Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer
File: LycJyzmcThaMy9oW2xNrW8i5bdY.cer (raw, json)
Hash identifier: ZOUN6GD1FBKo/hDL4kaQTYeGfgpBZslDptJDOujMFnI=
Subject key identifier: 2F:27:09:CB:39:9C:4E:16:8C:CB:DA:16:DB:13:6B:5B:C8:B9:6D:D6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8715623ECD653647DF152D6DBECE4FB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:32:00 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 198657
IP: 91.237.236.0/22
IP: 2001:67c:2b7c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:56:23:ec:d6:53:64:7d:f1:52:d6:db:ec:e4:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:32:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f2709cb399c4e168ccbda16db136b5bc8b96dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:76:64:f0:07:31:65:36:bd:fa:2e:70:b1:0f:
55:8d:dc:04:c4:c6:55:45:ee:8f:6f:4c:cb:df:f6:
08:3f:a2:39:e4:33:51:9a:2c:04:5b:8f:fa:5a:43:
91:06:f2:8c:5d:d9:23:4d:e2:a6:0c:99:65:e3:2c:
a9:a9:ba:5e:e1:a0:77:c1:4d:bd:fa:fb:c0:f9:25:
e6:de:9c:b2:5e:a3:1e:18:26:a0:53:db:47:8a:a8:
64:68:94:4a:ad:7a:dd:bc:59:3a:82:bf:87:f2:fe:
8b:97:b6:e4:e1:ba:c6:5a:46:12:3a:d9:ea:a7:19:
e7:21:96:f2:4a:31:89:46:51:fb:7d:21:71:36:97:
cf:e0:6c:53:b2:f9:49:ab:82:20:0e:e2:f6:3d:6b:
38:44:a3:96:d4:40:35:c2:34:eb:a5:80:10:76:74:
98:50:9f:4a:68:62:94:80:4c:e1:65:cd:55:70:8f:
79:16:40:ab:c1:9f:c3:99:59:f5:5b:c2:c4:fe:07:
48:31:ea:ec:9e:29:98:fa:66:f1:07:47:e0:d7:e0:
67:c3:38:9b:7c:7a:12:85:b0:38:46:dc:15:13:0f:
a3:83:8d:d1:e9:44:36:82:f5:c6:af:31:b2:05:30:
42:24:6f:7a:69:16:48:e3:0a:8d:68:e2:44:17:aa:
7c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:27:09:CB:39:9C:4E:16:8C:CB:DA:16:DB:13:6B:5B:C8:B9:6D:D6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.236.0/22
IPv6:
2001:67c:2b7c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198657
Signature Algorithm: sha256WithRSAEncryption
88:54:6a:10:67:fe:79:2d:66:0d:d1:cd:97:d7:c1:61:ad:57:
bf:a6:9d:bd:a9:68:a4:57:49:3d:b2:7a:cd:8b:4e:91:2d:25:
d7:ca:56:28:1a:f0:c5:30:ca:69:2e:61:b2:6c:81:70:6f:89:
ff:ba:b3:f7:2c:28:81:79:27:78:1b:8f:86:2d:51:a7:29:92:
69:52:76:ba:d7:81:0c:39:9e:cf:a4:83:d1:1b:fe:9a:d1:fd:
26:0a:eb:98:6d:66:a6:b8:d7:a8:39:b5:09:ca:2b:24:6e:81:
ef:70:92:92:ea:c8:fa:5b:2c:b4:d9:cf:75:4c:6e:fb:46:64:
bf:a7:ae:ec:5e:f5:42:f2:7f:ed:b5:b7:2c:dc:85:a1:4d:56:
f9:a4:5b:23:ab:08:bd:98:b0:bd:0e:f2:34:ae:46:53:c3:7a:
6c:92:ca:e8:a8:06:ac:34:53:14:1f:1b:b8:3e:c1:22:13:50:
bc:59:df:13:30:54:19:8d:5c:59:bc:66:b9:80:10:b3:8c:0b:
99:3a:25:41:46:5a:98:ff:d9:02:f2:2b:84:d8:c3:a5:ad:84:
75:89:72:90:96:08:48:84:48:1e:5a:81:6b:e7:ac:5b:ba:b8:
0e:85:25:07:df:5a:15:b0:36:4c:53:9d:b6:29:f4:d4:36:4f:
bc:a2:5a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:29:41 2024 by rpki-client on console-fra.rpki-client.org