Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
File: L_YYK-t7gshXPfi21RBE1sZyToI.cer (raw, json)
Hash identifier: gD2fYTtrPtGz47zKN2Nj7qAsmJg3fPocyVWHxzNE8Bs=
Subject key identifier: 2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018EA0799DDC6BA897D731D4541C25FAECC2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Apr 2024 20:21:48 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215426
IP: 91.198.95.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a0:79:9d:dc:6b:a8:97:d7:31:d4:54:1c:25:fa:ec:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 2 20:21:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ff6182beb7b82c8573df8b6d51044d6c6724e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:34:1e:7e:42:7c:91:9f:72:a3:a5:6c:86:f5:
67:0e:48:5a:8e:cc:27:b2:97:02:64:f0:42:24:2a:
b0:51:93:6a:55:ac:34:0f:65:ab:20:f1:a1:44:37:
73:d9:09:b1:b4:18:3a:a3:c2:ca:ef:6f:0c:ed:89:
57:14:e2:b0:96:f6:08:ba:0a:b0:eb:07:2d:b2:ea:
91:dd:14:15:9c:82:33:c4:73:a5:69:9e:ca:0f:57:
d2:26:4c:af:fc:55:ca:ac:ae:1c:30:60:e7:67:e4:
d9:1a:52:73:6b:12:81:ee:a1:e7:ca:ef:65:b4:2c:
b4:61:4f:bd:5b:0c:34:da:b6:1b:41:17:26:21:dc:
a8:b7:1e:04:f7:04:0f:36:5b:15:8c:28:c1:ae:f1:
f6:8c:b6:34:c5:3d:c2:05:4e:a5:29:09:fd:fd:74:
7a:77:1b:54:9a:76:fb:4a:71:4d:fe:cb:b6:71:8b:
dc:42:6c:29:7d:9f:46:f1:be:1e:6e:56:32:fe:fe:
ed:46:53:82:34:31:22:cd:a6:f3:91:49:e4:fe:c9:
91:9b:49:f2:d4:d5:59:ca:f1:59:0f:7a:9c:b8:0d:
54:71:86:bb:cf:f8:26:8d:ea:ee:53:18:03:4d:ba:
d0:d2:7a:b7:b3:e2:68:f9:dd:53:aa:d9:51:8a:84:
a1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.95.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215426
Signature Algorithm: sha256WithRSAEncryption
36:42:55:56:76:20:80:dc:7d:3a:a5:54:b5:a3:fa:b8:d6:a2:
ec:c1:e4:45:50:7d:a8:72:6f:25:20:f6:e4:7d:58:ac:29:72:
dc:47:7e:5d:f3:22:11:22:ef:d8:c1:b6:c5:64:b4:c2:98:7f:
08:da:57:43:44:29:d2:5e:a5:fe:f1:be:60:33:fa:7e:c4:00:
83:26:6a:ae:7e:e6:51:2f:81:a2:a7:a6:6c:6e:8a:8f:d5:69:
bf:85:33:60:ac:74:f0:7e:f9:66:a4:f9:38:f3:f7:4a:79:68:
ea:63:d6:38:9a:5c:58:bc:ea:c6:ca:d8:94:28:7a:f9:9f:a0:
54:a1:7e:09:3f:57:34:c4:b8:1d:59:ed:85:a1:a8:06:ed:c5:
bb:35:ee:62:a9:3f:ab:61:a9:19:6f:16:39:fa:c1:10:fe:d6:
8d:e6:fc:d3:7f:7c:61:d3:21:a3:0a:51:35:aa:ba:7b:74:94:
9e:83:8f:77:95:bb:97:37:5c:01:29:5b:08:c9:29:69:77:e4:
a2:32:83:10:f3:ff:39:ad:b8:3b:ca:70:f5:84:c3:9a:4e:e7:
27:e8:25:0d:4c:b8:53:23:82:4a:93:33:9d:79:a6:72:0b:56:
fd:c7:48:e7:89:58:56:93:1f:c5:16:f2:f2:53:b5:cf:fe:98:
cc:8f:fc:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:53:42 2024 by rpki-client on console-fra.rpki-client.org