Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
File: Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer (raw, json)
Hash identifier: U6MUzcSFWIdJsWrsMRIfwK1J7SfxYqIZsUyGVriaRtw=
Subject key identifier: 63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0191985DCC70375E67F663F254CFBE8FF409
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 28 Aug 2024 09:42:49 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 171.22.145.0/24
IP: 185.243.129.0/24
IP: 195.149.74.0/24
IP: 2a01:f180::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:98:5d:cc:70:37:5e:67:f6:63:f2:54:cf:be:8f:f4:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 28 09:42:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=632e3d037bf0507571b2a068cb90308374ce53ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:92:56:ab:78:d6:84:c2:19:1d:46:9b:d3:cb:
ec:45:42:97:ca:b5:a2:12:d3:d5:f2:ee:0f:58:13:
7d:0f:5e:8b:90:81:9a:95:78:bf:b2:af:9e:c0:1a:
c9:73:07:12:be:22:19:9a:35:eb:de:fb:16:b0:67:
5d:95:d3:30:3f:c8:ed:1a:36:29:77:72:28:b9:2b:
60:7e:b3:0f:32:19:d6:49:a5:b8:3b:12:97:b6:59:
a7:24:74:fb:81:c0:1e:b8:eb:d3:63:ce:e1:ac:06:
ad:8b:3b:25:17:5a:51:7e:29:03:04:58:8e:9c:46:
4c:b3:4c:24:d6:2c:93:e9:4d:4b:cb:47:1d:23:8a:
71:c1:03:da:1e:6e:0e:eb:c9:eb:86:9e:f9:c5:2b:
88:97:e4:c3:b0:55:9c:ac:ea:82:5e:c2:72:20:51:
1b:c8:8a:6f:70:8c:5c:f3:44:70:f4:d0:7e:9d:72:
22:94:c9:40:79:2a:8a:ff:c2:ba:89:d8:c6:a3:a6:
bd:6e:70:1b:6f:3c:63:87:80:ca:3b:d1:07:3b:6c:
91:a1:72:45:85:9a:cb:22:d7:99:97:93:35:5a:a7:
09:6a:d4:cd:09:8b:c1:05:b3:fc:ad:52:8b:ad:f1:
0a:b5:d0:95:d1:94:6a:91:45:38:f1:ca:67:3e:97:
ce:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.145.0/24
185.243.129.0/24
195.149.74.0/24
IPv6:
2a01:f180::/32
Signature Algorithm: sha256WithRSAEncryption
14:d7:a9:f8:2a:03:fe:72:ea:7a:ce:a2:21:2d:73:de:06:85:
9b:8d:21:22:6b:e8:24:6e:bf:ba:b5:3b:e6:e6:c5:fb:40:3b:
a9:50:5b:b7:2a:71:8a:2a:9b:91:83:15:75:c9:ad:8f:04:77:
95:9b:98:b0:31:f5:47:d3:27:e9:f0:63:49:9d:6e:68:e8:8e:
10:81:0c:09:3d:7d:1b:85:1f:fd:75:b1:64:d5:b0:01:09:95:
4e:9f:aa:db:b5:cf:13:2d:45:ec:c6:c7:df:fe:96:7b:f4:06:
b7:a3:d7:b0:b6:8b:9a:d1:5a:55:a8:a0:65:31:23:8c:ad:ab:
d4:4b:55:06:43:dc:2b:c5:29:4e:45:8d:42:8f:25:15:b1:7f:
c4:f8:b5:0f:29:77:4f:02:6a:47:33:89:b5:b9:8c:3b:a4:16:
40:82:34:57:d4:c0:fb:27:ef:7b:81:84:2f:b3:00:8a:f3:76:
11:1c:95:f9:50:87:79:51:44:ff:78:0c:50:08:92:76:e4:0b:
dd:b3:21:5a:c4:ac:03:c2:7b:7e:46:35:8a:3c:34:87:18:c2:
c9:02:a7:28:ec:6b:9e:b1:5d:3e:98:88:1d:1e:f3:ba:39:8d:
70:e2:a1:f9:30:69:d0:a3:01:ed:f6:26:b8:93:ac:dd:7e:3b:
6e:cf:3b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:45:37 2024 by rpki-client on console-fra.rpki-client.org