e:88:69:7e:f4:8c:63:4f:ea:d0:ec:d7:e5:9d:7d:1f:
fd:06:be:c6:2c:0f:77:fd:c1:28:90:b6:a7:08:3e:d6:ea:44:
d6:14:a6:d6:0c:86:66:7e:8f:d0:65:04:01:e4:ea:6a:91:be:
e5:e2:46:35:3a:cb:c0:83:4c:c6:55:da:e7:84:18:bf:69:87:
ba:c1:e3:1d:e9:6e:9f:cd:bf:0b:13:c0:7b:53:37:e3:c3:18:
62:7a:96:87:13:11:d8:d4:a8:37:33:36:70:0d:9b:96:f3:36:
db:30:f9:6a:08:5f:bc:3b:23:35:29:7e:31:bb:cc:56:5f:e0:
e9:66:76:ad:a6:fe:23:21:c5:9f:fa:50:f9:57:c6:a4:e5:db:
25:42:4b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 20:39:03 2024 by rpki-client on console-fra.rpki-client.org