Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer
File: A_P-YHUIK-jliDKbQ9dhv257AdA.cer (raw, json)
Hash identifier: Gb/xGY4x9cwz/NTYZCozg/X5c/NFOB/1/kZ2vQLTaA8=
Subject key identifier: 03:F3:FE:60:75:08:2B:E8:E5:88:32:9B:43:D7:61:BF:6E:7B:01:D0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D61A610D46EF4070369BDF3963058
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:57 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 209823
IP: 195.24.245.0/24
IP: 2a12:5540::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:61:a6:10:d4:6e:f4:07:03:69:bd:f3:96:30:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03f3fe6075082be8e588329b43d761bf6e7b01d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0c:80:27:29:3e:b8:b1:bd:c7:d8:9d:1b:cf:
ef:c6:fb:0f:10:21:83:49:67:db:01:ea:8d:b9:5e:
27:bc:30:f0:17:54:27:80:0f:6e:03:26:0f:36:c3:
07:3d:1f:f1:65:af:97:d3:e1:67:09:2e:24:e3:a9:
ac:e1:07:10:d5:b3:05:f3:77:4e:51:e8:b3:22:aa:
f4:9b:61:e1:eb:80:a1:86:51:18:c1:78:aa:f3:71:
95:a8:b5:b4:88:f2:09:77:d8:1d:21:2f:e5:21:d0:
a5:18:86:37:58:ae:63:c9:f3:36:5d:eb:43:4c:06:
93:ff:fe:b3:88:0f:cb:2d:b8:e9:a8:d1:e0:6a:17:
26:8c:8e:a0:b9:e7:f5:70:09:db:70:51:49:98:db:
1e:61:3e:e2:3f:32:9c:3f:a0:7f:f2:f2:75:5b:37:
d5:60:be:21:ce:c8:8b:d1:2d:34:19:64:c6:2b:1c:
63:aa:36:3f:5b:29:6e:5a:5c:77:d7:e6:64:e4:03:
69:b2:46:fc:a7:27:65:e2:33:d9:3c:39:d1:3b:5a:
6a:e0:ea:dd:ee:8b:85:d5:1c:98:1c:f3:aa:c5:da:
c3:8b:9d:cc:28:fc:80:93:36:5e:cc:bb:1d:f3:b9:
22:85:22:8c:58:73:54:e8:43:f1:ef:50:50:bd:f9:
f8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F3:FE:60:75:08:2B:E8:E5:88:32:9B:43:D7:61:BF:6E:7B:01:D0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.24.245.0/24
IPv6:
2a12:5540::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209823
Signature Algorithm: sha256WithRSAEncryption
4f:90:7a:c0:96:a7:ba:3a:3f:dd:5e:06:77:c4:f6:a5:48:db:
6f:fe:18:b8:f3:ff:e7:2e:f2:cd:ef:cb:3a:be:44:5d:e7:8c:
04:da:15:23:32:23:b6:b8:39:71:d9:51:5b:f1:2c:51:94:16:
7f:fe:37:33:cb:77:a5:61:4d:3e:3c:d5:11:cd:ca:87:86:31:
5b:26:74:b4:39:44:61:2a:36:e7:33:b7:c3:92:02:57:69:59:
4c:d4:50:67:34:2e:31:22:88:7d:f8:9f:0a:ed:ea:59:13:44:
07:f3:df:91:7c:0f:0d:00:2d:42:f5:71:5c:dc:81:ee:54:a2:
6a:17:49:17:69:66:f8:a5:da:d0:49:d6:c2:92:54:b9:b9:a6:
dd:13:0e:ac:b7:b7:03:13:50:a1:f8:86:6e:15:de:ce:c5:da:
ae:9c:01:2d:5a:a5:38:29:66:e4:3c:8a:58:2a:30:1e:1c:c6:
cc:10:e8:50:99:44:84:b0:fb:20:88:10:23:15:c3:31:03:0f:
c6:8a:2b:f0:5d:3a:a7:c0:e3:d4:e8:93:6f:af:d9:a4:d1:8e:
4d:21:27:2e:0a:f3:e8:39:e5:15:04:df:b6:03:7f:aa:a9:b4:
f5:aa:c3:dd:fa:3b:b4:f7:68:70:5a:fa:b9:d6:ce:2d:c9:9d:
26:d0:85:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:59:51 2024 by rpki-client on console-fra.rpki-client.org